Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier: oy7npAJOtg/+UaOFno45SqlbqYcDjtYAUV3aZlSv57A=
Subject key identifier: 39:36:07:07:84:1C:4C:54:C8:0A:C3:4E:09:31:69:A2:68:A0:4E:7A
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 019A2C324506941F9B12850A2D0742EABFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number: 070C
Signing time: Tue 28 Oct 2025 19:01:23 +0000
Manifest this update: Tue 28 Oct 2025 19:01:23 +0000
Manifest next update: Wed 29 Oct 2025 19:01:23 +0000
Files and hashes: 1: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: XgQhbeviSr9afhsGlkqC1bTc6NH07w2DDWiuvVvTcPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:45:06:94:1f:9b:12:85:0a:2d:07:42:ea:bf:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: Oct 28 19:01:23 2025 GMT
Not After : Oct 29 19:01:23 2025 GMT
Subject: CN=39360707841c4c54c80ac34e093169a268a04e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:ea:d6:0e:1e:b2:bb:61:28:64:9d:66:ff:
ec:94:92:51:66:c8:e1:de:f3:bd:f9:12:e6:c6:f9:
61:2c:38:d8:38:8c:bf:2f:0c:fc:09:6f:88:08:73:
c1:71:a8:13:fe:0d:aa:72:26:42:89:c2:6f:07:15:
9f:88:4c:78:68:91:26:55:94:d2:aa:3b:73:84:77:
c5:d3:a3:59:8d:e0:1b:a0:89:c5:38:96:2a:b5:41:
e2:ce:ff:3c:00:f6:06:2f:16:4f:2a:0a:c2:57:7f:
66:39:63:0f:ce:4c:5b:ec:3f:c7:fc:df:8e:1e:52:
67:1d:01:ef:58:bc:0c:20:35:0d:f1:a5:0b:52:a6:
a6:fa:76:78:11:79:02:51:f3:ba:0f:9b:9a:95:26:
a7:a6:7e:86:8f:d2:50:e7:f9:68:3a:3a:56:a7:43:
f7:1f:58:f0:55:58:eb:00:17:c2:1a:f0:29:c8:83:
69:3d:b8:7c:8b:5a:a1:14:d7:c8:3c:6a:af:45:a7:
a2:7c:cc:7c:f0:d5:c4:73:4b:9f:d9:c9:8a:60:53:
80:37:db:e9:7b:fb:76:f3:54:20:b1:f6:a5:3f:0e:
d9:32:af:0a:85:95:e9:09:46:9b:0e:dd:87:2b:39:
c1:52:13:fe:38:03:62:32:20:88:aa:4b:f3:c6:a1:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:07:07:84:1C:4C:54:C8:0A:C3:4E:09:31:69:A2:68:A0:4E:7A
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:96:49:9e:6e:6e:35:5c:ec:60:a9:f9:24:5a:2f:27:98:76:
83:49:90:36:1a:2b:73:68:b1:8c:e8:92:4b:9e:70:8c:a9:47:
37:3d:8c:bc:85:b1:54:b5:98:9d:e1:d2:f9:7b:48:e0:f2:10:
93:c8:9f:8e:92:26:0c:a3:25:e1:b7:13:96:ef:93:e5:1a:dc:
3a:f9:f9:ea:68:d0:84:72:7e:bd:c9:55:22:b4:ed:f2:25:3d:
0d:73:eb:ce:93:92:79:93:99:00:a4:0f:c4:79:c9:80:08:c1:
12:9c:30:31:41:d9:ba:27:39:d5:c6:19:c0:00:a1:7c:74:45:
e4:72:d4:b0:55:23:54:f7:dd:e8:e9:c4:d2:81:b5:0b:4a:16:
81:ee:6c:7b:00:df:46:05:7a:ad:bc:64:f4:af:c8:ab:55:4a:
9c:2b:e4:cd:08:c8:48:bd:eb:13:7f:4c:f7:5f:bf:d5:d6:99:
d0:f2:41:d0:a0:11:52:8c:62:de:e8:61:aa:fd:33:40:6b:5f:
00:ac:f6:4a:2e:95:f0:82:ba:ce:6a:bc:08:2f:9b:d9:3b:b9:
0c:33:f6:70:03:a6:53:d8:ec:90:48:4e:c9:19:a9:d5:74:c8:
7a:90:8b:f8:8f:a0:3b:c1:91:dd:87:b0:8d:c3:80:3e:95:d0:
47:85:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:11:26 2025 by rpki-client