Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: nc8TLnKcEDi01Tmh9WatbQPhWpiSMPlT9DsO83NKjGc=
Subject key identifier: EF:11:62:72:6C:E4:54:E6:8C:E6:41:C6:5A:D9:08:A4:5E:8C:2F:D1
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019768F2B48AF9FAFC5DF9D2EEED96ADAAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 11E1
Signing time: Fri 13 Jun 2025 11:00:25 +0000
Manifest this update: Fri 13 Jun 2025 11:00:25 +0000
Manifest next update: Sat 14 Jun 2025 11:00:25 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: EewlTNfskE4ZWOCn2AKuLGomfii0W+sMG30WuL5DYB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b4:8a:f9:fa:fc:5d:f9:d2:ee:ed:96:ad:aa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Jun 13 11:00:25 2025 GMT
Not After : Jun 14 11:00:25 2025 GMT
Subject: CN=ef1162726ce454e68ce641c65ad908a45e8c2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:92:15:7c:aa:23:70:d4:d3:49:40:c1:f6:
a0:15:72:f7:2f:83:ca:9d:f1:d9:a1:b9:ab:85:4d:
3a:38:7e:a8:a0:e5:ae:e9:ac:4c:0f:b0:94:9d:b3:
14:4e:cb:21:8e:a5:97:42:ab:e9:18:62:94:58:90:
d0:aa:1c:c9:cc:53:c8:4a:55:56:42:66:91:59:02:
67:c4:3e:cc:3f:42:68:52:a5:eb:11:da:18:18:08:
76:92:90:39:bd:13:de:85:a7:88:f0:2d:0d:93:f3:
13:5d:c0:1b:99:9f:c8:2c:18:3b:40:8d:08:31:ac:
ab:49:82:57:9a:ad:3b:93:96:fd:b0:89:4b:e6:e7:
35:c4:0b:b0:2d:a6:2c:9b:97:b9:fe:89:8f:3c:7d:
bb:59:a8:c9:9f:f2:bb:5d:f5:79:77:71:90:d1:2c:
e6:dc:d7:70:0b:76:55:07:de:67:ab:e6:dd:ff:60:
19:4b:89:70:df:d2:32:7f:08:5b:32:87:cc:0e:4a:
0b:5c:c6:cb:df:fe:ef:e9:3c:f2:ed:55:cd:f6:29:
44:d2:5d:9d:6d:48:4a:0d:ad:f9:dd:e0:ad:85:05:
00:7d:cd:52:17:6c:e7:2e:b4:c0:a0:ed:8b:e9:04:
6f:39:76:23:fa:3a:b6:a9:bd:45:3f:57:74:d6:1d:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:62:72:6C:E4:54:E6:8C:E6:41:C6:5A:D9:08:A4:5E:8C:2F:D1
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:20:04:df:be:07:7d:c5:ce:b1:92:06:a4:78:65:dc:70:b7:
12:8a:a0:98:6e:78:12:3d:87:42:8a:6b:90:2a:e6:13:68:74:
7b:3c:6c:27:27:b8:30:2a:51:9c:ec:c1:f8:41:50:16:e2:d1:
fd:d6:7f:d9:84:96:75:3a:14:d7:8e:58:45:d8:90:ae:f5:74:
a9:18:54:d9:5e:18:ce:02:00:20:4e:52:a1:15:02:05:a3:59:
e9:9b:bc:28:3c:a9:f0:d1:fd:4d:7e:07:34:53:18:2a:60:8f:
e0:96:8e:5a:e7:16:47:ce:47:bd:ce:19:cc:52:86:62:2a:15:
7e:d1:c9:4d:58:fa:fb:13:71:9b:f9:df:ca:78:57:02:40:e2:
b5:1b:10:d9:0f:05:a1:ad:bd:8e:49:ba:b7:a6:57:39:f4:b3:
c6:63:57:da:a9:75:b5:19:67:c6:c4:3f:93:59:1b:41:e0:b4:
10:da:05:05:98:db:56:18:36:21:d2:b7:8e:0f:e3:cb:64:52:
bd:6b:ee:f2:d9:2d:34:ec:0e:ea:37:ed:62:a0:5e:f9:60:10:
9e:b2:62:92:22:d5:e5:46:7d:fc:75:38:96:22:50:0e:52:d5:
7d:b5:d4:64:b8:8d:dd:0a:8b:0d:5b:f7:b1:c6:3a:0d:b5:dd:
b0:d0:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:06:09 2025 by rpki-client