Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: l/GOK6J5K0wUiHnEYabtDuo9fz2RK2VZHZTiBEhzusU=
Subject key identifier: 07:D8:81:F0:70:F7:71:5F:FF:E4:7D:64:9A:BE:3F:12:85:BA:9D:4E
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 01987C09357C344E0C5F962A8939E8B39ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 21:00:34 +0000
Manifest this update: Tue 05 Aug 2025 21:00:34 +0000
Manifest next update: Wed 06 Aug 2025 21:00:34 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: 9zyp47vdrNGriFeO99ZKy4/UKAol3/K1Bj0VO9siBVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:35:7c:34:4e:0c:5f:96:2a:89:39:e8:b3:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Aug 5 21:00:34 2025 GMT
Not After : Aug 6 21:00:34 2025 GMT
Subject: CN=07d881f070f7715fffe47d649abe3f1285ba9d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:ad:0b:f2:4f:32:35:38:05:b7:94:a3:fa:
8d:c8:05:5c:32:69:07:9d:f2:44:b7:01:69:f6:48:
9e:62:78:98:11:f7:dc:e8:c4:5c:9f:9f:2d:8d:06:
f5:a0:8f:55:c1:59:99:a2:73:23:16:9c:c1:f5:8a:
7a:59:16:22:73:f8:00:79:4e:8b:b7:98:2c:d2:7d:
38:c9:45:cb:b4:9d:7b:e2:0a:65:a9:72:b7:b5:9d:
16:6b:5d:14:b4:24:7b:9a:5b:96:5f:83:9c:63:5a:
1e:a2:a8:b7:b3:ed:73:25:a7:b9:91:bf:ed:07:9f:
34:2a:eb:ee:21:b4:35:7d:8d:e9:a5:03:1f:6f:c5:
74:f5:98:98:65:c0:e4:8b:cc:4d:b8:c5:6e:d9:e9:
37:d0:73:d6:c3:eb:92:c8:84:23:4b:e9:d1:9b:9f:
0a:44:c1:49:4f:ba:55:0a:68:32:91:9d:90:62:11:
3d:c3:cb:5e:d7:14:9a:d7:0a:c3:14:5b:54:10:d5:
ba:dd:3b:fe:db:38:37:dc:7a:4d:56:ae:b7:53:af:
63:22:82:d2:ef:d8:5c:7e:51:04:bb:a1:d7:61:04:
b3:a0:23:0b:f4:8e:fc:6e:0d:90:88:d3:b0:4b:2e:
cf:70:df:6c:51:d0:de:5e:6f:9d:b7:e5:cc:57:2a:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:81:F0:70:F7:71:5F:FF:E4:7D:64:9A:BE:3F:12:85:BA:9D:4E
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a2:cb:f8:e6:a3:e8:4f:a6:1b:21:22:fe:c7:60:6c:2d:f6:
83:81:a6:16:3f:4a:39:23:36:a4:a4:29:0d:4e:0a:58:21:2f:
7e:16:42:14:78:21:61:9d:76:e3:33:bf:44:cc:e9:b7:7b:29:
e5:3e:c3:45:96:7f:70:ae:98:c8:d3:1f:5e:50:c1:45:a4:8d:
46:bf:e6:e8:57:8e:aa:2e:5a:fb:af:1a:ed:7e:1d:0d:04:aa:
c1:ed:a1:d6:d8:61:1e:a4:bb:a1:fe:76:66:8a:24:33:d7:ab:
a4:05:e9:a2:9b:09:7d:69:e4:3a:59:e5:18:2a:3b:31:0a:9d:
40:9d:2f:48:8e:63:4d:d5:04:a5:9d:c7:e0:40:02:80:1a:1a:
76:66:48:71:82:77:25:d9:26:86:a7:0c:1b:d1:bc:6e:82:b4:
03:c5:75:79:0e:1b:39:d6:9d:30:8d:51:1c:87:f7:da:7e:3e:
95:44:42:9e:a9:de:31:27:2d:14:18:d9:36:e8:50:b9:d1:df:
56:40:5a:c8:02:89:fc:3d:2e:c1:e7:02:fc:87:ee:b9:c7:d8:
99:a9:5b:5c:f7:16:92:5f:38:d3:b7:03:81:11:c3:d5:42:8b:
0c:cc:2c:00:b9:b2:a7:3a:9f:58:0d:5f:b5:e5:6e:5a:7f:12:
fa:c4:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:41 2025 by rpki-client