Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: MafOXgNo7q8OesMAfW869pkBMLCmzfF5MVDrer/jg2E=
Subject key identifier: FF:3F:06:51:6C:F4:AD:6C:4A:A8:4B:1E:53:B0:EF:68:63:A8:A8:23
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 01987418B52DFD0FC27ADD1765AFBE36CC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 08:00:32 +0000
Manifest this update: Mon 04 Aug 2025 08:00:32 +0000
Manifest next update: Tue 05 Aug 2025 08:00:32 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: vPJENfGaXLXsJGWtXr+gQSI/r6S6H84oUZw1KjmrJPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b5:2d:fd:0f:c2:7a:dd:17:65:af:be:36:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Aug 4 08:00:32 2025 GMT
Not After : Aug 5 08:00:32 2025 GMT
Subject: CN=ff3f06516cf4ad6c4aa84b1e53b0ef6863a8a823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:7c:0a:bf:fd:70:fb:de:6b:1e:b5:c8:bd:
fe:ce:51:92:e3:c3:b2:60:48:4f:13:57:23:94:16:
2d:c5:ef:e3:1d:4f:37:fc:df:58:d8:72:9d:98:e7:
03:75:2e:ff:d7:c4:93:da:dc:84:f3:b4:2e:c5:df:
42:2b:0f:61:9a:70:c9:8e:97:a0:bd:85:44:2d:69:
75:33:a9:f7:c1:08:ef:0b:0e:78:9c:b3:82:32:c4:
99:42:ec:c9:8a:73:eb:96:47:6f:96:ca:4d:3b:10:
de:3d:31:e8:b3:fd:a3:35:95:4f:35:c7:dc:7a:80:
06:89:13:06:1f:21:0b:90:fc:9b:bd:fa:97:b9:01:
b6:22:1e:5d:08:f3:a9:29:a4:5a:80:61:13:e4:53:
6c:cd:0e:8d:d3:3b:89:bb:06:db:3f:3d:09:52:16:
30:23:e8:12:8c:88:87:9c:6e:24:2a:8f:5b:a9:c6:
70:ab:5c:b2:9a:6d:cf:ff:5c:61:84:91:c1:c6:bd:
41:6d:33:7a:bb:39:8a:00:66:1e:7e:50:d3:51:4c:
a4:ad:f1:7a:c7:c9:a4:59:4c:cf:f5:cd:e7:64:88:
76:9b:b3:f7:7b:fc:83:5b:25:f0:66:ca:b2:8a:2f:
2c:6f:1c:bb:f4:db:cc:12:45:9d:ca:b1:fc:64:4b:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:06:51:6C:F4:AD:6C:4A:A8:4B:1E:53:B0:EF:68:63:A8:A8:23
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b0:b9:25:4e:0b:46:4e:34:f9:ea:05:5e:6f:4a:75:5f:a8:
47:d0:59:55:c0:91:10:3f:e0:e5:87:ca:2a:1a:80:46:67:78:
7b:71:c6:60:40:15:3f:f0:4b:27:84:0c:21:c1:03:5e:eb:ef:
14:ff:0e:0b:f4:08:8a:e3:06:1f:a0:b0:c9:2f:e0:48:a1:f3:
ab:18:c9:cd:8d:fa:88:c4:aa:43:b5:20:8c:a2:8b:de:f6:51:
a8:12:af:1d:20:41:68:65:5d:61:4d:3b:da:ef:a5:bf:6f:62:
50:45:35:d0:0d:37:dc:01:eb:93:0b:75:e5:99:c3:f7:3a:aa:
ab:83:fb:13:fc:03:3b:69:66:be:5b:69:3b:3d:50:2a:6b:24:
97:16:a0:27:3a:07:33:0f:4c:1c:61:27:ce:2c:a8:5c:be:5e:
63:8d:b6:11:9a:58:7c:8d:6f:3b:de:2d:de:42:32:55:1d:f0:
32:fb:6c:8e:6a:23:0c:d0:d9:d8:13:33:c3:6f:e3:36:c1:43:
73:0e:80:fd:13:a9:90:48:17:3b:83:04:88:eb:15:50:f5:04:
6a:66:8b:61:02:53:88:38:59:e0:4c:7d:ee:29:71:bd:5d:6c:
c9:c5:6b:40:56:eb:19:9f:19:39:7d:c4:9c:f7:8e:4e:ee:72:
ff:75:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:14 2025 by rpki-client