Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File: QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier: PVsDC9i00fDnwGT+2lhVXQsosiGJyHsSPXxigkm3J4w=
Subject key identifier: BE:61:1C:6E:47:61:BE:78:7C:4D:9F:BC:44:06:38:05:E0:C7:62:DA
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial: 019894B85C3645EAF3677612BCA26E727236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number: 026F
Signing time: Sun 10 Aug 2025 16:02:46 +0000
Manifest this update: Sun 10 Aug 2025 16:02:46 +0000
Manifest next update: Mon 11 Aug 2025 16:02:46 +0000
Files and hashes: 1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: iyjln1Cn2Im/n/bos/z6AdGxmGKvoc7/4lhxvcaEMME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:5c:36:45:ea:f3:67:76:12:bc:a2:6e:72:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Validity
Not Before: Aug 10 16:02:46 2025 GMT
Not After : Aug 11 16:02:46 2025 GMT
Subject: CN=be611c6e4761be787c4d9fbc44063805e0c762da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:b3:71:0a:98:34:07:02:5a:84:b4:eb:fc:
f4:ea:85:49:a1:08:c0:ff:d0:ee:63:5b:4f:50:a3:
ec:87:cd:75:49:ce:35:7b:12:2a:ff:ad:5c:79:ce:
77:1e:43:11:0f:18:8a:01:59:b1:5c:fd:58:79:45:
67:e1:92:d5:59:b1:c7:0a:e1:16:dc:fb:3e:88:3a:
5a:e0:c8:e7:79:5f:3f:1e:6e:00:18:ef:e1:7c:28:
fc:09:69:50:c9:2c:88:28:c2:7e:02:55:f6:05:3a:
8f:0e:94:65:8f:22:51:f3:7f:e6:31:a5:72:57:dc:
7d:6b:3e:e3:01:14:6f:a5:28:23:80:40:f8:4c:3b:
10:73:5e:d7:1a:f1:08:1f:00:bd:67:e2:ab:ea:51:
47:27:0e:16:64:b9:82:69:a3:ae:00:be:db:ae:b8:
83:63:57:0f:1a:45:0c:7d:c2:9b:07:d5:33:81:6b:
a8:24:4d:d4:99:ec:99:7c:a3:1c:10:09:ac:21:01:
cd:f7:d4:ad:6f:1a:97:ae:9d:75:3e:c7:12:0c:b2:
d1:3c:4d:2e:da:a8:c7:7a:42:9d:7c:8a:fe:5c:fa:
74:6b:e2:2c:ff:b6:69:b0:b0:59:ab:ad:9f:ab:67:
2d:1e:0d:3f:34:cc:32:88:37:98:d7:4b:ea:d2:0a:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:1C:6E:47:61:BE:78:7C:4D:9F:BC:44:06:38:05:E0:C7:62:DA
X509v3 Authority Key Identifier:
keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:4b:ad:1a:d6:27:c0:c9:0b:65:8b:6b:2f:c4:4f:ff:4f:
85:93:08:55:7a:86:db:8c:28:94:e1:bc:2e:73:dc:78:56:df:
de:08:ef:2c:55:cb:06:c4:40:9f:9e:0f:31:aa:7a:44:bd:f5:
37:a6:ae:f2:a9:6e:0c:48:0a:b4:df:d2:4d:f9:7a:a4:04:4d:
41:08:76:84:c4:86:ea:44:8f:70:6c:40:4b:f2:07:78:48:6e:
df:bb:a1:34:a0:9a:dd:51:c5:cd:41:4c:3d:0c:4d:d9:db:3f:
ea:27:d9:ca:30:f2:92:38:89:8b:a8:d6:61:36:13:0b:20:11:
bb:38:98:e9:ca:9d:bd:c4:78:de:cc:1c:59:a2:6d:57:30:78:
dd:71:bb:11:88:28:a4:e5:c9:c4:9f:dc:82:76:29:78:06:a9:
da:b8:17:a8:e0:45:c2:e9:36:30:c4:09:b0:4c:e4:17:8f:18:
16:7c:59:73:12:a9:ad:50:77:27:1a:4c:c7:53:46:57:1e:3b:
8c:2d:d4:5e:c7:ea:a6:53:26:ac:00:13:ef:f3:0b:96:21:c2:
58:0a:83:1a:6d:58:df:b1:0e:eb:6d:79:24:fd:aa:36:75:7e:
8b:f9:13:e1:b0:c3:81:a3:76:0f:c2:ff:c9:18:82:b4:40:43:
07:4d:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:30 2025 by rpki-client