Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: TjY0aeLRdy4u5ifcrRmSLaUacYvNE0yEpmL3okshi1I=
Subject key identifier: 34:91:11:55:0D:33:59:87:C1:A6:4A:7A:93:94:6C:5A:FE:E4:63:72
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 019845BF2504786C77154227AC7676569308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 08:00:11 +0000
Manifest this update: Sat 26 Jul 2025 08:00:11 +0000
Manifest next update: Sun 27 Jul 2025 08:00:11 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: 6VIZsvJFzXFV2n9QwRFyKAbzjR6PFDfCcVsUOfg8wUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:25:04:78:6c:77:15:42:27:ac:76:76:56:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Jul 26 08:00:11 2025 GMT
Not After : Jul 27 08:00:11 2025 GMT
Subject: CN=349111550d335987c1a64a7a93946c5afee46372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:4d:23:e6:a5:c2:1d:e3:07:b5:db:d6:19:
49:48:6b:90:fe:59:fe:2e:e5:51:74:76:b3:84:28:
0b:30:0a:12:a3:14:a8:46:66:0a:b1:7e:dc:f3:ab:
4c:82:94:0f:10:f7:ee:7c:83:b1:a6:5f:44:c2:4c:
66:22:30:6f:73:52:1d:61:01:da:d7:dc:4f:a3:97:
aa:cb:dc:2a:4f:02:60:f7:66:87:35:d9:24:81:60:
1a:83:42:62:79:52:3c:19:67:d5:1d:6c:a0:4a:69:
a5:aa:8f:5a:c1:68:46:d3:00:d3:97:21:6b:8b:2e:
e6:2f:4b:c6:f7:3e:78:53:3c:da:86:45:d8:ef:3b:
ef:0b:6f:7b:9b:03:cd:1d:c2:50:67:6e:6b:18:60:
a5:f2:51:87:44:dd:73:34:df:22:07:e4:d4:19:1e:
bc:7e:01:d2:98:06:d5:65:c9:b8:d0:86:53:66:65:
7f:31:d2:ed:14:02:10:0a:f6:c9:d3:2c:06:29:96:
b1:00:6c:71:95:ff:2e:30:b7:c4:ea:35:7c:e5:84:
a2:3b:19:52:ac:24:04:34:a1:de:46:14:b2:0a:4b:
67:cb:c3:7c:b5:9c:5a:01:a9:d6:c0:bf:21:1c:d5:
9f:2f:5d:4c:be:86:c4:07:6f:e9:15:00:30:26:ac:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:11:55:0D:33:59:87:C1:A6:4A:7A:93:94:6C:5A:FE:E4:63:72
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7f:85:99:53:5b:39:89:f8:dc:95:b1:c2:b7:b0:62:75:e7:
29:5f:30:d3:ba:32:aa:0a:10:f6:1d:31:50:7f:b2:01:b3:58:
06:af:87:d3:b8:ed:c2:d8:c4:d3:3c:1e:84:49:e9:16:4f:f3:
8d:7a:b5:1c:ad:d8:15:5d:86:9f:d6:9e:d3:44:f3:37:af:40:
44:72:25:45:70:80:a3:b0:cd:64:f7:64:37:09:1d:94:71:56:
b1:9b:4d:38:d6:d7:e9:6c:2d:f9:b5:cd:06:42:b1:14:e3:89:
65:7e:ce:bc:13:7f:fd:46:19:7b:70:92:3d:29:3a:98:f3:e9:
b3:3b:f7:34:52:5c:17:44:02:8e:83:a6:db:8d:18:f3:3d:ee:
d8:c8:ed:e5:78:40:a2:aa:8d:f9:75:34:47:b5:18:6e:24:58:
2c:3a:a6:13:8e:8c:c0:a2:fd:50:aa:ff:1d:61:03:17:5d:1b:
15:a7:bf:25:68:55:b4:bd:98:13:94:14:9b:a9:58:bf:3c:13:
4e:26:a1:a5:69:d9:9d:c4:31:bd:39:b8:6a:61:b2:73:d1:9e:
1f:5e:e0:dd:50:00:f5:f2:b8:b3:22:2a:05:d0:fd:2f:17:25:
56:6d:b0:0e:b7:f4:4d:15:e5:e2:06:61:1f:bb:10:b7:e6:28:
82:83:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:47 2025 by rpki-client