Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: TgvO0CjWGwYQK0VCwmcGeAw9ltPSj3ame4FtEKRUNAY=
Subject key identifier: 52:E5:7E:BB:57:1C:E6:4E:80:76:C6:D3:6D:0A:88:21:82:0D:83:10
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01984407A62BB7C3438C4009192C6DF9306D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0697
Signing time: Sat 26 Jul 2025 00:00:08 +0000
Manifest this update: Sat 26 Jul 2025 00:00:08 +0000
Manifest next update: Sun 27 Jul 2025 00:00:08 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: DgU1N+Tv3Xbg3LuPU2cJISZHXigf1lmTDGMiCcfLdMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:a6:2b:b7:c3:43:8c:40:09:19:2c:6d:f9:30:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jul 26 00:00:08 2025 GMT
Not After : Jul 27 00:00:08 2025 GMT
Subject: CN=52e57ebb571ce64e8076c6d36d0a8821820d8310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:2e:32:51:5d:7c:93:86:a7:32:bc:28:76:
b9:0f:01:22:48:31:78:ea:9d:25:21:1b:da:e9:78:
23:15:0e:67:16:16:bc:d8:b7:b0:2a:6b:47:df:6d:
67:81:d2:9b:d0:ea:41:69:66:46:93:ee:0a:fc:93:
d4:3f:8f:5d:97:14:35:2e:86:85:dc:11:bb:27:66:
fd:04:c5:fc:d3:d2:52:5a:30:34:7f:b2:9d:b9:24:
27:db:29:d7:1f:12:f0:04:85:25:e5:66:0c:c8:94:
25:15:70:a3:f8:3b:c7:9d:25:22:1b:6b:83:4d:21:
0b:54:6a:61:f3:e0:f6:e2:a8:a2:d7:97:41:24:0f:
e7:6a:7e:29:da:25:ac:54:55:f1:02:0d:8e:99:c2:
9f:db:9d:61:6e:bd:ab:72:f8:47:75:38:8d:0d:36:
04:66:0c:15:f4:7a:65:3b:c5:bc:f0:76:5c:63:bc:
d0:85:ac:5c:c7:3c:e0:62:27:00:47:37:14:78:2d:
c4:0a:83:70:75:b4:35:88:f4:44:92:3b:38:50:15:
6e:b4:5a:b0:cc:00:bc:7c:a0:51:d0:c9:13:65:87:
7d:85:9e:e1:ab:fb:0c:f5:43:cf:91:bc:13:8b:33:
14:e1:0e:2e:30:ff:13:b2:00:eb:80:1f:ce:8f:c5:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:7E:BB:57:1C:E6:4E:80:76:C6:D3:6D:0A:88:21:82:0D:83:10
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:63:fb:b2:4e:91:7c:32:73:11:89:9e:b6:6b:2c:57:6c:59:
f3:0e:99:f7:f1:ee:4d:4a:e2:25:f8:1b:75:f4:5c:3a:e7:3c:
67:85:67:d4:84:9d:94:1f:1b:3b:24:20:4e:9e:87:35:9e:95:
5c:e2:a8:5c:c8:89:c2:c4:c7:0b:82:88:00:ef:7e:db:03:7d:
83:67:af:d0:07:2b:bd:17:79:32:a1:11:15:0d:42:ce:e8:bf:
b6:6a:f4:f1:a5:bc:88:cf:03:be:9d:7c:b4:c8:61:10:08:6c:
7b:e6:52:82:92:42:ce:6a:35:e4:58:6a:bf:24:21:9d:d1:2a:
e7:92:b8:31:ad:ed:16:ec:0e:a2:2e:07:06:89:a0:cd:5c:a3:
84:28:11:0f:5e:ed:7a:7d:ab:af:82:6b:4d:a3:25:a0:82:f5:
48:f3:ee:b6:5b:15:cb:2e:fd:b6:aa:3e:b7:ae:12:1a:e2:1e:
55:f8:59:6d:dc:4c:b9:a8:2d:18:8b:73:3b:71:20:54:48:34:
05:93:2d:65:cc:06:2a:5d:dc:5a:89:66:72:02:88:a5:ea:5e:
ab:05:e9:3e:7a:2d:98:b5:61:cb:19:75:c5:18:c7:b5:09:02:
ce:61:80:90:71:87:8c:ad:13:89:3c:db:dd:2a:3f:b3:0a:79:
ce:63:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:37:53 2025 by rpki-client