Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
File: qJ3jcDei8quO2_asHfHCmZfIiMg.mft (raw, json)
Hash identifier: bftiGdD1pNKNEby7yoBCrYUuC6kb8etlgD/PbZBzBH8=
Subject key identifier: 98:04:5A:02:D5:5E:0A:00:4F:27:1C:D4:D7:C5:CA:F3:91:8D:A3:4F
Authority key identifier: A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
Certificate issuer: /CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Certificate serial: 01988BEB127E7616C32D67FBB504BFBD44DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
Manifest number: 0327
Signing time: Fri 08 Aug 2025 23:01:35 +0000
Manifest this update: Fri 08 Aug 2025 23:01:35 +0000
Manifest next update: Sat 09 Aug 2025 23:01:35 +0000
Files and hashes: 1: qJ3jcDei8quO2_asHfHCmZfIiMg.crl (hash: Z3nhKqU25cCIodO6THVx2r8OVMFHOYzVEB4hAorTxPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:eb:12:7e:76:16:c3:2d:67:fb:b5:04:bf:bd:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Validity
Not Before: Aug 8 23:01:35 2025 GMT
Not After : Aug 9 23:01:35 2025 GMT
Subject: CN=98045a02d55e0a004f271cd4d7c5caf3918da34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:e0:8d:2b:a3:92:08:04:d0:57:78:63:bc:
38:e2:11:91:93:d1:72:26:9b:ed:c6:c8:97:bb:b6:
36:52:ac:42:c5:db:d9:cc:84:09:14:fc:71:a0:e2:
cf:f7:5f:29:66:34:84:db:6f:39:1c:dc:14:a4:27:
40:28:e4:53:19:8b:1c:87:fc:e2:b9:ba:c8:63:bb:
21:59:84:e5:87:41:f3:87:44:de:9d:6b:0b:b9:25:
ca:df:fc:28:28:ac:95:43:19:ec:48:ff:7e:7e:cd:
f7:c7:e8:00:23:c9:9f:84:cb:3e:59:98:3e:ee:12:
31:48:dc:87:79:47:79:3f:32:da:75:2a:41:5a:00:
e3:d0:2a:7c:81:26:8a:43:9c:57:b3:a8:47:4f:00:
fa:4f:df:48:83:4a:c3:45:3d:7d:88:ab:63:d7:ac:
66:04:da:b3:4c:7a:b6:06:60:a5:d4:0d:cb:7f:e8:
ad:a9:11:ac:9a:d9:b3:63:ec:d7:1a:52:31:c1:6e:
3b:cc:95:06:84:5c:a7:a4:ea:e8:ef:6a:f6:29:91:
97:02:40:d5:39:32:28:02:3c:12:ba:ce:1a:79:ec:
ca:0f:6f:d5:61:99:57:d6:2a:a2:83:22:eb:10:de:
0c:50:fc:b7:e1:0b:de:90:43:a9:3f:73:5e:08:b8:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:5A:02:D5:5E:0A:00:4F:27:1C:D4:D7:C5:CA:F3:91:8D:A3:4F
X509v3 Authority Key Identifier:
keyid:A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:7b:83:89:f1:04:55:3b:f5:14:c7:42:95:e6:3e:2f:98:
6c:5c:8e:99:db:85:a9:b1:5c:dd:75:54:82:5a:5f:28:14:06:
03:d6:dd:45:96:2e:a7:1f:c0:0f:d1:f5:0e:48:c9:b0:cf:58:
e1:e9:71:14:f2:ef:47:d4:d3:a0:53:23:7e:5e:f0:54:40:d6:
e8:d0:1d:2f:31:26:f3:d4:d4:0e:4f:0c:66:6f:27:b7:a1:e1:
2d:80:56:ac:1c:b6:97:19:af:9a:4d:54:30:81:8d:e3:f9:67:
aa:1c:35:0c:fc:ce:2b:70:5a:e1:95:1a:57:5f:19:31:cd:53:
6d:a0:2d:c2:d5:e1:01:e0:a3:8c:d7:fd:24:72:5c:15:ea:05:
e5:4e:de:51:62:5a:11:35:09:9c:1c:c3:89:da:66:fb:88:20:
e0:a6:3c:8e:69:4d:42:a3:fe:21:ac:47:19:23:18:39:79:00:
8a:df:1c:4d:45:54:6f:6e:f2:63:72:19:3b:70:2b:2d:94:91:
48:fb:01:36:b6:ce:28:bb:06:7e:ac:f0:d0:e6:72:2d:a1:b4:
7e:54:c4:bb:f0:ba:58:63:e2:39:bd:d6:5c:6f:59:a7:1b:79:
91:12:85:48:5c:61:f7:d6:0c:7c:9f:86:c1:a5:e2:be:dc:43:
76:57:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:39 2025 by rpki-client