Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: hrEJj4R3biWTsOeyYL3tC1SAoZNYODQ/cvbTImHATRA=
Subject key identifier: EC:05:01:D9:86:E3:DA:8B:AD:BF:E1:1C:AC:71:47:E5:87:4C:84:50
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 019894120BE64BF9691AFF85A57F9F5283F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0616
Signing time: Sun 10 Aug 2025 13:01:07 +0000
Manifest this update: Sun 10 Aug 2025 13:01:07 +0000
Manifest next update: Mon 11 Aug 2025 13:01:07 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: UE2x/XU9ncueedPWU/TZypQoBHdWoqOsR2BrADA4Evg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:0b:e6:4b:f9:69:1a:ff:85:a5:7f:9f:52:83:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Aug 10 13:01:07 2025 GMT
Not After : Aug 11 13:01:07 2025 GMT
Subject: CN=ec0501d986e3da8badbfe11cac7147e5874c8450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:61:fd:0f:24:3c:b6:d7:40:67:6c:00:52:
dd:28:e5:66:7a:5e:b5:f4:d9:30:c7:ca:a0:8d:ed:
aa:84:81:05:b3:51:28:77:31:db:95:f4:ec:4c:a9:
87:36:34:c8:40:f1:7e:e5:9a:25:09:2f:6e:c4:b1:
77:b9:15:f6:ad:5e:d0:d0:77:3c:df:40:45:35:e9:
7e:85:14:a9:a7:0f:10:10:fe:ed:02:14:f6:f8:d1:
83:56:f6:76:72:0e:1d:39:8b:4d:ea:96:9d:2b:b7:
58:7b:d3:cb:26:8a:c8:4f:ea:e4:25:28:b3:be:2b:
88:5e:5e:68:7a:0b:fe:a6:52:c3:7f:d9:ed:6c:c0:
a1:c5:eb:cf:ba:53:a8:c4:d9:30:44:43:97:e4:82:
a3:8c:32:89:a0:5f:0c:e6:42:31:3f:13:49:c7:9e:
30:14:46:6b:ab:2d:f1:78:57:69:69:48:f9:85:c8:
a0:f4:3b:65:bc:32:ac:30:1f:fa:36:23:cc:cc:79:
07:bd:97:9a:83:3d:d0:83:5f:9a:2d:b2:1c:79:f8:
df:2d:5e:23:34:a4:cd:1a:19:5a:24:55:cb:0d:2a:
eb:1f:98:47:34:5a:4e:b6:f2:e5:b2:5b:c4:a1:04:
bd:e1:8e:fb:a9:3c:30:00:b3:ff:ce:2b:f2:70:ab:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:05:01:D9:86:E3:DA:8B:AD:BF:E1:1C:AC:71:47:E5:87:4C:84:50
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:12:a7:f4:df:db:71:28:b5:2b:dc:79:e4:6e:14:3e:32:
69:81:df:2c:10:11:f3:a5:5c:5a:94:92:da:5e:bb:82:58:13:
87:10:fb:d6:d3:95:81:1e:cd:b4:cd:ee:2a:46:7c:ad:36:67:
89:f9:16:fe:eb:a2:07:15:ef:96:9d:38:a1:27:84:a7:ee:0b:
22:b4:b2:8d:a7:98:fa:6d:b9:64:c2:89:c9:68:eb:d7:00:be:
74:c8:51:a9:b9:74:2a:67:5d:49:f4:9d:f5:81:bb:64:47:2b:
0e:12:e6:0d:72:5e:57:4b:d9:4e:b5:6a:16:c6:4e:78:ec:6e:
c6:da:de:5f:72:eb:5b:60:ce:18:9e:07:e4:8d:64:a0:74:e3:
72:8d:92:ed:80:d1:20:e8:d1:1f:64:06:89:de:9e:24:bb:b3:
56:3a:19:ed:02:6b:3c:40:09:a0:16:3f:82:7f:cc:39:e1:8b:
fe:5f:24:f8:b8:d7:8e:39:0d:12:03:75:44:9e:7e:2a:3d:79:
19:61:fe:95:6f:c9:9a:ad:9f:db:08:24:55:f8:3e:1a:f5:2b:
0f:6f:76:10:a2:e4:29:a2:b1:96:2c:4e:03:e6:45:a7:ac:3e:
48:45:da:6c:25:c8:63:b8:b8:b1:56:54:08:80:f9:b1:e0:f3:
4b:b4:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:26 2025 by rpki-client