Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: FltFhLN2gZ3Yglp5tisDkG+/GuVurLbbbzWDiUVzFfk=
Subject key identifier: 91:BA:B8:A2:99:D7:97:E6:E2:6F:D2:75:44:A9:D0:A5:FE:BF:60:67
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019893366973D57C34142C9ED744628241D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 06C0
Signing time: Sun 10 Aug 2025 09:01:13 +0000
Manifest this update: Sun 10 Aug 2025 09:01:13 +0000
Manifest next update: Mon 11 Aug 2025 09:01:13 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: kOG/9E6EgGnhN9IlsFg0j4ZmhTKTEyqRSGs1WLc4TBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:69:73:d5:7c:34:14:2c:9e:d7:44:62:82:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Aug 10 09:01:13 2025 GMT
Not After : Aug 11 09:01:13 2025 GMT
Subject: CN=91bab8a299d797e6e26fd27544a9d0a5febf6067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:98:c1:c5:dc:14:a3:9d:24:8c:19:55:3d:
98:f6:58:68:bd:0b:fe:ac:bb:be:a9:b7:a9:a6:e4:
8c:83:e4:d8:d7:d2:d5:80:87:81:96:9f:db:b1:08:
53:d5:2b:71:00:4e:14:e3:c7:b7:65:ec:b8:c4:0e:
e5:d0:f5:58:b0:33:47:1e:92:27:f0:47:e4:fe:f0:
60:30:47:06:3b:b6:38:0e:20:89:9a:55:3d:79:45:
dd:7b:29:12:92:ac:fd:12:13:74:6f:11:21:2f:2e:
c4:34:fb:35:2f:f8:fc:08:f4:98:71:30:ad:ea:c6:
57:8d:ff:3a:79:4b:a6:9a:24:e2:2c:f6:40:05:dc:
53:11:2a:99:c2:a7:21:ef:8c:de:9b:c1:0c:c3:cb:
f1:86:7f:e1:f2:6a:ae:33:63:10:84:d3:05:dc:10:
9e:f8:e9:d0:02:7b:8d:37:c8:02:d2:e7:18:8d:f3:
11:72:66:a1:ee:f3:b8:6f:7c:b5:ea:26:ce:f9:6b:
2f:ff:77:b0:4b:14:5b:98:97:01:f0:21:18:2d:76:
69:a9:8b:c2:3e:4a:09:09:1a:ac:2a:ab:2b:2a:ad:
88:33:ea:1a:3d:02:d4:b2:c9:a3:e8:07:42:6d:e1:
9b:24:ef:89:6d:93:1b:81:cb:5f:09:5a:ff:2b:3c:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BA:B8:A2:99:D7:97:E6:E2:6F:D2:75:44:A9:D0:A5:FE:BF:60:67
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cf:19:97:7f:10:c5:44:99:51:67:25:2c:86:e7:01:47:42:
86:15:86:43:5d:37:f7:7b:92:0a:f7:73:0a:4b:b0:89:bc:ea:
05:9b:33:35:1b:30:2a:6a:ba:0b:18:fd:b4:8b:f3:fe:c2:c0:
d8:e5:ef:fc:9f:2a:1a:75:51:13:a8:99:73:6f:9a:82:a3:51:
e4:5b:8a:21:cb:e2:a2:d3:b6:22:4c:e8:17:bb:68:35:90:b8:
69:67:20:55:71:16:3d:4d:83:49:65:37:bd:6c:73:d8:bc:a9:
c6:f3:7e:b5:68:75:76:11:5b:ac:8c:ed:ce:57:d9:23:af:4c:
1c:e1:66:b3:38:2e:83:eb:01:f5:f6:33:83:f4:2b:72:b9:3c:
9f:85:17:44:3d:92:ce:8a:54:13:ff:6b:52:3a:04:f9:50:95:
61:2d:d1:6d:cb:88:29:38:80:2a:15:fe:77:83:d9:5d:ab:5b:
b6:b5:cf:3a:2a:56:24:85:9d:e1:b2:db:e7:e4:b1:a8:eb:34:
57:d6:93:09:3b:d5:81:c7:d9:c9:83:6d:19:af:9b:de:50:c5:
8d:f2:06:cd:c7:a9:ac:b9:7b:cd:c5:91:36:74:1a:26:34:46:
e5:38:17:ff:c8:31:96:13:32:52:e2:cf:a7:84:fa:4e:ed:78:
63:f7:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:21 2025 by rpki-client