Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: VJTNzMaDNoVqD6CKcc14Unwqc6zvq4QQPJfkXUzugPQ=
Subject key identifier: 8C:73:E9:3D:09:11:5E:5F:77:5A:BC:E2:A1:FE:89:C1:D8:87:2B:E2
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 0199FB7CCCFD99B7DB3B3574499CD89B7353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 1336
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: CAIzg65/s1Dyywv22d7biqClWH4jR+jSQ+gH2HxFL3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cc:fd:99:b7:db:3b:35:74:49:9c:d8:9b:73:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=8c73e93d09115e5f775abce2a1fe89c1d8872be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:4c:df:a1:9b:17:1a:da:3b:0e:f5:15:7b:
3d:5b:b3:3a:2a:67:69:33:58:13:99:11:95:7a:84:
69:d3:9e:8c:71:89:f2:4d:5f:ab:62:cd:53:a0:8f:
f2:2b:72:3a:1b:ae:9c:60:d5:0f:4d:a4:61:06:bb:
75:b0:73:86:ff:48:94:06:82:c7:d4:e7:45:ed:a2:
ee:78:c2:87:54:25:69:4d:72:d2:aa:bd:b0:44:98:
bf:a7:f3:ee:5b:94:f2:60:61:2b:87:db:3a:64:82:
55:e1:46:cc:85:70:2f:92:42:53:52:22:b8:d5:fc:
e3:02:b9:c7:dc:bc:10:f3:41:85:6c:c6:d9:32:0a:
ef:a9:90:b9:8b:0e:e7:43:ca:57:fc:97:7e:72:20:
5b:87:80:72:f5:41:05:95:e0:50:0d:7f:94:b8:7c:
3b:d6:f6:23:99:51:f4:ab:40:2d:ea:3a:f8:a3:39:
00:e5:11:10:fb:1b:0b:5c:3b:1b:b3:cc:e2:fc:5a:
0d:d3:40:f6:a7:60:cc:fa:85:97:36:3b:31:ac:9b:
1d:36:c6:ef:36:ec:70:47:75:6a:49:1a:d9:d9:0c:
4a:b9:87:c1:9a:d4:ef:1a:54:0d:00:6c:c0:4f:0d:
4b:15:9d:d9:ab:0b:f9:aa:77:11:55:3f:b7:0a:6d:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:E9:3D:09:11:5E:5F:77:5A:BC:E2:A1:FE:89:C1:D8:87:2B:E2
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8b:a3:a4:6c:1c:73:f0:cd:75:bf:c8:f5:5d:05:75:3f:4b:
18:80:40:5d:25:c2:aa:66:80:96:b9:02:80:dc:13:a7:90:66:
17:18:01:12:0c:39:1d:0d:01:80:ff:1f:c9:4f:66:b5:9d:97:
bd:53:e2:d7:ce:83:3c:b0:fa:1e:73:2c:94:09:b3:83:de:27:
65:ff:12:6e:7f:6e:89:d7:76:a9:d7:16:8d:e5:71:58:65:a0:
ec:26:87:f7:69:99:92:fa:6a:a9:96:a1:7d:75:e8:7a:a1:5a:
a0:b1:84:6d:ac:df:84:4a:4a:1d:80:e3:52:37:2f:50:d9:8b:
bb:38:05:6d:11:60:9d:37:95:74:6f:5a:1d:1f:0f:7c:21:84:
0f:e2:b0:94:9f:f4:08:db:d2:9d:91:a5:37:da:ce:87:4f:8f:
d0:53:b9:bd:b1:92:b0:24:f0:f7:54:f5:fc:80:d8:75:cc:09:
4d:66:94:2c:92:7a:0b:80:0a:16:55:c5:4e:8c:1f:b4:2d:22:
89:32:4e:9b:c2:cf:13:6f:e9:6e:01:86:c2:18:4e:6e:6b:23:
fc:43:69:e3:e5:84:2b:8c:99:a6:0b:f7:99:62:4d:49:a3:5f:
8c:d3:d7:ff:59:bc:e9:3e:ad:95:b3:9b:a0:e8:24:af:36:a4:
ac:2f:54:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMz9mbfbOzV0SZzYm3NTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZDBhNWY0ZThmN2UxM2M3Y2I1MzVjNjRmNzllMjBiM2Yw
MWQ2MjQwHhcNMjUxMDE5MDgwMTI0WhcNMjUxMDIwMDgwMTI0WjAzMTEwLwYDVQQD
Eyg4YzczZTkzZDA5MTE1ZTVmNzc1YWJjZTJhMWZlODljMWQ4ODcyYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/VM36GbFxraOw71FXs9W7M6Kmdp
M1gTmRGVeoRp056McYnyTV+rYs1ToI/yK3I6G66cYNUPTaRhBrt1sHOG/0iUBoLH
1OdF7aLueMKHVCVpTXLSqr2wRJi/p/PuW5TyYGErh9s6ZIJV4UbMhXAvkkJTUiK4
1fzjArnH3LwQ80GFbMbZMgrvqZC5iw7nQ8pX/Jd+ciBbh4By9UEFleBQDX+UuHw7
1vYjmVH0q0At6jr4ozkA5REQ+xsLXDsbs8zi/FoN00D2p2DM+oWXNjsxrJsdNsbv
NuxwR3VqSRrZ2QxKuYfBmtTvGlQNAGzATw1LFZ3Zqwv5qncRVT+3Cm02EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxz6T0JEV5fd1q84qH+icHYhyviMB8GA1UdIwQY
MBaAFKrQpfTo9+E8fLU1xk954gs/AdYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMt
YjdlZjA0MmM4NTdiLzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMtYjdlZjA0MmM4NTdi
LzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYujpGwc
c/DNdb/I9V0FdT9LGIBAXSXCqmaAlrkCgNwTp5BmFxgBEgw5HQ0BgP8fyU9mtZ2X
vVPi186DPLD6HnMslAmzg94nZf8Sbn9uidd2qdcWjeVxWGWg7CaH92mZkvpqqZah
fXXoeqFaoLGEbazfhEpKHYDjUjcvUNmLuzgFbRFgnTeVdG9aHR8PfCGED+KwlJ/0
CNvSnZGlN9rOh0+P0FO5vbGSsCTw91T1/IDYdcwJTWaULJJ6C4AKFlXFTowftC0i
iTJOm8LPE2/pbgGGwhhObmsj/ENp4+WEK4yZpgv3mWJNSaNfjNPX/1m86T6tlbOb
oOgkrzakrC9UQQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:09 2025 by rpki-client