Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: G6PDi5vAokSZzBupNoA8WNA7C0moMBBGw2SA/cOC6Ls=
Subject key identifier: 87:4B:7B:1A:10:DB:B7:1D:52:0B:D1:0B:F9:4E:5C:30:EF:61:8D:47
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 01988543D11918042E7A9333E7F570A0A401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 16:01:10 +0000
Manifest this update: Thu 07 Aug 2025 16:01:10 +0000
Manifest next update: Fri 08 Aug 2025 16:01:10 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: AL1IeYOzmh0ks0QkcK4qOVotiwkn6rwmJn1jSKpS/ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:d1:19:18:04:2e:7a:93:33:e7:f5:70:a0:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Aug 7 16:01:10 2025 GMT
Not After : Aug 8 16:01:10 2025 GMT
Subject: CN=874b7b1a10dbb71d520bd10bf94e5c30ef618d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:a5:c5:41:16:65:29:b5:7d:74:81:df:b3:
bd:97:dd:e3:a3:f8:2f:e3:07:da:7b:66:10:64:9d:
44:59:d1:f7:e9:87:d5:f3:cb:bd:23:3b:5c:4e:f7:
ff:b8:f9:b1:3b:4e:4b:f0:87:a1:29:e0:ce:cc:1c:
e5:85:cc:50:2a:c6:d8:d6:36:f5:ea:c8:e5:10:65:
cc:45:cd:6b:a7:c2:19:be:a4:9a:f6:45:93:e1:99:
6c:f3:6e:8e:9c:a5:bb:c2:3f:9b:31:59:51:00:a9:
c5:bd:ff:cd:96:c9:f0:c7:82:d8:89:56:8c:d4:d6:
05:b8:33:fd:4d:a7:95:e9:26:c3:8b:2a:2d:85:a5:
6c:fa:25:83:2e:6c:fe:8b:97:46:22:34:ef:34:1c:
e0:b5:a0:a6:c0:15:55:b8:95:44:5a:7f:9a:f2:91:
96:c5:25:17:41:d3:3d:e4:75:24:2d:b3:4c:d6:86:
7d:c1:3f:72:7c:d3:61:5b:d2:04:68:2e:aa:f6:e4:
8e:73:e5:c9:8b:f6:2d:b2:09:38:65:c5:13:df:b7:
3a:9a:e1:bc:84:9a:d4:0c:9c:6d:86:31:15:84:9e:
bd:5d:62:d3:75:cc:a4:91:4a:f8:e0:bf:43:d1:dd:
ba:35:7b:c7:27:ff:0b:19:f9:58:8d:e7:55:eb:bd:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:7B:1A:10:DB:B7:1D:52:0B:D1:0B:F9:4E:5C:30:EF:61:8D:47
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:a0:0e:6d:61:be:4f:ef:4d:13:ee:26:d1:2b:58:13:3c:
ee:dd:1b:76:9a:46:7f:7b:9c:57:7f:ec:69:ce:91:56:4d:34:
4a:e1:27:ef:25:7c:37:bb:38:de:6f:42:b6:2e:7f:89:44:9b:
10:b8:f3:ef:6f:f2:84:5a:81:58:5f:d5:de:17:a7:bb:e6:c4:
4a:00:79:df:17:83:90:08:68:4b:90:a1:8e:f9:9a:45:7a:c1:
33:bf:d2:dc:2b:58:87:27:0f:0b:c3:48:37:0f:9f:99:e3:24:
2d:a4:cb:aa:e1:3b:2e:ed:54:1b:73:3a:f3:70:f4:8e:a9:81:
34:90:66:ea:ea:65:12:73:cc:4f:4f:a1:a0:6a:47:d2:b6:aa:
ef:51:6f:10:0c:bb:fa:a5:2c:1b:fd:5c:fb:1a:89:f0:a4:6e:
64:7e:1a:06:a4:f0:c7:76:0b:51:3b:12:a9:f3:0c:8a:4e:13:
69:84:6b:ba:0b:13:4c:52:2c:34:57:5d:ad:09:54:22:1f:df:
1e:8a:11:03:8e:b6:97:ae:88:f8:3a:2d:49:c1:7c:c0:cb:15:
b1:76:f2:ee:45:35:30:d7:dc:0d:e7:20:b4:ad:09:ad:b3:94:
7d:9f:70:69:01:42:72:d7:02:a8:2f:07:78:4b:c4:cb:a9:5e:
bf:ea:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:21:06 2025 by rpki-client