Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: ogTrhovCNym6c+a7ROQ7xv1+cazZ2boczX7+9v+HMzM=
Subject key identifier: CA:9A:E9:86:16:E2:3A:5B:AB:BE:22:FC:F9:47:73:17:FF:E7:C8:52
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 019896A5230B5E968FEC91A9F012053E6695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 15B9
Signing time: Mon 11 Aug 2025 01:01:01 +0000
Manifest this update: Mon 11 Aug 2025 01:01:01 +0000
Manifest next update: Tue 12 Aug 2025 01:01:01 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: VMCH4skDEsdI8hD1eO9iIoUPRgo/Ezj2Wj4E4mwaNfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:23:0b:5e:96:8f:ec:91:a9:f0:12:05:3e:66:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Aug 11 01:01:01 2025 GMT
Not After : Aug 12 01:01:01 2025 GMT
Subject: CN=ca9ae98616e23a5babbe22fcf9477317ffe7c852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:69:1e:ab:a4:e8:55:38:b0:24:8b:a0:b6:
6d:82:bc:13:d5:58:6b:14:b5:90:87:05:26:62:70:
da:80:ed:1e:dc:a4:5d:2f:55:fe:7f:c3:2d:c9:2b:
21:ad:82:09:ae:b9:bc:c0:25:be:ba:13:ac:27:07:
9a:fd:df:38:db:44:2c:1e:eb:18:d3:b9:c5:d2:ea:
1d:b0:67:d7:4d:09:f9:3e:8d:7a:53:ec:a7:e9:58:
e7:10:6b:8c:c3:20:ce:18:00:e6:58:d2:79:ad:2e:
79:aa:e1:69:b9:d5:5f:a6:65:87:a2:88:35:2b:02:
84:97:5e:7c:4b:13:79:6b:89:f4:9c:ae:cf:40:51:
dc:7b:3c:f5:27:b5:62:28:81:96:d2:d4:90:10:83:
b6:2d:05:b9:b0:79:20:56:a9:4f:42:ab:b8:b7:35:
9d:f1:aa:78:c3:5d:66:47:8b:e7:6c:6f:ab:15:01:
33:67:46:89:5b:0e:1a:4b:51:79:6c:a1:10:c6:c8:
fc:db:a0:cd:3f:94:e2:1c:26:1e:ee:ab:cb:23:4b:
07:b8:56:19:ec:12:e4:49:e8:4d:1a:5d:0a:61:02:
37:ba:0f:f9:fe:3d:f0:84:ec:50:0e:d9:b7:1f:a0:
16:78:eb:b3:89:87:eb:ee:28:ce:7d:eb:2c:b9:62:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9A:E9:86:16:E2:3A:5B:AB:BE:22:FC:F9:47:73:17:FF:E7:C8:52
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:13:7c:78:65:37:33:a2:12:75:4f:6c:45:80:b1:3a:3b:79:
6c:2e:9b:3f:d5:18:d9:1a:cc:5f:2c:50:2d:84:a9:49:b0:d9:
dc:dc:e4:95:d1:0b:1d:57:fc:9f:1d:3a:2e:3a:2c:ad:88:50:
58:11:52:84:ee:d2:3d:71:1b:18:c0:22:a7:33:80:ec:cf:9c:
f1:7c:76:2f:be:44:69:08:ef:b1:af:e8:de:6f:65:04:1a:a0:
2d:6b:70:c1:fa:12:32:58:2d:78:3a:0e:a6:6a:73:d2:c4:b7:
23:70:45:bc:83:fd:db:88:b1:e1:37:66:5f:3d:73:a6:cc:31:
2e:3d:53:9a:4b:16:ad:65:ad:8b:d0:b1:33:e6:40:4f:f4:65:
cc:75:86:40:13:91:7f:a8:8c:8d:79:a0:f7:de:8e:5a:da:16:
0f:bc:3f:1c:55:a8:ff:bc:93:3a:75:03:5b:7d:18:30:c2:37:
65:ef:c1:2b:28:f2:34:8e:b5:89:b9:68:d5:19:13:2e:d0:89:
d4:e5:88:f3:80:e5:f3:5f:6a:e7:49:b8:b9:b1:58:4d:30:e1:
7a:95:02:1c:c9:2b:87:d6:07:7e:65:ff:61:92:12:82:23:1c:
56:eb:70:76:d7:5f:de:d1:8f:0d:48:25:b5:e2:da:41:47:93:
eb:e9:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:28 2025 by rpki-client