Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: Ew8uOoEkwv5SugHMkTlFzZxUJ92+0iT2ia7XbFcGVxw=
Subject key identifier: 94:F0:EF:39:21:0E:3F:6B:11:A5:03:6C:E3:E6:7D:A4:19:12:E5:E4
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 0198D697FD2C60AA692A465C7E9948EC4810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:21 +0000
Manifest this update: Sat 23 Aug 2025 11:02:21 +0000
Manifest next update: Sun 24 Aug 2025 11:02:21 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: SjZ7jSULYBPlddTQlsqvY29lBw5N76SjDMTTzJxCeZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:fd:2c:60:aa:69:2a:46:5c:7e:99:48:ec:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Aug 23 11:02:21 2025 GMT
Not After : Aug 24 11:02:21 2025 GMT
Subject: CN=94f0ef39210e3f6b11a5036ce3e67da41912e5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:56:0c:fa:a3:6c:29:5f:35:3d:22:bb:b3:
41:30:3a:ee:6f:7c:b7:3d:9a:a9:bc:ca:6a:d2:b1:
6f:cf:61:c1:16:2f:d9:3e:5b:03:c4:73:aa:31:88:
f9:0c:e6:9d:52:9a:6f:c4:22:a2:1b:f5:6f:3d:a1:
3e:15:38:b5:a7:e8:97:69:4b:78:c6:69:8c:4a:17:
0f:be:ef:3f:bd:71:28:16:1f:bb:36:35:fe:87:4a:
75:e0:c2:e5:88:ac:af:f5:62:8c:70:d2:9d:34:72:
52:94:05:ed:25:e5:92:5e:17:21:e8:5b:a9:19:c0:
f9:38:ae:4c:f4:18:28:3f:88:3b:5a:a4:db:d7:bb:
48:b9:65:ff:cd:7d:98:de:97:07:06:c3:8b:49:59:
61:65:d2:bc:88:77:40:7a:e3:b2:16:5d:ee:98:a2:
6f:bc:ad:86:8c:97:9c:77:1a:f5:fa:57:3f:05:60:
f3:99:aa:31:3c:f6:72:91:42:bf:c1:2b:24:c6:45:
7b:69:3a:4f:35:9f:9c:94:77:17:b0:b1:b4:a6:95:
cc:f7:9e:60:d7:eb:84:b5:d1:81:19:c9:a6:97:57:
63:b3:32:e4:e3:bf:df:60:35:a4:e1:a6:60:5c:e1:
58:ca:9c:7d:a6:7d:69:ef:95:85:7b:18:5d:fc:34:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:EF:39:21:0E:3F:6B:11:A5:03:6C:E3:E6:7D:A4:19:12:E5:E4
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:25:e5:c6:d4:10:f2:ae:f8:d0:8a:c6:d8:51:9b:c3:f8:5f:
a2:bc:02:ae:df:a8:20:95:c8:12:9c:62:05:5a:81:23:c9:aa:
b2:f2:f8:0b:0e:63:6f:f2:83:56:31:6e:52:6d:2d:a4:a5:cf:
20:a7:27:92:39:fd:da:11:61:16:82:0c:64:d9:cd:7f:9f:f5:
cb:e8:90:11:ba:25:b9:03:5a:04:23:70:55:88:1f:66:df:78:
d0:fd:0e:d7:81:60:cd:12:8e:0e:6f:0a:4c:33:62:e1:ca:0f:
5c:f2:8c:87:eb:dd:6b:68:e5:25:ac:e3:8e:3e:f4:51:6b:db:
90:af:47:3f:88:09:ef:98:df:c3:63:f7:03:be:43:5f:80:af:
eb:0e:2e:09:e2:cc:c9:40:7e:81:6c:3c:15:4f:92:5e:6f:76:
1c:92:10:26:f3:37:5f:39:08:a8:b1:3a:c5:9f:ae:b0:29:44:
7a:93:03:58:d2:38:11:6a:19:37:61:3f:26:e5:80:b7:02:37:
ba:4b:bc:8e:d3:58:d2:a4:c6:a2:cc:28:ad:18:5b:94:2b:a3:
d9:97:f0:83:7e:e5:47:ab:29:51:2a:b0:d0:22:a5:96:98:0d:
ef:d1:ae:c3:24:ac:a9:04:33:b1:70:8a:8a:c1:56:bb:95:0b:
6f:f9:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:13 2025 by rpki-client