Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.mft
File: q6N0OU_hCA1kohnX01pJRi6Omaw.mft (raw, json)
Hash identifier: SHw1i8KDQZBd22N/65AJpIRdPJIEAn8gxkKr+DiIcpI=
Subject key identifier: 12:5C:5A:4D:33:9A:12:8F:C6:D9:C4:D6:EE:2A:D3:F2:D1:33:FD:BF
Authority key identifier: AB:A3:74:39:4F:E1:08:0D:64:A2:19:D7:D3:5A:49:46:2E:8E:99:AC
Certificate issuer: /CN=aba374394fe1080d64a219d7d35a49462e8e99ac
Certificate serial: 0198481B56098CEEFE7E09F072AC1AA00268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6N0OU_hCA1kohnX01pJRi6Omaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.mft
Manifest number: 070D
Signing time: Sat 26 Jul 2025 19:00:07 +0000
Manifest this update: Sat 26 Jul 2025 19:00:07 +0000
Manifest next update: Sun 27 Jul 2025 19:00:07 +0000
Files and hashes: 1: q6N0OU_hCA1kohnX01pJRi6Omaw.crl (hash: AkwRWLiOdU6pJKLrbIp9kNqWyliU/PbeceXm47BludA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6N0OU_hCA1kohnX01pJRi6Omaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:56:09:8c:ee:fe:7e:09:f0:72:ac:1a:a0:02:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba374394fe1080d64a219d7d35a49462e8e99ac
Validity
Not Before: Jul 26 19:00:07 2025 GMT
Not After : Jul 27 19:00:07 2025 GMT
Subject: CN=125c5a4d339a128fc6d9c4d6ee2ad3f2d133fdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:df:64:5c:c3:96:61:ff:86:4f:15:4b:4a:
10:68:d2:ae:82:2d:26:1e:d6:c2:52:3c:e1:5f:3d:
41:c8:6c:a6:78:ad:f1:86:8d:11:de:1a:69:87:d6:
49:e6:85:31:34:5d:74:61:28:38:7e:7e:3f:a7:1a:
fb:f3:70:30:9b:8e:88:38:e3:72:ec:ca:c2:42:12:
b9:69:ef:ca:32:4f:b4:5a:24:ae:15:09:18:92:fc:
23:1d:c5:45:36:de:1d:80:d0:5e:c5:ab:f9:04:37:
bf:63:3b:42:b6:bc:77:25:37:92:20:8d:da:e5:06:
4b:a0:0b:91:ef:70:98:ef:90:9c:55:ce:6c:e7:a9:
2f:6d:63:42:9e:3b:07:09:5f:cb:37:41:18:a3:28:
f6:87:bb:d8:86:43:ee:dc:f0:81:3f:f2:30:96:a2:
19:ed:da:24:63:42:f0:65:54:94:f6:7b:a8:05:7e:
21:75:88:da:85:1b:77:45:12:a6:b3:b3:9b:1e:42:
fa:12:20:84:47:16:42:1b:87:e4:26:ea:de:cb:94:
72:fd:dc:ce:50:fd:cc:c5:b6:e4:a3:ff:1d:3c:5a:
90:cc:08:94:05:a9:94:60:bc:37:9c:dd:44:15:ba:
bc:73:63:5e:28:83:92:5a:d7:65:49:4a:54:d8:e8:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:5A:4D:33:9A:12:8F:C6:D9:C4:D6:EE:2A:D3:F2:D1:33:FD:BF
X509v3 Authority Key Identifier:
keyid:AB:A3:74:39:4F:E1:08:0D:64:A2:19:D7:D3:5A:49:46:2E:8E:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6N0OU_hCA1kohnX01pJRi6Omaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8104c0-be62-4017-91cf-22c87dff8d41/1/q6N0OU_hCA1kohnX01pJRi6Omaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:18:2f:25:b3:47:97:77:7a:79:a0:b6:68:fb:6c:0a:a1:
1c:61:6d:3f:26:10:4d:2b:0d:bd:25:4a:d0:61:95:6c:49:47:
b5:5a:e7:76:61:da:03:f9:57:1e:01:e9:66:43:aa:7b:cd:af:
ca:a7:95:b4:65:d2:06:72:a2:2c:5b:fa:9f:91:a3:d3:68:de:
aa:47:ee:a7:b2:ac:94:e7:71:4d:8a:ef:14:6c:19:de:6d:c0:
41:5a:59:1f:83:5d:41:21:fb:50:75:d1:3b:1e:cf:63:94:8a:
40:fc:e9:5a:42:5c:33:98:7d:00:25:7e:89:40:e6:b0:c0:e4:
76:66:a6:8a:a0:05:9a:75:33:bc:4e:4e:2f:d0:49:ee:a3:60:
3f:71:bc:12:7b:35:68:06:82:1d:b6:e9:5c:34:7b:ab:63:3b:
4d:2e:79:8b:2a:9e:1d:84:7d:c7:0f:ca:11:c2:72:25:ba:5f:
20:e2:16:df:b3:40:b4:d1:e9:c0:fb:90:5e:43:be:d4:d6:b5:
f2:dc:90:e7:64:fb:c1:14:94:7b:72:4f:dc:bd:6f:1d:cf:ca:
15:19:46:1e:82:10:63:7d:7a:28:7f:6b:7a:64:43:df:2f:2e:
4f:d5:c8:53:2a:bc:94:80:8f:2d:e2:18:ae:03:e5:ef:15:c3:
0b:a3:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:57 2025 by rpki-client