Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: tnqVedfk4lgyNz118Q89/YctC5y2hiaVE3jnkCUQkWY=
Subject key identifier: 71:22:B3:3E:6E:5D:45:D0:85:DC:39:6F:C1:BF:ED:CC:CA:78:59:62
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 0198D5BBCAB6A753DA9D13678D42C8C8F419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0D32
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: FNa67GK9G9aBqEccyhM5KP1DuMbnm5NDEATSQ16klYo=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ca:b6:a7:53:da:9d:13:67:8d:42:c8:c8:f4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=7122b33e6e5d45d085dc396fc1bfedccca785962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:50:28:11:27:a6:69:46:06:36:a7:c6:02:
a8:0a:a8:1a:34:58:72:3c:ca:20:92:4e:a4:2a:59:
92:8e:50:fb:70:d1:fb:a4:ad:84:86:0c:bc:9d:5f:
91:6e:0d:bb:ef:13:bb:45:e0:dc:ad:81:ef:d0:08:
04:18:3a:b8:de:b0:09:35:f5:8a:bc:36:01:79:be:
ba:a2:16:bb:1f:7c:1a:6e:d3:a5:64:4c:5b:b8:99:
97:5e:a4:8b:39:b1:24:e7:4c:84:f0:94:ba:1f:39:
6d:03:e1:1c:9e:90:07:b4:17:ce:25:4a:68:e1:ef:
9c:f5:37:99:23:7a:49:a6:86:77:28:96:ab:1c:a5:
b6:9c:94:e0:aa:ca:a0:2d:e7:65:95:2e:53:1c:db:
89:8a:48:ff:65:86:c5:1e:80:55:1a:37:5c:aa:8b:
43:ee:12:51:10:34:4c:67:fc:dd:65:47:4f:81:cd:
a9:ee:81:62:d8:18:f8:a9:34:87:ea:c9:be:42:64:
e0:87:18:16:92:78:d2:99:96:9d:31:ad:5d:71:b6:
37:c8:38:ba:a2:71:59:ff:6f:d6:ff:38:9a:5c:b8:
c5:81:0b:8f:69:8e:30:9c:43:69:3e:25:f2:40:4c:
8a:e9:df:ab:a7:d8:43:d8:b9:f1:ee:95:9c:ed:c3:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:B3:3E:6E:5D:45:D0:85:DC:39:6F:C1:BF:ED:CC:CA:78:59:62
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:12:80:7c:1a:5a:4a:61:ac:75:4f:d6:c5:d2:f5:79:9c:ec:
ae:5f:ff:e8:43:b3:58:b3:30:20:ab:c1:d7:6d:d9:07:70:1e:
ff:4c:82:f5:c5:10:c5:bc:b3:28:2c:ea:80:d1:a6:b2:ca:92:
cd:41:7e:c0:75:84:fc:19:15:4e:3c:ee:33:0d:74:3e:3b:da:
f1:b5:51:99:f5:ea:74:15:39:97:a4:a5:ab:bd:6c:55:83:27:
c8:51:9d:ed:1b:af:51:6a:ea:40:4d:04:f2:90:ff:9a:f1:93:
7b:56:3c:56:98:ab:75:89:2e:f8:ea:71:d9:f4:5d:67:2d:03:
88:d0:ec:bb:cd:07:13:63:ce:4b:1a:bd:a8:48:b0:77:1e:c6:
71:22:5d:ce:29:41:53:95:48:64:2d:8a:9d:c0:0a:04:98:91:
0a:3b:d2:c6:e7:aa:46:64:d3:0a:b4:11:c4:07:92:34:fc:0a:
7d:23:67:3a:8b:f9:78:6c:b8:6f:9c:22:d7:13:5e:d7:26:10:
60:e0:d8:db:e6:8d:51:4f:14:95:c4:c0:97:7f:d1:8a:bc:af:
14:ab:a9:40:47:3a:db:d6:ac:de:2b:1a:5b:de:c1:c4:56:de:
7e:dc:86:bd:84:ad:fd:61:b3:5e:7e:5a:ac:ba:a9:e9:ca:9b:
25:fb:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:02 2025 by rpki-client