Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
File: q-KqqfiJDkQV40HAd9hnvuJaodE.mft (raw, json)
Hash identifier: mzHWsB4mgu49RrV2eaAB40VBKhhca5Lcn2p/tT1VgHQ=
Subject key identifier: D0:C9:09:6F:27:33:EA:97:16:D3:08:C3:88:A9:EE:82:DF:20:14:E3
Authority key identifier: AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1
Certificate issuer: /CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1
Certificate serial: 01988BEABA4A7E2619234DBD0CD24D9F1D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
Manifest number: 7A
Signing time: Fri 08 Aug 2025 23:01:12 +0000
Manifest this update: Fri 08 Aug 2025 23:01:12 +0000
Manifest next update: Sat 09 Aug 2025 23:01:12 +0000
Files and hashes: 1: q-KqqfiJDkQV40HAd9hnvuJaodE.crl (hash: e4QjLTNoKH8Ivz6aEx+9vko0nu5wdM7SZu40kJcau1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ba:4a:7e:26:19:23:4d:bd:0c:d2:4d:9f:1d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1
Validity
Not Before: Aug 8 23:01:12 2025 GMT
Not After : Aug 9 23:01:12 2025 GMT
Subject: CN=d0c9096f2733ea9716d308c388a9ee82df2014e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:6f:7d:66:8b:94:eb:41:29:eb:66:54:6d:
c4:c1:3c:e0:07:b7:d4:f9:92:85:c4:67:2a:20:5d:
66:7e:4c:9a:0a:d0:cd:e4:e1:1c:f3:0d:cd:7e:66:
62:02:f8:06:eb:cd:c5:65:49:2f:b9:57:81:56:74:
7b:f0:f8:a0:d2:a5:fe:ce:45:2b:79:62:b6:6f:4a:
52:6e:49:24:35:7a:a3:54:aa:46:2e:97:f3:cf:ea:
36:3b:eb:27:a0:61:db:61:82:e9:a8:65:50:f9:c8:
17:e2:22:bd:f0:9c:f1:6a:3d:39:c5:6f:1e:53:51:
ba:73:1f:3e:c7:ba:57:2a:cd:1a:20:4e:65:ff:a0:
7b:64:d1:e2:c5:7f:a6:4a:e3:79:5d:3d:66:13:c2:
7c:da:49:24:cd:6e:6d:16:71:27:a7:37:df:fc:b8:
2f:d7:3b:88:64:72:19:bf:56:1f:68:5b:0f:6e:e7:
44:67:ab:74:6c:f4:65:7c:a9:ba:3c:f6:0d:7a:a1:
23:d8:b3:7a:d4:42:60:b6:97:63:48:9d:35:3b:ff:
e5:92:5c:45:86:28:a4:c4:3a:48:e9:e0:af:b4:13:
ea:69:c0:43:3d:bd:c3:83:62:56:bd:f4:fd:be:93:
2a:6e:e6:71:0e:cf:c2:91:44:1b:20:65:85:28:fc:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:09:6F:27:33:EA:97:16:D3:08:C3:88:A9:EE:82:DF:20:14:E3
X509v3 Authority Key Identifier:
keyid:AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:21:0e:71:92:8b:58:c4:e2:bd:ae:9d:bf:5c:a8:c9:89:ec:
6f:b0:08:4a:d5:9c:93:9c:77:08:3d:8b:4d:e1:d6:28:d4:0f:
49:22:df:df:ff:00:a2:66:f4:d4:1c:89:8f:6d:d4:1d:60:f3:
d8:b2:4f:a9:1b:ee:b8:06:5e:b5:c0:9c:31:4e:c5:e8:7f:bb:
2c:44:e8:0b:ef:86:d0:d3:17:22:4d:8e:5b:bc:e9:7a:8a:ac:
13:29:a8:e7:d1:1d:c0:3c:9a:28:de:1e:ac:0f:e6:55:6a:94:
c2:91:8e:f0:32:d7:be:e0:a5:8c:c0:30:6d:5c:31:36:49:a7:
ae:26:03:62:ed:fe:17:c6:0f:e2:cd:6d:ab:44:39:7e:4a:ed:
ae:c4:29:cb:11:9c:98:c2:3a:8a:4c:cb:6f:55:e5:28:30:71:
4c:cc:b4:f3:d9:3a:ab:c0:9d:e3:f9:dd:21:27:6d:28:b6:5b:
21:ba:b9:aa:3d:80:a4:a5:f4:21:49:fa:21:19:db:00:0a:76:
0b:8a:cf:6f:2d:53:f9:e5:16:cd:fc:07:48:67:b7:f4:65:27:
fa:c6:42:50:9b:c1:e2:83:97:43:01:c8:02:b2:6a:9f:b9:69:
36:d8:ce:88:e4:b8:b1:44:cb:3a:4e:c0:66:cb:ff:d4:8d:da:
68:c1:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:45 2025 by rpki-client