Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: bAanyEDZ6f48eJGFv4o/M0UTqZ7Hdtf+5izjPeMLEQo=
Subject key identifier: C2:9C:5E:11:72:F7:0C:CD:2B:A9:45:09:CA:3B:95:12:65:06:37:3B
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 01987450BDBE51522AA3072F6EFC48FE4889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 09:01:45 +0000
Manifest this update: Mon 04 Aug 2025 09:01:45 +0000
Manifest next update: Tue 05 Aug 2025 09:01:45 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: KiML+mkkRgXEzGK/47VzszXtmqcJ8TbCRw/NEPv3DcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:bd:be:51:52:2a:a3:07:2f:6e:fc:48:fe:48:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Aug 4 09:01:45 2025 GMT
Not After : Aug 5 09:01:45 2025 GMT
Subject: CN=c29c5e1172f70ccd2ba94509ca3b95126506373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:b8:2d:09:89:ef:52:07:d1:64:c7:4f:37:
ff:a5:3f:27:e5:68:97:24:dc:6b:ac:68:9f:de:24:
70:cb:ee:a9:da:37:cd:ae:44:b9:ca:64:d2:76:97:
b1:ab:ea:16:ae:82:0b:12:61:7e:69:43:2c:f8:1e:
5d:0e:0b:ae:75:bf:c5:78:76:6e:b3:62:a0:9f:4d:
fd:61:be:29:c0:32:97:64:3e:79:f9:41:e1:7c:3d:
85:35:f0:c9:5d:63:4b:08:a6:8a:d3:6b:26:07:16:
5d:6b:3f:2a:68:48:b9:d3:73:93:d6:8c:fa:ec:4a:
9d:d3:1c:f3:bb:10:3c:be:f5:82:36:ca:0b:46:3c:
55:cf:bb:66:e6:e2:b2:02:19:0e:18:67:54:61:8c:
90:5d:de:63:c9:5e:ee:1f:1c:21:47:02:2f:be:5e:
04:fd:2e:19:a7:c4:60:9f:07:c0:38:a8:21:49:56:
af:08:07:11:4d:5b:2c:3b:33:57:0b:8e:d7:84:0b:
0c:ae:2c:7c:58:53:32:e1:31:1f:c1:52:97:c2:5a:
d9:58:bf:c8:ba:c8:a8:6c:58:9a:8c:4c:8e:b0:47:
3d:25:cd:70:44:95:07:8a:5c:28:e9:39:dc:ae:8e:
fd:2a:72:74:91:d3:c9:59:16:67:58:de:7a:8b:f9:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:5E:11:72:F7:0C:CD:2B:A9:45:09:CA:3B:95:12:65:06:37:3B
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4d:72:ee:d5:a3:cf:07:f5:1b:8e:90:3b:31:24:b6:a3:0e:
04:83:98:48:ca:8d:97:2a:1a:2c:e2:50:25:76:b2:e6:41:43:
29:78:cb:d1:26:40:cf:5d:17:cb:2d:59:78:ad:cb:43:ba:01:
37:ce:9c:79:69:af:45:89:a8:2d:64:54:82:ff:91:bf:5a:83:
d0:22:93:e1:90:d5:64:0f:25:a5:95:11:66:74:7a:81:b3:ea:
52:1f:60:0d:12:d2:34:24:b2:38:7b:7a:cd:9c:e9:e8:3c:ca:
0d:fb:51:39:86:df:2f:94:a5:48:a1:e9:1f:ff:0b:10:13:bb:
bf:64:27:e5:0d:aa:b1:61:9b:72:49:59:95:b6:57:d6:84:9b:
24:12:a5:9d:96:0e:37:c6:ba:14:3c:cc:85:38:d8:72:83:c3:
1a:0c:8a:a6:88:57:8e:50:8f:d4:c6:d3:96:dd:44:d9:1a:37:
39:84:71:11:e5:98:42:d6:cf:9d:38:c1:93:4f:7f:0c:71:fc:
ef:f5:16:7d:87:27:dd:cc:21:92:a5:01:c1:26:3b:1f:cc:8a:
98:d4:e3:4d:66:91:9f:be:d7:f7:43:a4:ce:46:db:41:8b:ae:
66:8a:84:e6:d9:04:50:0b:59:40:a4:7b:c8:ad:f6:a9:5a:c3:
f1:98:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:49 2025 by rpki-client