Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: EEsFKRQIYelEjlBacaK7RgcOwPhwSgx+vqaJUxCNXeA=
Subject key identifier: 7F:83:5A:9D:AB:68:EA:DF:C0:C9:CE:6B:DB:26:42:71:2B:1F:D3:86
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019763278AD7D1378AD04C90BD138015B1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 11DE
Signing time: Thu 12 Jun 2025 08:00:25 +0000
Manifest this update: Thu 12 Jun 2025 08:00:25 +0000
Manifest next update: Fri 13 Jun 2025 08:00:25 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: tvVdctAZ67SinaxPSVueOPZQbs1UVSsKxEu2UNtE/Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:8a:d7:d1:37:8a:d0:4c:90:bd:13:80:15:b1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Jun 12 08:00:25 2025 GMT
Not After : Jun 13 08:00:25 2025 GMT
Subject: CN=7f835a9dab68eadfc0c9ce6bdb2642712b1fd386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:79:dc:04:9f:ec:f2:58:6d:44:54:33:51:
a0:45:66:fe:57:60:3a:1c:d5:b8:70:15:8d:63:30:
ce:5b:88:88:5a:3d:ce:a7:99:d9:fa:dd:48:91:54:
95:80:6e:a2:b1:5f:18:e6:d8:82:a2:31:be:de:2e:
dd:d1:92:af:19:44:3f:18:bf:49:5a:23:b8:36:12:
d9:1c:bd:34:35:ac:f6:fd:54:ac:75:6e:d4:77:17:
d6:85:ce:9c:35:e2:c7:19:29:e7:cb:50:27:ed:e0:
10:08:29:90:37:3a:17:1a:c3:0b:a8:ca:8b:67:6c:
df:b0:da:ed:59:b5:03:1d:e2:c5:56:b2:2d:4f:aa:
29:84:30:18:93:b0:c4:c7:f6:61:32:e7:2b:98:c9:
25:34:17:6f:50:35:b6:10:2c:23:d3:71:75:3e:62:
a0:8b:f0:67:d3:27:0a:22:cc:8e:ab:29:5f:a4:93:
d1:25:54:60:78:42:e8:07:d2:f6:b9:cf:8a:a8:a3:
96:50:0e:47:91:25:e9:35:41:76:69:9b:99:71:d5:
cb:e6:81:16:56:88:2e:5d:d8:ac:02:59:57:89:cc:
59:39:cc:fc:4b:83:8c:17:99:7d:77:d4:58:e6:2f:
2e:b1:7f:21:ec:c0:73:f8:ec:05:6a:b1:23:52:74:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:83:5A:9D:AB:68:EA:DF:C0:C9:CE:6B:DB:26:42:71:2B:1F:D3:86
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:44:50:4a:29:0b:4e:82:06:09:66:e9:61:a4:b1:87:f4:25:
c8:6a:05:7d:86:05:04:09:41:dc:fb:00:6c:53:93:a5:8b:2e:
89:81:db:fc:9f:90:46:c8:3a:2b:ac:16:98:98:42:61:86:e5:
04:df:d3:d2:77:94:76:48:18:ae:54:34:e3:ba:9e:31:d9:17:
9f:f7:df:93:ba:c0:7d:87:f5:23:70:46:da:35:80:db:c9:f0:
1d:8f:d1:aa:88:26:4f:9a:d7:ec:61:cd:5b:6a:bb:4e:ca:26:
2a:67:48:be:0f:96:2a:c7:33:95:cb:3f:69:17:5d:a7:a1:86:
18:1a:8f:67:7b:05:54:f9:38:d7:9f:a6:db:b6:fe:77:c1:ab:
9f:5d:00:44:c3:02:cb:96:32:e2:75:a0:08:51:b1:a4:c5:8f:
1f:8a:37:85:6a:e0:4e:91:7d:c5:48:e5:fb:7c:a6:e2:37:6f:
81:e1:3f:55:7f:7c:8e:a8:cb:35:cc:b8:d1:9b:b8:a5:38:47:
92:52:cd:1b:23:da:43:59:ee:c2:10:51:cd:3d:e3:e5:d0:23:
7b:d3:1b:41:d9:07:09:e2:c4:95:16:5d:56:96:fc:95:b6:03:
7f:07:41:6d:9d:56:41:2f:8a:05:bf:84:98:99:06:9d:3c:cf:
c2:47:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:45:58 2025 by rpki-client