Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: GC++OoiZNZz7ljG4bFQzR1wlXINyFQ14NhtFN3wPkj4=
Subject key identifier: D0:7D:25:DA:31:A7:8C:89:08:60:57:38:3B:4F:78:BD:2D:67:0C:F4
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 0198D5F1ACADEE863521CAC825BD2BF1E717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 129E
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: zECXPja7GzK+dH2xReOTr5aRy3H62MGHRxUwvkNbw30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ac:ad:ee:86:35:21:ca:c8:25:bd:2b:f1:e7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=d07d25da31a78c89086057383b4f78bd2d670cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:21:06:94:22:cc:a1:d0:a7:65:b2:fa:c0:
98:c5:13:92:54:d9:ff:97:3e:00:6a:89:11:18:32:
92:96:f4:34:cd:02:07:3b:f1:50:f3:72:11:91:2d:
19:b6:96:d2:98:5a:e3:7e:99:b1:c3:42:fa:dd:dc:
09:5f:e0:36:d7:f1:fe:3e:85:c9:00:6e:95:e4:29:
04:46:82:00:16:65:63:36:7c:e5:64:37:46:ec:f4:
52:3d:cf:d3:21:7d:d8:f7:17:10:42:b3:f7:d5:ea:
2e:c6:ab:ac:b9:13:78:26:ab:47:6d:ee:d0:a1:21:
df:6b:b1:e8:a7:29:b1:40:a0:e7:88:eb:f0:97:e7:
2b:8b:74:94:76:5a:55:45:55:56:81:20:15:a8:61:
08:a3:d7:36:48:cd:3c:84:78:63:7b:df:f3:a4:b1:
2e:21:54:cd:38:32:25:b8:4d:9d:65:69:d1:7b:4f:
7c:3c:fd:c8:1c:30:d2:a9:8c:2d:45:2d:0c:3c:ee:
16:eb:58:ea:4d:d0:9f:37:0d:1c:7b:46:a0:6c:9f:
ee:67:9c:70:84:51:fd:09:dc:3a:c9:e3:59:f1:9b:
62:e4:61:b4:61:ac:57:77:1b:6a:e4:2d:fc:08:cd:
07:43:e2:3b:b0:9d:af:e6:54:45:95:3e:12:c0:50:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:25:DA:31:A7:8C:89:08:60:57:38:3B:4F:78:BD:2D:67:0C:F4
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:af:20:ab:7c:42:b4:a5:a8:db:88:d4:3a:b7:ec:cd:70:3c:
53:85:ea:9a:1a:4d:8e:6a:22:50:d2:e4:99:d2:f8:8b:b6:ce:
40:9b:78:a0:89:ff:c9:4d:c6:07:ea:34:f0:ea:44:d8:f6:ec:
72:c8:2b:85:23:c2:83:88:71:36:8b:d7:9f:4a:37:5d:c8:3b:
4e:32:e8:67:cd:8d:36:04:ac:0e:da:41:26:20:e8:17:5a:20:
8f:af:d4:c0:d9:e2:61:09:86:a3:94:ef:13:55:92:94:6d:64:
d2:9d:78:1f:23:9f:23:54:1e:d5:ed:b0:ec:43:5f:49:f1:9a:
1e:f7:8e:76:69:ca:4a:26:da:50:47:72:ad:37:c0:da:a4:fa:
e6:af:6e:76:64:ef:98:79:b7:ca:d3:13:0e:bd:df:50:46:f8:
c5:7f:70:08:ca:20:d1:e5:86:dc:b6:f4:a3:4a:45:04:86:18:
2e:e0:d2:19:0a:1a:b6:60:62:17:30:9a:d2:9d:b0:94:38:0b:
7d:68:81:e9:8b:ad:f0:59:4b:44:3d:64:7e:97:20:95:d6:9a:
22:c0:00:7f:ef:9e:c3:4d:c4:6f:ff:05:61:ea:69:50:35:a8:
4d:86:7a:8d:fc:c8:54:73:77:fe:a8:3a:4a:45:e6:f2:46:ed:
d1:49:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:13 2025 by rpki-client