Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
File: QTsVW4BGJkf4WUaogk0in-6q--Y.mft (raw, json)
Hash identifier: eLLaJOePr8MCAj0sZWOhCscf5gmTzDeTP8T/ahoM2+I=
Subject key identifier: A8:5C:70:27:72:AA:08:E0:B6:48:58:88:90:C1:5D:B6:42:8A:3A:ED
Authority key identifier: 41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6
Certificate issuer: /CN=413b155b80462647f85946a8824d229feeaafbe6
Certificate serial: 0198D73B0A66B4343D37CF8E8409BC10419D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
Manifest number: 01CC
Signing time: Sat 23 Aug 2025 14:00:27 +0000
Manifest this update: Sat 23 Aug 2025 14:00:27 +0000
Manifest next update: Sun 24 Aug 2025 14:00:27 +0000
Files and hashes: 1: QTsVW4BGJkf4WUaogk0in-6q--Y.crl (hash: SyAXJ7GJvrsgyOUN5ByZQPmvFnwNCbIMWmle+GFUh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:0a:66:b4:34:3d:37:cf:8e:84:09:bc:10:41:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413b155b80462647f85946a8824d229feeaafbe6
Validity
Not Before: Aug 23 14:00:27 2025 GMT
Not After : Aug 24 14:00:27 2025 GMT
Subject: CN=a85c702772aa08e0b648588890c15db6428a3aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:f7:f8:ca:35:0d:76:c9:23:f6:f2:47:2a:
f3:d6:2b:a7:0d:ef:48:e8:d4:17:2e:f7:ee:27:ad:
53:3b:14:af:8d:eb:1c:29:5a:1e:75:27:17:6c:b6:
4d:95:a1:57:64:25:20:e8:32:de:58:39:34:93:4f:
16:e4:75:97:41:05:86:3d:84:0e:51:67:47:af:be:
c1:5f:78:86:a0:e0:f5:01:2a:db:66:28:9f:e2:68:
11:ca:03:3d:8f:75:6d:12:d0:e7:da:3f:f0:cb:ef:
2b:f3:6b:0d:4f:79:0e:3a:78:dd:b6:fa:01:dd:21:
6b:9f:22:11:22:d5:fa:e1:e9:b2:1e:2a:c6:8d:f3:
37:04:d6:cb:33:3a:69:75:28:5a:e5:30:9d:cd:18:
b0:ce:25:4a:f6:78:af:ea:2d:2d:c9:5b:ca:8e:30:
6d:12:1a:34:a6:88:93:35:67:f0:2d:35:1a:c1:87:
ec:0d:0b:41:dd:a2:70:89:32:90:ad:bd:d9:b0:a5:
e2:42:8e:30:cb:35:80:e0:41:20:83:c0:6f:5c:c9:
4f:e0:ad:6d:ae:97:06:cb:0e:f0:eb:57:08:83:76:
9e:39:f2:19:be:53:75:86:b9:67:af:0f:0d:6b:a8:
4c:5f:41:c2:74:89:c0:0f:3e:7f:e8:95:5d:ed:52:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:70:27:72:AA:08:E0:B6:48:58:88:90:C1:5D:B6:42:8A:3A:ED
X509v3 Authority Key Identifier:
keyid:41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0a:5a:be:65:0f:08:3c:34:37:e3:96:d4:f9:5d:78:84:ef:
96:38:92:bd:49:b8:79:0d:a6:5f:e4:34:fb:7a:b0:e4:b7:58:
b5:50:a0:2d:99:1e:97:6a:0f:17:45:fe:60:29:a0:69:01:c8:
ad:d5:6d:49:3d:65:d7:f1:70:8c:a7:bf:1b:05:d1:ee:01:38:
da:e2:49:1d:be:91:87:04:26:56:14:d7:a7:8a:63:98:15:26:
77:66:a5:3f:f7:60:08:24:ea:03:53:53:0e:a6:08:0c:2f:bf:
3f:3c:86:6d:7d:37:ce:15:64:2f:4a:48:42:54:ac:53:1f:cc:
51:51:e5:21:4e:0d:c8:cb:12:68:8e:e1:4d:77:74:4f:38:fc:
40:3c:21:e4:e0:58:53:64:11:2c:67:05:eb:b7:e4:fd:30:75:
81:a2:27:f1:ea:21:79:d3:c2:a5:c8:1d:d0:51:86:84:77:87:
11:48:05:fd:0c:1f:8d:18:78:7f:3e:89:ed:5e:31:40:09:48:
0c:c1:10:9c:00:a0:50:d9:75:13:6b:56:dd:6e:76:8b:ed:88:
3a:dd:79:45:46:c5:45:09:6c:1a:7a:78:2c:96:2b:0d:22:07:
85:e4:47:15:3d:74:83:7e:93:9d:7d:70:9c:e0:1b:46:66:78:
59:18:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:15 2025 by rpki-client