Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
File: rqVXfKLwuifftTsIjifG2Uty7_c.mft (raw, json)
Hash identifier: 2gP6JG8rfyEExKJmGaDIu7USaymzUz/hlLyoNIIjcWE=
Subject key identifier: 42:60:2A:70:AA:4E:B5:DC:87:A9:C8:AF:23:CC:3C:F8:DC:36:00:EE
Authority key identifier: AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
Certificate issuer: /CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Certificate serial: 0198D65F3A7F6360CD9592E30C012A57032A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
Manifest number: 0D3E
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: rqVXfKLwuifftTsIjifG2Uty7_c.crl (hash: lesYdHgjby4Vh/NwPSxtFv78lbelgMwV6SuOteGjBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3a:7f:63:60:cd:95:92:e3:0c:01:2a:57:03:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=42602a70aa4eb5dc87a9c8af23cc3cf8dc3600ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:6a:75:0a:1a:b9:b0:c7:a9:85:f7:d5:9f:
b0:79:54:61:82:94:af:63:36:5f:c4:5d:18:fb:aa:
3e:19:e7:f6:e1:9d:21:82:ac:d7:c2:11:b6:4d:ac:
7b:0e:f5:df:2a:cd:81:1f:57:b5:6d:cd:f2:63:1e:
29:12:4e:fe:7a:f3:70:bc:e1:09:0e:09:60:fc:49:
44:63:15:d8:34:e7:c6:63:22:dc:e4:55:44:8e:52:
7b:ab:d1:77:67:c3:f8:d2:ea:68:4c:1f:07:82:db:
4f:80:10:37:70:24:0f:59:74:c6:a2:86:a3:fb:26:
4f:77:ce:71:59:c3:72:b7:9a:fe:77:f1:e1:53:a8:
cd:c5:ad:2f:99:90:14:13:de:c7:d3:32:20:b8:36:
76:9f:bc:e7:73:9a:82:b1:a3:30:23:1d:47:08:f0:
0a:de:f1:c5:1a:cb:a3:af:73:e8:84:4c:f7:18:ec:
32:93:c6:c7:6b:f5:6d:12:eb:2c:bd:ba:c4:3d:06:
08:74:4a:37:91:ab:70:88:9a:9a:51:a3:1e:9c:cd:
14:89:0b:ed:f9:28:85:3e:ec:ab:2f:41:1c:02:63:
82:1d:89:d9:1b:28:16:6e:e0:26:a1:35:5b:3b:8a:
c8:cb:ec:84:15:0f:de:cd:73:45:32:7c:06:f7:96:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:60:2A:70:AA:4E:B5:DC:87:A9:C8:AF:23:CC:3C:F8:DC:36:00:EE
X509v3 Authority Key Identifier:
keyid:AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:ab:0e:00:ce:b6:c2:8e:24:14:31:19:ae:9d:d2:b7:d6:
a0:84:94:65:83:83:32:52:5d:0a:2b:28:c2:a6:3a:33:ff:88:
cb:35:e7:17:78:cd:1f:6c:f3:90:ef:e5:84:69:8b:9d:1d:f2:
9b:44:90:b3:9d:ad:78:b2:3b:3f:7d:90:31:48:c6:2a:c5:c3:
c6:1e:1a:58:28:af:fc:dd:4a:73:5f:0b:80:6c:11:c4:eb:be:
23:06:a0:3b:87:13:89:f4:1d:0b:2e:16:5d:c5:6d:fa:06:14:
46:22:a6:2f:f0:b4:65:c3:9f:27:da:f4:09:b5:10:4a:fe:bd:
68:84:cd:7c:87:2c:38:67:85:b9:88:b7:64:63:a2:f8:16:7c:
94:b5:02:ae:fd:3a:74:af:67:1e:89:29:92:d6:cd:51:38:ea:
a4:5e:b8:a0:2b:c5:1e:bd:30:68:7a:5e:68:6c:4a:2a:9a:7a:
28:91:48:2b:77:7a:29:87:11:3a:08:4c:bc:82:00:4d:fe:10:
0b:62:10:f0:25:5c:2f:47:e6:bf:8a:f2:61:86:40:66:3b:e5:
e5:f6:4c:27:c1:77:82:de:0a:f5:bf:0e:b3:63:bf:52:cf:7f:
38:0d:61:47:e9:16:7e:ba:e0:2d:78:b9:bf:96:70:d6:fa:b7:
30:00:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:41 2025 by rpki-client