Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: tL5ZxtAqVTCTD1k1WvxqxX8TfehkcF0nt3C6tYGf3lU=
Subject key identifier: A2:4C:D7:9E:6A:BB:04:30:43:4A:E5:E3:C9:15:75:01:0D:7F:DA:66
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 019873E24BE40B8757DDC1800FDB0F56BC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:06 +0000
Manifest this update: Mon 04 Aug 2025 07:01:06 +0000
Manifest next update: Tue 05 Aug 2025 07:01:06 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: 7GISGRNVHiUrxbLGPeU+vLCs+6eQ7W1zIK0mbJvIdg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:4b:e4:0b:87:57:dd:c1:80:0f:db:0f:56:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Aug 4 07:01:06 2025 GMT
Not After : Aug 5 07:01:06 2025 GMT
Subject: CN=a24cd79e6abb0430434ae5e3c91575010d7fda66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:bf:1e:e2:d2:4b:dc:b1:3c:7c:f4:41:81:
39:6a:4e:4d:0d:f7:08:7a:88:1f:c1:19:38:05:9d:
93:ba:9e:7c:dc:be:3a:19:1e:0c:33:a0:c0:0c:5f:
fc:35:47:e5:74:81:1d:25:89:8a:35:c2:95:85:0b:
e4:78:ec:60:c9:de:55:26:d6:ee:8e:38:2d:31:88:
df:d2:2f:fb:e1:22:98:0d:90:7d:ac:71:99:c7:d2:
31:4c:0f:e6:0f:66:80:22:54:b4:04:82:11:e9:7b:
9a:59:46:e7:a3:1d:ee:e9:43:c2:3d:32:72:cd:a0:
d4:e1:f3:82:e7:a3:5f:4d:24:dd:1a:f1:fb:6f:b8:
df:75:b5:03:ee:90:f6:fb:84:25:e0:00:59:06:3a:
e2:93:1a:80:40:2a:22:db:28:f2:7b:27:86:0b:55:
81:bd:46:33:23:b9:e4:6e:67:9f:65:2d:11:60:84:
df:25:d0:e9:e3:02:23:93:16:41:ab:27:60:f9:dc:
03:01:d7:9a:4e:0d:5b:85:e3:53:2f:2d:9a:e0:3d:
e3:d7:46:91:48:ae:f9:bc:02:22:38:19:01:95:c4:
ce:3b:99:4c:26:5c:3f:71:75:02:68:3c:be:18:bb:
1c:35:ba:29:d9:9e:16:d6:66:d8:29:d6:b6:74:94:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4C:D7:9E:6A:BB:04:30:43:4A:E5:E3:C9:15:75:01:0D:7F:DA:66
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:0c:e1:06:6a:bf:dd:7c:b8:b4:0c:7c:f2:00:a5:d1:fb:
87:60:ac:63:32:a8:0b:d9:b7:41:bb:83:a4:59:b7:a6:68:9d:
f9:43:ba:f0:9c:f5:7b:33:b1:e8:ba:d4:b5:a1:ec:23:a2:ee:
7d:8d:c2:bc:e2:5d:d4:b9:85:1f:d0:7d:e2:e7:dc:8c:27:e7:
1a:8b:08:c4:3a:7f:40:71:c5:53:9d:d0:6e:a7:83:b5:e2:04:
6f:a2:99:61:59:3c:6f:fe:dd:7d:60:85:ff:08:97:b3:5a:6e:
14:94:1e:6c:7d:90:49:3e:e1:ce:6d:9c:4b:71:c2:d7:35:64:
1a:16:bb:e3:ef:37:2a:fd:9a:d6:f5:0d:78:7d:70:4d:6e:17:
7a:00:d4:d1:79:d5:35:52:1a:ee:a6:1a:46:50:7c:bf:41:d3:
c4:eb:bd:9e:f6:60:a1:f4:60:91:5b:2a:9c:4e:de:87:78:94:
10:ce:c3:ce:a3:2f:c0:59:2d:2c:11:8a:a7:f5:11:fd:07:d7:
d0:10:9f:cc:98:89:ed:76:c9:bb:69:a2:c4:7a:70:fe:fd:ae:
fc:1d:a5:ae:08:f8:e5:c6:4d:57:3f:9c:dd:02:f6:2a:3e:d2:
3e:a6:98:b3:58:02:89:6a:05:c6:e7:01:d3:cd:84:bf:fd:f4:
b2:f9:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:02 2025 by rpki-client