Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: H5dmnlr30kS/rfw0KbGFSilJC7hjmsOIzn+0jK4s2qA=
Subject key identifier: 65:04:0F:0A:98:4C:A3:4A:AB:BE:B1:44:1E:EB:14:04:79:03:EE:A7
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 01989FDECA467F9D0C01B41E7F2103C7BA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 0412
Signing time: Tue 12 Aug 2025 20:00:34 +0000
Manifest this update: Tue 12 Aug 2025 20:00:34 +0000
Manifest next update: Wed 13 Aug 2025 20:00:34 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: m/oxOETTWpUSmMse0R6r80ubqFO6JDJhrkpnoMq56WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:ca:46:7f:9d:0c:01:b4:1e:7f:21:03:c7:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Aug 12 20:00:34 2025 GMT
Not After : Aug 13 20:00:34 2025 GMT
Subject: CN=65040f0a984ca34aabbeb1441eeb14047903eea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:47:8f:72:d2:38:0d:7a:be:d6:0e:b5:2c:9e:
e1:e8:d3:d0:d7:ef:a0:ff:6d:07:83:f4:81:db:16:
51:b3:9d:31:af:62:ca:99:92:2f:16:e8:f1:b6:5d:
91:3e:11:a9:4f:84:fd:90:44:86:68:1c:40:74:6e:
76:65:f6:a1:79:08:a4:8e:5c:f3:23:47:1c:cf:ea:
c1:78:8d:45:9e:15:28:c2:8f:b5:47:a7:25:2b:8b:
12:a7:3c:56:2a:08:4f:31:7a:0d:1b:ec:ff:f5:58:
ae:c4:74:b5:a8:c8:25:2f:b3:26:7b:e5:b4:74:d9:
dc:a1:f4:d2:ed:2f:23:4f:27:e5:e7:9f:cc:72:f4:
29:a4:c9:ca:4b:39:49:ce:fe:5c:69:31:d2:a8:aa:
93:eb:b0:11:55:d8:d9:20:d9:0e:23:51:a8:ce:45:
5b:f5:36:05:4a:f2:d6:f3:e2:94:ce:9f:b0:8f:2e:
cd:9f:12:71:58:39:cc:7d:4c:b7:64:97:cb:99:21:
02:de:91:d3:4a:eb:b1:e1:3a:a1:c0:56:5e:a0:8d:
96:82:d1:e3:1e:5e:c2:30:76:9d:23:83:fa:dc:e6:
8c:35:9c:c1:eb:9d:32:e6:b9:8e:be:5d:29:de:e2:
07:5e:cc:15:89:92:fb:71:a2:8e:15:68:57:df:b8:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:0F:0A:98:4C:A3:4A:AB:BE:B1:44:1E:EB:14:04:79:03:EE:A7
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:ee:75:f7:41:e1:ea:7e:c6:83:dc:b6:21:12:86:c7:03:
0a:34:ea:aa:4b:06:28:37:a1:6c:e3:6c:84:e5:2a:77:c2:9f:
4c:94:d8:e9:b3:8c:57:a7:7d:ba:e2:f9:3e:27:04:2a:aa:9c:
f2:b0:0d:03:70:58:f5:94:58:7c:3f:a7:10:1f:3e:51:31:0e:
77:bc:c1:3c:d0:b2:98:65:05:fb:ed:48:29:35:dd:c1:07:f6:
8b:33:d7:fc:5a:e4:35:5f:7f:d5:77:a6:09:eb:11:3f:1b:93:
af:fc:49:c7:8b:89:98:3c:b9:38:26:a9:d6:3d:59:b8:71:ca:
5e:7c:4c:da:f0:be:be:e0:7d:33:8d:c7:1f:7b:fd:4c:df:28:
d3:08:85:23:69:c1:5e:6d:ce:77:4e:89:ed:1e:88:b7:bf:f5:
c8:67:c8:a1:d2:c9:0e:63:12:a3:f9:01:a8:da:e9:92:06:9b:
9e:d6:5e:c7:20:18:c3:16:11:88:ca:d5:ba:f2:1f:20:df:57:
4b:ef:2a:d1:d5:da:22:a7:66:7c:d0:2f:4e:66:0f:43:49:98:
e4:f0:e0:43:90:7d:f8:da:13:67:09:e3:47:e5:db:46:6c:07:
64:98:2f:f7:e6:3b:93:a8:73:bc:d2:9e:f0:30:57:2c:18:eb:
75:86:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:08 2025 by rpki-client