Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: 5SvFR6+YwoxoPVRh5P9nHtLesySdK7TqUJmjZ6Ej24Q=
Subject key identifier: C9:6F:1B:91:75:B8:A6:A9:7E:7E:F1:86:5A:CA:4A:63:8A:02:7C:3E
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 01988EEC7E445896ADF7859123D9908629A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 13:02:00 +0000
Manifest this update: Sat 09 Aug 2025 13:02:00 +0000
Manifest next update: Sun 10 Aug 2025 13:02:00 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: q4CjUi+nQqyV16sODYfm9rcWZ/PpYB6k6b45bX8acsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:7e:44:58:96:ad:f7:85:91:23:d9:90:86:29:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Aug 9 13:02:00 2025 GMT
Not After : Aug 10 13:02:00 2025 GMT
Subject: CN=c96f1b9175b8a6a97e7ef1865aca4a638a027c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:e5:ac:a3:8e:81:3c:c5:ee:a7:6c:bc:06:
ff:48:da:23:ae:dc:9b:15:9b:fe:0f:3c:aa:33:5e:
df:af:8f:fd:e3:a4:24:48:d1:d0:f2:29:c7:a6:c2:
0e:66:28:35:7d:6d:59:32:e6:93:a4:c9:7c:80:2c:
8c:87:fc:0b:c0:a8:fe:aa:ea:b7:ac:c1:f3:71:f0:
a6:5b:5f:53:30:f5:cc:aa:f0:d8:94:3d:56:3a:94:
85:5e:71:46:4b:b0:99:3f:58:4d:24:5f:b7:7e:c5:
e5:31:64:b5:e9:d6:b8:0b:7f:d1:e0:51:6a:3b:92:
26:68:c3:f0:07:3d:77:2b:5c:be:2e:a2:52:81:12:
b3:0f:ac:b5:89:63:9a:37:07:1a:88:66:1a:8b:0f:
5a:6c:ef:d2:b5:5d:2f:86:b8:ee:d7:52:ad:e6:15:
57:28:88:ed:2e:aa:de:35:12:d0:3e:f8:89:71:c6:
7f:b9:9c:dc:ba:4f:fe:fe:d9:ff:40:56:4d:73:2c:
2d:f1:3b:72:61:01:a3:11:6c:3d:ae:ce:1e:b4:58:
70:d8:93:b6:99:58:e1:aa:fa:70:08:c5:c1:7c:32:
e9:4d:12:66:a6:59:5f:38:84:13:28:e5:bc:a2:18:
80:b1:71:55:94:69:8c:c0:ff:5e:a2:2c:61:f0:60:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6F:1B:91:75:B8:A6:A9:7E:7E:F1:86:5A:CA:4A:63:8A:02:7C:3E
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:64:7b:26:d4:51:e3:d7:b4:a8:14:06:1f:01:53:54:ad:
b8:f9:a3:ed:61:02:a1:cf:3a:95:1d:aa:7a:27:ba:0b:05:cc:
d7:5c:0e:b8:05:21:04:59:6c:ed:e2:b6:5a:4a:8e:c4:73:50:
eb:b8:f1:e1:9c:54:ca:4b:a1:90:d6:fd:03:1c:59:86:56:34:
27:4d:71:69:e3:c0:ee:e0:a2:09:43:41:0c:1f:03:d9:1b:f3:
98:92:ab:25:c7:e9:4f:a0:5b:71:f5:a0:d1:5d:9e:39:f9:c1:
c5:a0:3e:e6:2d:b9:46:57:ff:e9:66:ca:15:32:ec:b5:f7:1d:
f4:ac:b0:69:e4:6f:1f:3f:99:77:18:92:7d:18:f8:68:ba:57:
17:26:87:9c:6c:45:90:73:88:81:87:52:12:a1:ea:77:d6:6e:
d5:33:24:73:03:58:f6:c3:bd:c5:9c:81:c9:fc:4d:7d:7b:e7:
f3:dd:78:6b:ac:f3:19:b6:f8:08:23:53:4d:b6:89:4f:ef:69:
f5:91:73:f2:a7:e3:f9:e5:45:09:c0:ab:e1:b6:d4:72:02:09:
4d:a1:48:ee:a4:00:df:bd:81:77:a5:ae:24:f1:e7:48:af:57:
67:f3:9d:91:e2:fc:2d:c9:60:1f:7f:0a:48:04:85:ab:86:50:
ba:7e:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:47 2025 by rpki-client