Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
File: QTJyL2byeskHL9x-kx9uGoUTz8Y.mft (raw, json)
Hash identifier: iXdp0+RsbxDSag/rsTv2MCDKA10W4koxr0FWuuaTV64=
Subject key identifier: 4F:51:C1:97:03:A0:E3:62:B8:7A:A8:98:A1:E6:E5:C2:83:44:E9:98
Authority key identifier: 41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
Certificate issuer: /CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
Certificate serial: 0198D66138191136BA01E80CEB28FE152F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
Manifest number: 0163
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: QTJyL2byeskHL9x-kx9uGoUTz8Y.crl (hash: I0tJuQSe6WlQa9vpDIXnUroZ8mLThvBOm+yCJBFObTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:38:19:11:36:ba:01:e8:0c:eb:28:fe:15:2f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=4f51c19703a0e362b87aa898a1e6e5c28344e998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:83:70:11:51:b6:01:2b:84:be:91:4f:5d:
88:8e:38:59:51:45:7d:85:ff:83:5d:17:6b:51:06:
2a:57:e5:19:ee:80:62:f1:a3:14:50:6c:13:f7:18:
fe:a6:64:99:0e:50:a9:47:68:ef:6d:88:8b:82:b0:
fe:66:d9:87:8a:7a:61:a4:38:89:4a:fc:e2:35:f7:
bd:7f:19:5d:69:62:78:ab:be:a1:11:aa:db:63:58:
70:d8:24:80:ab:6b:23:aa:cd:75:af:e4:a0:8b:ba:
e4:2a:e9:e0:b8:02:08:20:50:cf:52:9e:dc:13:cd:
6c:55:98:68:15:64:0e:91:88:a7:f7:d0:5c:f3:1f:
1c:29:e1:58:00:c4:06:11:f7:7a:0a:b7:79:9a:a7:
d1:11:68:8d:80:e8:bd:27:4e:77:5d:16:80:13:7c:
46:be:e8:dc:4a:d3:7e:96:63:8f:7a:4d:c6:d1:e0:
17:df:22:ed:83:73:93:09:ab:57:8a:cd:5a:10:67:
33:d3:53:f6:42:b6:fa:99:d8:d0:6b:90:dc:d8:d3:
a0:54:d3:e0:58:e4:92:10:54:2f:39:17:20:66:f6:
ef:59:40:06:95:8c:07:ab:d3:d6:4f:d2:27:c3:1f:
ed:4f:fe:91:52:63:ff:61:2a:0c:b8:7f:f9:0e:29:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:51:C1:97:03:A0:E3:62:B8:7A:A8:98:A1:E6:E5:C2:83:44:E9:98
X509v3 Authority Key Identifier:
keyid:41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:48:5a:18:05:12:b2:4d:4d:10:55:0f:48:24:ca:25:a0:b2:
1f:7c:6c:75:d9:d9:35:d7:10:c6:24:16:75:48:88:a6:41:9f:
7c:d6:a6:d1:8b:a0:21:86:11:25:cf:6e:74:a8:7c:b5:c1:d8:
c2:6f:be:9e:78:f5:c9:3f:46:6a:96:b8:52:c7:a7:62:07:9f:
8f:89:29:51:f2:af:38:c0:8b:2b:1d:7b:8f:a9:52:a9:93:89:
db:09:e2:ef:cf:14:b2:f3:8f:18:7e:a2:c0:72:ed:4a:1e:dc:
c3:44:80:35:3e:99:d9:cc:43:f7:bb:d4:8f:91:32:a6:6c:75:
3b:9a:2c:85:4d:db:4c:79:ed:cb:2b:8b:fd:a7:9c:75:3b:ee:
7f:ce:73:26:4d:99:d8:9a:98:be:54:37:1c:5f:62:9c:1b:b4:
d0:8a:5a:e2:43:ca:59:d0:d5:21:a9:ee:04:71:f3:c0:36:47:
47:fa:98:09:2e:24:6f:39:ac:aa:f4:fe:0e:90:ef:33:69:8b:
95:64:75:25:09:92:de:4b:57:62:7d:4e:35:92:c8:6f:90:8d:
c6:46:8a:2f:e6:61:da:33:ed:b2:73:ec:24:6a:ad:9d:a1:bb:
94:88:cd:38:88:09:6c:48:f0:a6:c9:0a:67:eb:6b:0d:a7:8e:
a1:b0:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:42 2025 by rpki-client