
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json)
Hash identifier: 0LRWRTnT6DztAwUjZdnOq9cGn/3Jp/BxGcxPjE1G8Xw=
Subject key identifier: F0:F7:48:A2:D2:A7:8A:53:DD:AB:9B:A5:B2:89:18:6C:53:39:ED:20
Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Certificate serial: 01988C8F17975E8BEFB8A204ACD1C9CB0D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
Manifest number: B4
Signing time: Sat 09 Aug 2025 02:00:44 +0000
Manifest this update: Sat 09 Aug 2025 02:00:44 +0000
Manifest next update: Sun 10 Aug 2025 02:00:44 +0000
Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: x68jKjFFrdN4NN4jhceUC8Lx+TM2fz74weSaDL4nzgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:17:97:5e:8b:ef:b8:a2:04:ac:d1:c9:cb:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Validity
Not Before: Aug 9 02:00:44 2025 GMT
Not After : Aug 10 02:00:44 2025 GMT
Subject: CN=f0f748a2d2a78a53ddab9ba5b289186c5339ed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:43:00:1a:f3:fb:20:39:39:11:f5:76:72:
84:63:e0:66:43:ae:9b:0c:74:1b:40:74:06:8a:03:
a3:20:e3:a9:69:59:4e:bf:fd:a7:64:d8:c9:c2:c3:
3b:ca:d8:1a:12:00:0c:35:84:e6:01:61:8e:2f:fd:
2f:78:ae:27:05:08:00:21:68:c9:ed:30:84:75:3e:
1a:c8:b5:9c:96:dd:ee:ed:73:9e:be:5d:28:33:7e:
67:3e:d9:01:a7:d5:36:1d:97:fa:ec:d8:a2:47:3a:
40:a2:0d:cb:f9:45:c0:f3:bf:fb:7a:39:f8:5f:ad:
6a:60:dd:1b:7b:3a:5e:dd:8d:af:c9:b6:cf:5b:bc:
71:54:6f:47:a4:40:13:0d:b8:49:e7:60:3f:05:e8:
00:bd:11:ad:6a:bb:8e:ba:e5:e4:5f:5c:32:9f:80:
e1:d6:8c:1c:4b:4a:08:80:e9:9c:32:57:aa:bf:f4:
d2:37:08:67:57:5b:10:b4:fb:f1:63:9a:ae:34:54:
06:74:58:a7:02:80:b0:50:20:e2:74:de:01:1d:25:
46:e8:37:ac:49:53:ff:33:c8:53:22:42:53:d0:8a:
d9:52:78:48:cb:e6:08:c8:b9:23:0f:44:77:e4:9d:
cb:e9:1a:55:21:c4:4a:dd:b0:dc:5d:4a:70:67:66:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F7:48:A2:D2:A7:8A:53:DD:AB:9B:A5:B2:89:18:6C:53:39:ED:20
X509v3 Authority Key Identifier:
keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fb:62:b1:d0:d2:6f:9a:59:d3:f8:51:07:7b:44:29:7a:60:
17:fd:f2:87:da:f8:5b:9c:32:f9:87:3a:7a:0d:06:6d:f1:66:
af:2d:5f:00:d1:65:3c:55:76:a2:ec:b0:e4:e7:ab:d3:64:5e:
23:26:68:4a:89:45:bc:8d:48:a7:11:3d:72:05:06:5a:1d:c4:
9d:7b:11:9a:26:24:53:f6:f5:de:c9:8f:66:78:0d:ef:da:94:
58:da:24:ea:0c:11:63:2f:5a:05:86:13:bf:24:70:df:fe:8f:
12:98:d8:d1:ee:bc:aa:2f:67:b2:56:6c:63:04:c9:9d:15:a0:
fe:24:63:d5:7a:d5:f8:d3:1b:d9:36:b9:0c:68:d7:e3:a4:d2:
e4:a7:0f:5b:0d:83:5c:5a:90:1f:99:36:1d:71:c6:8e:2b:d0:
bf:54:e7:26:ec:18:ba:de:e9:8f:25:de:3c:78:61:da:09:64:
a5:ec:cd:89:c8:41:eb:41:21:00:8f:03:68:ca:84:b1:d8:2e:
2a:e1:0b:4d:e3:6d:50:da:14:a8:b1:b1:c3:ea:92:36:09:5a:
1e:be:7c:1b:59:19:24:08:dc:55:87:c8:39:89:51:1e:ea:8e:
ee:17:42:10:81:44:f8:a3:9f:76:f2:53:1f:02:ef:67:d6:e2:
7e:6d:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:04 2025 by rpki-client