Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: cWjDxjU2rGrkI8LyWR6VcA0dqj3eBhMy4KHIdcpAqKQ=
Subject key identifier: E2:32:B9:39:09:CC:B4:AF:C7:5E:20:96:E1:DD:B1:ED:25:F7:73:51
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 01988C5808D4C704E1138CE79F6218A1F1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 0900
Signing time: Sat 09 Aug 2025 01:00:36 +0000
Manifest this update: Sat 09 Aug 2025 01:00:36 +0000
Manifest next update: Sun 10 Aug 2025 01:00:36 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: c4iqWlGpIu3sPqj52DgBz8/06uxb7v2LP9HweM26HUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:08:d4:c7:04:e1:13:8c:e7:9f:62:18:a1:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Aug 9 01:00:36 2025 GMT
Not After : Aug 10 01:00:36 2025 GMT
Subject: CN=e232b93909ccb4afc75e2096e1ddb1ed25f77351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:a2:4d:7e:12:c8:ee:06:82:91:dd:a2:97:
a2:c2:e4:ce:36:0a:4b:16:89:b1:a5:b9:4a:2b:01:
24:a1:a0:bf:87:a2:3b:43:d0:7c:b1:63:43:6b:26:
4f:6f:6d:4e:41:35:f4:6b:a0:3a:9e:49:c6:8c:4e:
85:5f:86:b2:10:73:17:9a:d3:87:cc:27:c7:d3:10:
8a:59:cc:d4:0f:d8:75:e3:33:5c:4f:cd:9d:12:f5:
e8:dd:9f:81:63:4a:80:33:70:d8:ef:d4:ed:62:a8:
eb:f5:fa:8a:72:b5:c7:cc:df:cc:d8:70:70:b3:a5:
4a:f1:cc:58:27:27:c2:d9:84:54:95:5f:02:5a:ab:
6a:31:03:de:12:4f:ae:2b:ea:e3:b9:c7:8d:af:a0:
d4:4b:c5:4b:1d:e9:b5:b5:bf:1c:28:d2:c4:76:ec:
2f:d3:a1:c2:6a:fd:f2:b2:a4:d6:98:6e:7a:52:c5:
70:3a:62:88:56:bc:a4:6f:25:24:b6:a1:c7:a9:75:
32:2c:6a:c7:57:12:d2:99:7d:05:60:61:1b:68:4d:
4e:ec:0a:a7:de:80:96:b3:74:74:45:3d:bf:d6:24:
ec:b3:f3:d7:e3:2f:93:fa:23:40:63:b4:9f:e8:12:
ff:79:b6:54:a6:11:dd:a8:7e:d4:a8:20:76:8f:c2:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:B9:39:09:CC:B4:AF:C7:5E:20:96:E1:DD:B1:ED:25:F7:73:51
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:8e:92:6f:db:94:8d:ca:11:ad:b0:c5:9b:b2:49:72:29:
74:d6:10:03:12:6a:c9:1c:ab:a9:40:8b:6c:34:7a:02:8f:01:
f6:18:46:04:d2:ab:f4:90:a4:8c:ea:42:e5:43:5f:96:02:18:
48:87:6b:32:d7:71:da:20:03:02:f6:19:42:c4:00:33:8b:3f:
bb:98:38:08:33:0c:80:f8:dc:01:7c:e1:7b:c2:59:c5:1a:20:
d6:34:7f:f5:7a:e8:63:67:a0:4f:62:2c:cc:7f:83:09:93:5c:
75:91:80:22:dc:1f:20:17:2d:59:a2:87:39:14:0e:6a:3d:0b:
a2:34:6f:b4:10:f9:b8:84:10:80:f9:bb:28:13:9e:5b:a4:ba:
69:44:79:04:0a:e7:25:ba:5d:4e:93:f1:79:ed:d3:8c:6d:32:
0e:81:23:f7:de:e4:2e:96:08:5b:e3:a0:56:51:05:48:5a:57:
8b:c3:c9:28:ad:94:8d:cd:32:2b:e8:a2:4b:7d:ff:db:fe:79:
9c:80:4e:5b:2f:ea:7a:fb:57:c5:33:6f:b1:6e:c1:77:00:a2:
64:00:45:f3:44:0a:47:6d:fc:98:c0:c0:60:17:01:6b:d4:65:
9b:66:f0:ea:1d:1a:9d:73:77:e7:4d:de:2a:eb:75:b5:e6:c1:
7f:f5:bb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:30 2025 by rpki-client