Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: Pf0AKE1fzQ5aW7IDXrs/qwTwQRrTbCV+SfOqicZmoY8=
Subject key identifier: C3:51:A1:FF:B9:90:AE:23:04:EF:40:4A:46:40:DC:00:86:7D:92:CB
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 019785460600FA06AEC30196269DF898EB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 09A8
Signing time: Wed 18 Jun 2025 23:00:47 +0000
Manifest this update: Wed 18 Jun 2025 23:00:47 +0000
Manifest next update: Thu 19 Jun 2025 23:00:47 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: zbkAh2agDf90Yxh7eGplEyKT7IGEaMts0wecPBifOGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:46:06:00:fa:06:ae:c3:01:96:26:9d:f8:98:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Jun 18 23:00:47 2025 GMT
Not After : Jun 19 23:00:47 2025 GMT
Subject: CN=c351a1ffb990ae2304ef404a4640dc00867d92cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:21:63:70:01:d6:54:38:cd:37:ae:92:80:
4b:7c:7e:59:34:60:d9:0b:72:6b:d4:d3:86:46:45:
e3:0f:8b:32:cc:b9:5a:2c:cd:cf:81:d4:e2:37:08:
44:8e:84:32:73:a9:9e:37:11:18:93:05:07:6e:e6:
78:3b:00:d4:72:54:fb:cb:b9:20:19:b5:3d:83:62:
da:cb:77:2b:48:f9:42:96:07:39:5b:8e:3a:9f:7c:
05:59:06:27:96:24:d1:f5:fc:46:ae:a6:11:ac:9f:
5d:df:d8:91:9a:6f:6f:9d:ed:ab:ef:ec:94:b6:e1:
6a:a3:38:0a:6a:45:01:70:d0:b3:4b:12:9b:58:de:
59:56:4f:1b:c8:64:ab:ee:1b:a2:82:e3:12:14:81:
98:fa:de:fc:72:f2:f0:10:7a:66:d8:70:66:95:f5:
7a:63:ae:c5:b2:92:df:53:17:58:7f:bd:0d:a8:f7:
1c:64:c2:7e:57:88:ee:3c:cb:8f:ff:8e:71:20:ed:
ae:e7:6b:11:94:b0:f1:83:33:dd:65:e4:c4:b0:d5:
0c:cf:68:24:3a:ad:e6:51:b6:c4:37:3a:97:b3:fe:
97:e2:4e:ab:77:8c:9d:dc:ab:2b:f4:9a:9e:51:05:
e8:eb:a6:64:66:cf:7e:4d:cd:a9:45:56:57:c2:e5:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:A1:FF:B9:90:AE:23:04:EF:40:4A:46:40:DC:00:86:7D:92:CB
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:56:bf:fb:71:23:e6:2f:d8:a1:41:01:6a:0a:e7:a4:7a:19:
1d:ca:9f:ad:a2:2b:aa:f9:4d:6f:65:af:b0:64:a4:f1:1f:7a:
9e:f5:6e:9e:87:dc:e3:3e:b7:b9:9c:1d:3e:13:06:43:b8:a8:
64:a0:c5:ba:35:1e:ba:55:93:22:ed:80:57:af:e9:7c:ab:d8:
46:98:0d:6e:6d:3b:3b:9a:31:26:40:d3:78:5a:3b:7c:b9:c7:
bc:d5:5c:6b:d4:36:eb:68:fd:33:5d:9d:50:86:7f:5a:fd:ca:
dd:8d:6b:92:7b:a1:ad:2e:82:bb:78:31:be:28:8a:41:29:b2:
69:59:0c:ba:ee:40:3e:ee:d0:26:a3:87:b8:c5:57:88:7e:c8:
fc:7c:d8:dc:2d:c9:de:01:55:47:65:18:e4:43:7b:29:e4:e7:
d6:c2:af:a4:3e:93:67:e5:5f:a7:2f:59:ef:de:99:92:26:54:
d8:ad:b0:f8:26:74:9d:dd:89:66:ff:9c:ab:22:52:1b:56:53:
f2:9e:35:c2:72:bd:ca:8a:71:47:19:37:6f:36:93:02:57:96:
68:21:52:ab:f2:6a:53:c8:4e:36:67:a9:1d:95:c6:4f:53:33:
55:cc:33:4b:b0:12:57:d3:3f:ed:c1:9a:30:39:56:80:d3:a4:
05:79:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:23:14 2025 by rpki-client