Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: Ter2KY/4IC/Eo1n5M3cqpPrQsRb+wkVp4klgeqCVPqE=
Subject key identifier: D0:6D:D6:7E:CD:5E:E3:8E:EF:B6:42:67:EC:1C:61:D7:D5:7E:72:1E
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 019A714A0FAEC69B4A44F73B30F4ACA4207A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 1373
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: Oc0ZJSeBXx+/saGJUsQMtEYP9IH1yjS6gZiASbdGoO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0f:ae:c6:9b:4a:44:f7:3b:30:f4:ac:a4:20:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=d06dd67ecd5ee38eefb64267ec1c61d7d57e721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:29:41:7f:72:16:bb:e6:94:98:cc:8b:70:
85:81:a3:9e:0f:aa:fd:af:9a:51:03:9c:78:4f:35:
50:c7:4f:15:4e:06:47:e6:b0:3d:ae:90:c2:2d:d6:
dc:a8:0b:b3:73:66:ce:37:4d:4e:bb:50:23:9d:27:
c9:8b:4f:1f:c9:b4:5c:05:39:41:c8:35:95:c5:2b:
e8:54:56:85:63:8a:cf:64:68:60:8d:06:81:ec:46:
33:03:d9:84:7b:6d:36:25:6b:c7:91:70:7a:45:e1:
58:74:6c:ac:a1:c8:3c:7f:8e:cb:dc:47:6b:53:e7:
61:d3:6f:1b:83:b3:31:3e:98:e6:12:a9:f1:52:fb:
0b:69:9e:b7:c1:31:35:bd:a4:0a:24:b0:a4:65:70:
09:e8:27:d1:8d:19:3f:c3:59:f5:a8:d7:f7:50:97:
b6:d6:f4:a0:87:3a:ca:25:3c:56:37:e3:87:73:51:
99:7e:6a:2f:1e:ee:da:43:ab:1d:d0:d9:e9:9b:54:
8c:04:db:f5:9d:0a:a8:26:d9:8f:9c:ea:05:c6:ab:
6a:ce:70:7a:5b:31:eb:a7:0f:76:b5:62:cf:a4:08:
d7:98:cd:ae:54:ca:6e:c2:7f:cc:d0:5f:6c:2a:0b:
65:34:b8:13:2b:19:33:22:52:50:ef:c3:ad:b5:37:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:D6:7E:CD:5E:E3:8E:EF:B6:42:67:EC:1C:61:D7:D5:7E:72:1E
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:99:ee:83:41:f2:79:34:41:a0:bb:82:55:43:60:f0:5b:
dd:48:e3:73:bf:fd:e3:54:51:6d:cf:e5:bb:f9:16:cb:85:4b:
81:56:33:64:48:fc:dd:ef:8c:e0:b3:ba:e6:68:04:e4:4b:1d:
b3:b6:2a:8e:97:fa:0e:3b:90:66:ea:25:60:5d:12:c2:f5:55:
45:dc:4c:37:bb:64:80:27:e5:dd:ad:cf:45:b1:48:eb:2c:05:
9a:9c:b7:9f:29:9f:a6:74:fe:7d:05:0a:6d:28:ef:b0:13:ac:
e7:df:dc:84:73:8d:7e:72:d7:dd:bc:19:70:5f:8b:37:05:54:
fd:6a:0d:7e:60:8c:3b:d8:be:95:f9:28:75:7e:dc:9e:34:e6:
f0:09:ad:01:26:2d:0f:85:f8:82:0e:18:c2:4b:22:ba:4e:c7:
51:aa:77:b9:b0:18:46:4c:35:0e:e9:aa:d1:22:7c:71:f9:6b:
67:3d:ff:0c:d5:50:c4:91:c1:d7:9c:f1:7c:eb:8f:57:e9:38:
98:59:f9:12:14:ce:10:ab:df:75:a3:17:2d:b6:61:0f:e7:b1:
8e:22:f5:03:9c:9e:57:4a:cd:09:2a:43:66:99:4e:b1:46:d0:
95:f8:40:07:83:a0:b8:42:75:32:4d:19:a5:bb:3c:61:26:c2:
01:65:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:50 2025 by rpki-client