Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: 5XCvidp3HCQ4HRB0jX0HIHfij2Uj2vfYkaUGoD0KzoU=
Subject key identifier: 2C:39:5E:0D:90:41:5F:62:14:B7:DD:D2:33:4E:A8:3D:E4:CB:DE:E7
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 01989FDED30B7CB0E7ED95170FFCBD52F8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 1282
Signing time: Tue 12 Aug 2025 20:00:36 +0000
Manifest this update: Tue 12 Aug 2025 20:00:36 +0000
Manifest next update: Wed 13 Aug 2025 20:00:36 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: IlJHjvs9PDbtuvzWc9wBo+wqwBQwvX2cNLMDMgMiMH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:d3:0b:7c:b0:e7:ed:95:17:0f:fc:bd:52:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Aug 12 20:00:36 2025 GMT
Not After : Aug 13 20:00:36 2025 GMT
Subject: CN=2c395e0d90415f6214b7ddd2334ea83de4cbdee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9e:ad:17:63:5b:db:c6:3b:c8:32:5a:74:91:
d7:1a:82:26:43:db:c3:0e:3a:90:5f:dd:c6:ba:a9:
b9:51:31:e4:e8:d4:52:ff:20:21:a5:54:00:3e:6f:
7a:1b:05:ab:36:28:98:73:03:24:10:82:b8:3a:1f:
df:0f:34:45:5d:0a:b1:57:04:1e:5c:e3:4e:01:eb:
03:de:c0:75:9f:38:63:92:db:b0:89:bb:7b:f4:8c:
de:f1:d1:2f:da:5c:24:c3:e0:cb:68:21:80:98:48:
d6:dc:1f:66:42:7c:fa:e3:ce:59:88:c4:79:05:28:
0e:36:b7:21:3d:b5:21:69:74:57:31:c3:b9:25:a4:
0b:d9:73:69:48:8a:58:50:5e:c3:b6:7c:3e:15:91:
9e:ac:fd:b2:36:37:25:78:ba:4d:9b:fd:9a:94:76:
95:0c:31:b5:53:a3:8c:31:71:ca:53:c6:ff:d7:35:
ca:48:55:d6:e0:b2:93:d4:75:5b:8f:96:39:12:08:
99:ec:3d:77:16:44:fe:4a:52:0e:8f:e8:0d:35:80:
8f:b2:36:0b:2a:01:b1:e5:1a:bc:f1:c5:a4:45:e4:
56:7d:bb:aa:b2:29:bc:22:16:d3:8a:13:66:d2:3c:
e5:c7:09:c5:64:97:5b:85:2a:7d:79:e8:a6:21:6c:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:5E:0D:90:41:5F:62:14:B7:DD:D2:33:4E:A8:3D:E4:CB:DE:E7
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:55:b4:88:4d:e0:91:ea:73:40:aa:cc:ee:7f:eb:c3:fa:7d:
76:3c:e8:2f:e9:31:e3:80:be:c9:23:20:56:5f:0d:9d:29:40:
76:bb:10:d3:c0:27:92:f2:f3:13:c9:a5:98:2c:33:b7:99:d8:
de:04:8c:8b:30:7f:cd:8e:55:d0:b5:9d:58:01:00:72:85:f4:
ad:c5:24:a0:32:74:c6:c1:8a:da:e0:a1:55:9b:19:1b:1b:be:
42:e7:88:ba:7b:26:dd:15:d9:06:61:d5:71:13:96:e9:17:05:
d2:1b:56:0a:a8:51:87:ff:9b:6f:5d:bc:e3:21:03:19:65:16:
3e:33:7d:fa:25:d4:37:e3:41:f4:ce:13:9b:76:c7:76:6f:02:
52:ce:d9:4a:45:87:6f:48:a1:1e:81:ce:67:94:d5:f1:86:6a:
4c:d6:fe:4e:8f:3d:33:40:0b:d1:08:0e:67:98:88:9e:87:c0:
68:ef:5a:81:4d:88:4b:cd:00:97:e9:dc:29:ec:db:9b:b9:77:
98:49:dc:06:80:9a:77:c7:e7:17:5b:ed:cf:38:48:c2:c0:7d:
2b:f1:44:d0:83:2d:2f:4e:15:ef:ca:bc:13:dd:0c:ac:87:6d:
db:e5:60:a6:e3:69:e3:95:55:29:7c:c5:27:a8:73:79:2b:bd:
6a:a7:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:15 2025 by rpki-client