Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: B9QrbJ9uNUsrdZkUUGgOm/QZUpauM++v+2/xeyzSOtw=
Subject key identifier: 1D:89:02:D8:B3:14:29:AA:F5:C7:97:24:51:4C:C3:63:72:47:40:94
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 019874F515C06E8A04C947D0EDC2DE8EC293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 032F
Signing time: Mon 04 Aug 2025 12:01:15 +0000
Manifest this update: Mon 04 Aug 2025 12:01:15 +0000
Manifest next update: Tue 05 Aug 2025 12:01:15 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: td1giro/kANd8SoXSUYylmkaztEEv08G+3t8YoelvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:15:c0:6e:8a:04:c9:47:d0:ed:c2:de:8e:c2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Aug 4 12:01:15 2025 GMT
Not After : Aug 5 12:01:15 2025 GMT
Subject: CN=1d8902d8b31429aaf5c79724514cc36372474094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:2c:62:f6:55:62:df:5f:5d:52:7e:4a:e7:
42:1c:c2:09:6d:db:18:93:51:17:ac:75:3a:18:90:
28:92:77:9c:7d:d8:ca:cd:2d:cd:7b:4c:a8:71:8f:
67:01:89:96:4d:ca:ed:9a:40:96:4d:91:67:ff:d7:
9c:0e:66:50:48:c9:6c:19:3f:b8:48:cf:b4:78:1b:
fe:c1:1f:72:9a:22:8b:45:5e:04:3e:1d:88:4b:84:
62:bb:ed:ce:4f:d0:60:8e:7e:cb:0e:0e:92:fe:33:
66:9c:c7:80:2d:4e:ea:f6:bc:d3:99:df:ef:4d:37:
41:71:76:6a:2e:9f:16:15:e7:80:83:c9:a5:0d:34:
77:cd:27:78:5e:16:b6:e9:0e:54:d0:3b:88:a7:8c:
cc:63:26:d8:fd:13:d5:91:09:10:f7:83:7d:dd:f1:
ac:20:f1:35:a8:0b:86:f1:2e:5c:5d:f3:77:bd:53:
05:23:c9:fe:85:1f:cc:61:c4:b7:2b:9a:72:68:5e:
a1:2f:18:5d:54:a8:f7:7c:31:81:01:3d:71:36:2a:
15:d4:16:81:7c:ba:72:7d:9e:e1:47:7e:e1:86:7c:
d3:d7:94:86:fd:f6:68:c6:5a:60:56:ee:d9:3a:75:
25:8d:50:6d:54:0b:a4:30:1c:45:3f:ca:44:dc:db:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:02:D8:B3:14:29:AA:F5:C7:97:24:51:4C:C3:63:72:47:40:94
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7c:45:e3:22:33:1e:18:ee:a8:88:2c:d0:99:44:b6:1a:e7:
21:8c:4b:87:c1:e3:a8:a0:62:29:95:0b:b4:5b:3e:74:e4:74:
38:11:e4:16:8a:72:0f:41:f4:a0:72:a7:91:cb:4a:be:de:34:
5e:f6:47:d3:50:fd:e5:0e:d0:8f:0d:6a:f6:43:1d:39:a7:f2:
4e:9f:0a:d2:87:c4:b4:71:e7:09:ec:92:c0:f6:c2:43:e5:4b:
b3:fb:88:12:5e:36:a4:7b:dc:19:46:bb:50:8c:81:c3:46:e6:
2a:d0:0d:e4:72:35:2e:22:84:4f:32:0e:41:b1:39:8e:a8:6e:
bd:98:1f:83:45:f2:f2:8e:11:84:cc:3e:36:c3:b9:e6:ba:e8:
c1:cf:24:9d:60:4c:7f:27:df:08:58:9d:7e:d8:40:90:e7:e5:
e2:68:a4:94:b1:cd:bf:67:90:24:b3:4d:f8:c9:75:30:85:00:
12:c8:c5:8d:d1:39:c4:05:26:0c:31:34:a2:1b:75:9b:7a:ac:
eb:f4:11:7e:83:91:0b:0c:fc:e3:7e:6c:26:e9:fc:9e:4f:ea:
7e:31:10:58:af:6d:91:1c:6c:1c:dc:4a:fc:83:f4:b6:9c:a6:
25:0b:be:ae:e4:3a:37:49:db:dc:98:20:27:6c:a3:33:1d:1d:
fd:a8:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:11 2025 by rpki-client