Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: FQ/ObgdOZLQYs3WCDj568hYN8nQ3BpU3Qumg22ErXXY=
Subject key identifier: 37:42:2E:97:5C:4A:0D:84:C7:59:3A:5D:4B:E7:58:AF:1D:70:2C:4B
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019A4E86B821D2DDF599E3CB6E6ACC1933A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 1361
Signing time: Tue 04 Nov 2025 11:00:43 +0000
Manifest this update: Tue 04 Nov 2025 11:00:43 +0000
Manifest next update: Wed 05 Nov 2025 11:00:43 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: bCHQi3o99G6VSu87QVB/MY9Od9qXyy7cmHEwSyS5SJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b8:21:d2:dd:f5:99:e3:cb:6e:6a:cc:19:33:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Nov 4 11:00:43 2025 GMT
Not After : Nov 5 11:00:43 2025 GMT
Subject: CN=37422e975c4a0d84c7593a5d4be758af1d702c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:3f:1c:f0:67:63:d5:2e:81:15:8a:be:65:
72:a4:a5:ba:c4:5f:26:91:3d:9e:06:f1:b9:33:dc:
b6:40:e4:19:69:b3:9e:c4:1e:2c:84:d4:3d:9c:90:
7c:f4:33:77:35:b2:96:be:3a:03:43:b0:c8:8d:6f:
e3:25:f3:fd:c1:44:6d:a8:e2:f5:4c:7f:c9:4d:cb:
c6:4e:e4:5b:83:0a:d5:12:f4:4f:c3:3a:fd:bf:84:
bd:11:04:d2:f9:b8:5c:8f:35:8f:46:1f:d9:83:58:
25:b6:06:a5:4a:92:1b:96:6f:c4:f9:69:3a:f0:2d:
b0:67:a9:e5:d9:82:fb:8c:e0:c8:51:b4:ca:8f:53:
63:ac:8f:f5:b8:51:b9:a6:15:80:da:50:66:78:b6:
14:7e:c0:20:c0:19:c9:53:16:60:d6:3a:9b:65:df:
b3:ac:47:c8:fe:eb:46:ba:3a:ea:19:56:8c:34:91:
63:f8:ab:9c:94:44:b2:8d:7b:66:77:53:e2:f0:94:
7d:a3:95:6e:af:d0:fa:1e:96:22:44:7b:a0:df:6d:
3f:e2:b6:8d:13:9e:c4:54:b2:63:08:60:db:a1:82:
1e:47:62:e6:79:60:60:5d:f4:28:46:82:6d:ed:5d:
fc:f5:40:90:f7:ac:4e:85:40:79:2d:48:d9:c2:00:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:2E:97:5C:4A:0D:84:C7:59:3A:5D:4B:E7:58:AF:1D:70:2C:4B
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:66:8e:ea:cb:c7:96:a4:02:8e:37:80:93:f9:d5:2d:93:9d:
00:3f:27:f4:55:a6:4f:7a:f5:85:95:76:2b:28:5c:2c:3e:56:
51:ac:09:34:24:79:32:50:d2:85:9b:ba:e8:c3:41:49:f6:32:
11:a1:32:91:a2:bd:e1:01:66:83:c9:36:5d:a3:a6:57:7a:e8:
a1:38:16:8b:d7:51:b2:c8:63:b7:01:80:8a:3b:2c:27:0e:88:
fa:6e:38:c9:f0:b6:87:cd:82:b8:67:bc:07:28:a4:22:b8:bf:
00:42:7b:54:56:b7:f3:9a:a7:8a:5e:ce:45:ca:d7:c2:91:42:
b8:7c:e0:76:e0:dd:24:86:53:0e:f4:d2:6c:fa:68:39:40:56:
50:37:a3:ac:98:24:4c:ba:c2:6b:10:d2:e9:d2:c4:4e:57:f0:
07:7b:f7:5b:36:a0:c3:0b:56:64:d9:47:33:44:d5:be:80:5a:
af:32:fb:d7:3c:bc:f0:65:92:55:8b:0f:76:65:5a:2e:1a:da:
b7:99:f3:64:25:20:d8:27:49:6f:c9:45:5f:81:08:f1:72:35:
d0:fa:0e:c6:47:57:dd:6e:e8:6c:08:01:a5:9c:a2:ee:78:bc:
ed:a6:7f:cd:00:fc:f9:bb:64:a8:0a:7e:03:a0:06:3b:66:0e:
1f:e1:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:37 2025 by rpki-client