Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier: iI0zaCQLK8w2BSjBr3RQ7c2QHL74wNj/qefUTQJBaCo=
Subject key identifier: 6C:E2:FC:6E:E8:86:2F:28:90:7E:39:38:D7:29:C4:13:C9:1B:2B:BB
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 01987B9C5481808F7EEF2741BE2B7F23C3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number: 062C
Signing time: Tue 05 Aug 2025 19:01:39 +0000
Manifest this update: Tue 05 Aug 2025 19:01:39 +0000
Manifest next update: Wed 06 Aug 2025 19:01:39 +0000
Files and hashes: 1: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: sFmUdt7ne9yUQtKKfRsnSwvIq8FdP9dAhcFJerXTTHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:54:81:80:8f:7e:ef:27:41:be:2b:7f:23:c3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: Aug 5 19:01:39 2025 GMT
Not After : Aug 6 19:01:39 2025 GMT
Subject: CN=6ce2fc6ee8862f28907e3938d729c413c91b2bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:b6:45:5b:43:1a:2b:a6:a4:46:b9:59:b0:
30:ee:28:e5:78:89:62:14:3d:4d:36:9b:f3:7a:32:
19:f4:3e:ae:e9:a2:93:80:1c:15:00:34:56:8d:97:
60:06:b8:f6:bb:f7:36:b5:7e:5a:82:72:66:bf:ad:
45:5d:be:3c:40:6d:47:fc:73:9f:e4:63:0a:7e:34:
a9:be:a9:88:56:51:ba:fa:ab:38:88:9f:c9:9c:cd:
17:7d:26:03:94:62:84:0e:2a:69:7c:9c:80:bd:09:
24:50:60:d1:65:ba:c4:b0:00:f6:88:bb:17:1c:e6:
c7:cc:0a:20:79:e4:a3:c3:c6:31:58:2c:f3:66:a8:
5e:60:64:67:dd:a4:c3:4f:af:a7:b2:4f:fd:41:66:
86:78:69:2b:ac:95:56:e1:f9:65:a9:43:ef:83:00:
88:3b:27:93:3d:11:48:97:7c:e5:b6:6e:43:b2:7c:
5a:61:04:58:84:df:cd:bd:9a:21:d0:39:bd:d4:c6:
85:cf:94:45:bc:5e:85:64:6a:6c:86:b2:8e:1e:f5:
98:e2:be:b0:4e:df:4c:8d:29:a4:6e:4b:d1:26:68:
56:d0:63:25:7d:dc:bf:b4:e2:d0:a2:60:8c:38:d8:
85:f8:c8:b2:ca:5e:07:33:53:81:52:0e:a9:9e:0e:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:FC:6E:E8:86:2F:28:90:7E:39:38:D7:29:C4:13:C9:1B:2B:BB
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a0:3f:46:7c:a3:2c:c3:9c:ba:2b:c5:e1:dd:73:1b:0c:f5:
50:58:a2:49:4f:4f:4e:6e:b5:fa:33:f9:4b:28:46:4a:45:08:
b8:5e:a7:25:38:41:82:da:be:a8:f6:5b:cd:d8:4f:32:c6:df:
51:28:5d:86:95:73:c5:ed:f4:d9:fe:55:f9:12:57:fb:b7:19:
2c:71:ce:ac:be:f6:a1:40:08:4a:fc:cc:4f:f4:db:5d:44:e2:
7e:a2:29:b3:c1:3f:4a:e1:74:a1:2b:8b:f4:21:36:e3:03:d8:
34:8c:d8:1c:8b:20:25:b8:69:f7:29:86:47:c4:77:ea:0c:e5:
30:6e:e1:d4:07:41:fa:ea:41:1d:96:c6:c2:b4:64:47:14:09:
d7:84:21:a1:74:4d:75:32:73:a8:b5:f6:17:30:57:34:1a:b5:
e5:ac:43:3d:fe:8a:52:ea:e5:8d:fd:08:d8:9a:ed:65:55:c6:
50:25:58:8e:ce:d0:91:0c:ba:c2:ce:c9:f6:c9:9a:73:88:43:
74:64:a2:65:bf:f6:b1:38:67:ea:e1:83:06:20:be:e3:70:90:
cc:9d:ac:99:07:2f:ad:54:be:23:21:8f:d2:2b:31:cb:8d:71:
73:43:c3:5b:dd:b1:fb:3c:b5:ce:12:a3:1a:0e:44:c3:55:7d:
f3:4a:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:05 2025 by rpki-client