
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File: qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier: +aRpmJweBQD6D7Q8I4THRCgf1rLecOYXvlWCx7G5fc8=
Subject key identifier: B4:FB:8E:BD:63:A1:49:CF:3E:01:44:BC:F0:EC:7B:ED:C6:35:17:ED
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer: /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial: 01988C8EE08EA2D04EA822893AC35239CDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 02:00:30 +0000
Manifest this update: Sat 09 Aug 2025 02:00:30 +0000
Manifest next update: Sun 10 Aug 2025 02:00:30 +0000
Files and hashes: 1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: M4hKAcphAMUMpxTV0wYAFsp6u7O+JEv3rVyL56rhQo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8e:e0:8e:a2:d0:4e:a8:22:89:3a:c3:52:39:cd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Validity
Not Before: Aug 9 02:00:30 2025 GMT
Not After : Aug 10 02:00:30 2025 GMT
Subject: CN=b4fb8ebd63a149cf3e0144bcf0ec7bedc63517ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:a9:46:1f:0e:45:96:c3:8c:b7:4b:82:c7:
2e:07:54:2e:d7:6c:ff:48:96:12:67:7f:2b:27:b7:
e4:4f:34:f8:6c:64:3e:58:12:6b:ff:35:4c:18:08:
48:75:67:81:d2:48:ba:85:16:d9:59:ab:58:9d:25:
18:cb:40:0a:21:d1:0d:3c:1e:d5:1a:94:01:4a:bc:
f3:43:76:17:89:c3:27:ef:05:66:c3:38:67:a3:e0:
c2:58:d6:d1:2e:fe:94:d1:79:a1:f3:3f:e3:55:c1:
ab:3e:d5:3c:6a:d5:ed:84:99:98:63:92:1d:2c:0a:
96:ba:79:63:13:1f:2f:5b:69:ac:36:76:b9:2c:e0:
52:c7:c9:71:00:f4:c8:82:82:a1:d6:56:8e:90:ab:
85:9e:32:82:4a:7b:a9:d2:f8:24:8b:e4:bd:70:c6:
82:77:73:bd:39:d4:4d:00:13:61:34:2c:66:03:ec:
7e:46:49:3f:9d:71:7d:e6:15:42:0d:cd:43:41:4e:
9a:fa:f2:98:6e:e0:93:46:10:02:ca:be:1e:5b:08:
8e:53:b9:0d:e6:36:ce:89:5f:99:89:c2:52:d8:69:
e2:04:2a:5e:ad:29:76:23:a5:0c:82:3c:b0:38:a2:
8b:e7:26:4c:c2:6c:ee:72:00:5b:c1:d8:01:a2:27:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FB:8E:BD:63:A1:49:CF:3E:01:44:BC:F0:EC:7B:ED:C6:35:17:ED
X509v3 Authority Key Identifier:
keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f2:76:d6:4c:f1:3e:aa:5d:b2:ff:68:08:28:5f:18:cb:16:
7e:06:a4:11:db:ab:b7:6f:7b:03:a7:35:2a:1d:b8:e2:f8:fc:
47:53:50:88:a2:c7:a2:9b:13:a5:6c:62:83:ca:ab:66:d1:4f:
4b:30:f3:67:cc:6d:e1:b3:8b:78:ed:19:e4:33:08:4c:8b:6a:
fe:05:57:7f:53:6f:27:0e:8c:93:fc:ab:6a:83:c3:cb:ed:86:
5b:88:57:6b:69:f1:22:18:e4:d0:74:44:01:62:0b:f0:61:f7:
36:53:a8:a2:b1:94:44:02:32:10:64:53:d6:77:9c:2c:ac:4d:
e5:50:44:05:d0:25:e3:37:f0:73:93:0a:a4:83:39:57:4f:b5:
0d:79:5c:b8:e0:65:14:af:40:17:2c:e2:e6:f3:31:ee:05:92:
fb:90:fb:55:10:3d:b8:57:2a:b3:ff:a3:c3:6f:f3:b9:22:5f:
5d:e9:49:e1:86:82:45:76:63:31:7d:1d:be:f1:82:ae:8f:87:
1a:ae:96:c3:b7:65:03:ca:c9:71:7d:a5:5f:96:07:25:5c:99:
7c:0d:11:62:7f:28:a0:3c:e7:fb:d5:12:a6:2f:af:05:f7:8d:
66:81:23:4f:3b:d5:51:ad:69:87:e7:84:76:2f:f9:80:fa:1c:
26:2e:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:45 2025 by rpki-client