Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: y74qRSVEgCp3Ba0jxBpLv33xashAB95LlHIH/9olf84=
Subject key identifier: 21:7A:94:C6:6C:39:9C:E0:DF:26:4A:E1:A8:63:A5:ED:7A:F4:01:30
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 0198D5BBD6D57D9F9C06B8FB821E6A288589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 02EF
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: zCWbhqyikifR1Rf9i4ITta7vWMD+rLfuvb33VrlAW4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d6:d5:7d:9f:9c:06:b8:fb:82:1e:6a:28:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=217a94c66c399ce0df264ae1a863a5ed7af40130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:d8:a6:b0:cd:53:b0:3d:f5:ba:81:46:ab:
b2:10:19:e1:ff:00:bf:4d:7e:fb:40:76:a4:b3:3f:
76:d8:7d:fe:d4:ab:10:a1:3b:65:c4:cc:43:2e:f1:
af:0a:a0:4a:26:b2:04:74:d9:a0:ef:28:94:52:a1:
32:0f:54:90:09:2f:b0:99:6f:c5:ed:e0:ad:2f:53:
23:c2:41:2a:7b:cb:c9:8e:9b:14:aa:5d:d3:22:54:
ad:92:e1:73:32:fc:d6:ff:c4:ef:f2:60:16:9c:71:
68:0d:b8:ba:7a:60:4b:93:ba:c1:e4:ff:0c:db:c1:
d5:22:66:c9:48:e1:d2:92:8c:76:a5:c1:dc:75:02:
22:b3:fc:72:63:2d:70:f8:94:09:74:34:81:4c:d7:
72:11:b8:57:cc:e2:18:29:46:32:53:cd:52:d3:0d:
c0:31:0d:a9:79:70:64:f4:4b:1f:ea:9a:49:d0:65:
6c:4e:83:94:9d:93:42:e0:59:96:fa:8f:d6:f4:55:
f2:26:a1:4f:6c:20:10:2b:75:d3:7c:16:0e:3d:6f:
f5:e1:f5:3b:b2:c1:26:8c:0b:59:ac:ee:37:67:64:
97:a9:22:1e:19:ba:08:37:38:df:bf:5d:59:aa:be:
60:46:bb:54:ee:5a:59:c3:e5:ac:9d:d9:47:14:bc:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:94:C6:6C:39:9C:E0:DF:26:4A:E1:A8:63:A5:ED:7A:F4:01:30
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:32:77:b8:76:2f:56:28:64:b1:97:7f:2e:4c:c5:65:20:64:
e7:36:e6:1d:21:dc:e5:1f:bb:78:20:9d:be:43:a0:a2:f6:d2:
a0:a4:9f:8d:1f:49:98:ca:6e:f6:2e:66:3e:9a:72:3c:2c:23:
7b:76:32:b0:0d:6d:95:fa:10:13:e0:23:da:7b:65:c0:02:cf:
51:b9:2a:33:4a:7d:78:08:75:80:36:69:d5:4a:c6:c4:d2:fa:
bf:c9:e7:b0:9d:d8:6b:d9:c5:ba:20:4f:dd:1a:98:75:b1:2e:
78:7d:f8:c6:e1:62:05:f4:e3:d8:55:f9:f6:24:89:f6:92:fc:
d8:69:a7:8c:34:5b:37:3d:3f:6a:d5:81:8b:b2:ff:cb:24:14:
59:d3:66:21:cd:0a:a9:f1:72:7c:47:7e:6d:ea:a8:3c:ec:07:
ff:52:ab:fc:5f:b1:bf:71:63:16:d8:23:85:52:59:ff:8f:af:
50:d1:9c:80:e9:88:5f:49:37:ee:36:a1:06:14:4f:b4:32:79:
99:7f:8f:2c:0f:20:4e:49:cd:ae:5a:cb:b0:23:06:da:34:67:
c0:d8:b0:ac:6f:b3:4d:a4:f8:45:8b:8d:55:4d:e0:28:c5:bc:
d0:94:c0:2c:91:a8:bb:a0:62:ec:5f:fb:63:9e:1f:35:a2:1a:
0b:1a:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:35 2025 by rpki-client