Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: gNA978Mro5X9MOUmxreRkVrrfjXyLjoo7FdP1wYIK4Q=
Subject key identifier: E0:81:DB:40:E4:B5:7C:22:3D:2C:4E:CE:C9:A9:79:E9:3F:40:BF:62
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 019879AD6F9B8DC114EE411D502E8F3D6BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 10:01:06 +0000
Manifest this update: Tue 05 Aug 2025 10:01:06 +0000
Manifest next update: Wed 06 Aug 2025 10:01:06 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: 44YWr7ao1+mrCfj9NUyi9LD39QhuZ48i5lYaPPafkA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:6f:9b:8d:c1:14:ee:41:1d:50:2e:8f:3d:6b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Aug 5 10:01:06 2025 GMT
Not After : Aug 6 10:01:06 2025 GMT
Subject: CN=e081db40e4b57c223d2c4ecec9a979e93f40bf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2a:8b:2f:1e:9f:74:a4:97:cd:49:69:e7:03:
bc:a1:c5:5f:00:67:02:16:9b:a6:9a:6f:0c:19:ad:
69:14:39:1d:b1:a6:57:bc:43:95:bc:d4:20:24:a4:
88:96:6b:c3:be:05:63:d5:94:27:79:2d:3c:27:c5:
f7:23:15:83:26:8b:17:f5:2d:44:1c:33:1b:40:88:
48:a4:ff:f3:68:d0:6f:d2:55:71:5e:06:4f:c8:6c:
06:3c:63:d1:12:43:78:a4:08:df:50:0d:d5:a2:8c:
ab:e9:81:4d:22:d6:52:c7:3d:33:28:c5:6b:01:2a:
df:b8:f0:35:95:d8:d3:e3:52:1e:0b:f6:08:b2:41:
9b:e5:19:00:8a:e4:87:a2:a3:cf:a1:24:ed:70:63:
40:40:f1:2e:03:f9:7e:9f:f8:69:cc:e8:20:8e:3e:
f7:3e:62:1d:bb:48:9f:a9:1a:55:7b:e6:57:11:85:
c2:3d:2b:d8:97:1b:09:de:11:4d:54:3a:39:ed:de:
cb:6a:36:b5:a4:6b:cd:b1:a4:59:8f:d7:a7:9c:59:
83:29:c3:e5:bb:99:9b:91:d7:09:a2:5c:46:5b:3f:
d2:f9:4a:61:4c:a0:a0:3b:45:22:fa:cc:b4:15:a8:
39:9d:15:aa:05:34:30:76:08:75:ae:d5:fc:bb:b0:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:DB:40:E4:B5:7C:22:3D:2C:4E:CE:C9:A9:79:E9:3F:40:BF:62
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f4:1d:ad:cc:3a:80:13:ac:51:42:ef:e9:89:5b:26:3a:b0:
f9:48:b9:07:bf:4b:4e:55:a6:3b:5e:eb:03:e0:1c:1b:19:af:
c8:69:a4:8e:d1:32:67:18:4a:5d:98:fe:d4:18:e4:3c:c9:71:
c0:c3:4f:2b:0a:06:dd:e2:11:62:53:5b:8b:67:15:e5:61:4e:
db:d0:15:d5:bd:6e:3e:0b:c8:f0:b7:f3:e0:4b:e7:c1:08:20:
26:0d:ed:1a:93:2b:86:50:44:6a:b5:b2:c8:c5:01:4b:36:b8:
22:5a:11:37:13:27:3d:8e:9b:82:85:3e:26:43:a5:a1:83:aa:
20:10:10:bc:35:82:25:95:4b:8b:9b:22:1b:8c:0b:e5:c5:61:
4d:12:80:a9:2d:8b:dc:58:af:e1:a0:f3:e7:8e:08:3b:7d:93:
c2:0b:48:9a:86:64:68:57:b6:bc:37:23:cd:b0:9f:5f:07:37:
52:ec:a2:31:ee:14:5c:f3:bc:0b:e6:85:2d:22:93:6c:94:aa:
86:3e:ba:64:2c:4c:6f:2b:68:8e:c3:50:73:60:ed:ae:f6:a9:
b4:ce:71:fd:c3:77:87:9a:15:d8:11:9b:1f:03:2d:6f:bd:33:
5c:64:65:93:25:11:d7:95:b9:54:e2:55:a1:79:94:8a:3d:1e:
8f:3e:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:48 2025 by rpki-client