Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: g2uyVIjkE6MPSZvZ/nkqWiAYCfk/do3adztbq8KGG/w=
Subject key identifier: 56:1F:56:65:61:78:43:76:FA:1D:48:25:4B:55:5A:79:95:6F:B2:D7
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 0197597FEF49562B781189344CBBFD44BDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 11D9
Signing time: Tue 10 Jun 2025 11:00:45 +0000
Manifest this update: Tue 10 Jun 2025 11:00:45 +0000
Manifest next update: Wed 11 Jun 2025 11:00:45 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: PEUt+6DQmiGvCEwGqjkVSQhvaNHYxDQPGkMWWEQ66QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:ef:49:56:2b:78:11:89:34:4c:bb:fd:44:bd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Jun 10 11:00:45 2025 GMT
Not After : Jun 11 11:00:45 2025 GMT
Subject: CN=561f566561784376fa1d48254b555a79956fb2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:73:fd:0c:53:00:34:0c:df:aa:fa:df:95:
79:00:07:27:51:c0:0c:92:39:19:e3:1c:3b:65:4f:
06:2b:70:79:b9:6a:a2:58:38:7e:29:ff:aa:4a:6b:
8e:e6:2e:5b:80:b7:04:d0:f8:82:51:49:c3:28:f0:
43:c6:44:fa:19:7f:bb:d3:98:30:9b:df:0f:59:f7:
f6:07:2c:e6:96:8d:28:24:f1:1c:6e:db:15:6c:9c:
d3:6b:40:8f:af:3b:5e:04:77:41:bf:e8:5e:9f:01:
da:4e:7e:25:33:22:21:35:78:54:0b:df:fc:8d:d8:
d5:63:c0:38:81:74:6c:cf:9b:f2:ce:b5:5b:6f:1c:
65:85:01:cf:75:d1:39:35:68:54:1b:d5:25:35:1b:
c5:8e:13:97:f5:20:71:80:90:b8:79:29:85:81:f4:
43:6b:af:fc:57:7f:44:43:49:3b:74:58:a5:45:67:
8c:5b:7c:51:b5:a2:e7:5c:dc:f7:f9:de:79:a3:05:
b0:26:5c:f4:35:d1:78:b2:81:29:60:1c:2c:74:ad:
f5:0f:49:52:63:ae:fb:0b:a6:7e:77:5e:d9:59:0e:
bc:51:87:4d:ee:c4:9a:93:2c:0b:35:b2:38:4c:98:
a9:fe:2f:a5:25:59:63:cc:6b:33:75:98:2f:cf:67:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:56:65:61:78:43:76:FA:1D:48:25:4B:55:5A:79:95:6F:B2:D7
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:49:d9:79:74:4e:09:e2:1f:d0:05:0b:50:44:de:72:4a:3f:
82:fd:91:e5:4b:e3:4f:df:7f:22:7f:b1:9b:59:eb:b6:69:45:
f9:2b:e7:00:46:56:7f:7a:d1:be:fd:32:e3:65:27:c1:2f:d2:
af:82:61:6c:ac:81:08:40:e0:75:f8:e9:06:a3:39:45:5f:1d:
02:95:12:0b:ac:04:84:60:a9:0e:40:d0:70:c7:b6:6f:21:5f:
05:66:e9:f3:f4:de:fa:45:08:86:07:d3:2d:79:ae:8c:42:87:
19:b1:6d:9a:89:0f:6e:2a:68:95:ad:96:82:e3:1e:e0:e8:1f:
59:a7:13:d9:8a:a6:54:75:5a:21:6e:8a:fc:04:d6:80:b8:46:
88:91:8c:ac:49:f6:ef:2c:d0:7d:a1:fc:bc:73:e8:4f:33:8d:
ec:62:06:27:08:0b:a0:05:94:ee:4e:4c:99:d6:86:5e:60:76:
73:33:48:52:27:af:ad:f2:ab:b7:76:11:93:e8:f4:38:58:28:
78:95:b7:0b:4a:49:d9:5e:0f:f4:c1:01:62:7b:14:24:78:de:
6d:7b:ba:62:41:d5:3d:84:1f:e5:89:2e:e0:6b:c7:b5:a0:a0:
f4:91:e1:ef:01:29:6f:10:ed:5c:8a:d2:bb:a9:9c:d8:41:1f:
b0:bd:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:02:03 2025 by rpki-client