Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: qa8zb55jAWCn5QfgEnoZChDAQRWLBqtokyYa5SEClBo=
Subject key identifier: 51:50:8B:18:EA:C9:AA:2E:3B:59:3B:63:1C:25:75:E3:94:76:C9:BB
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 01987486B9A07E4449E41E23E388C8393EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 1146
Signing time: Mon 04 Aug 2025 10:00:43 +0000
Manifest this update: Mon 04 Aug 2025 10:00:43 +0000
Manifest next update: Tue 05 Aug 2025 10:00:43 +0000
Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: G6RPr4yQq4MM99kgmyoo+HEgLlI8URSgt70Jjh5AsiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:b9:a0:7e:44:49:e4:1e:23:e3:88:c8:39:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Aug 4 10:00:43 2025 GMT
Not After : Aug 5 10:00:43 2025 GMT
Subject: CN=51508b18eac9aa2e3b593b631c2575e39476c9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9f:78:d5:6b:ea:be:be:27:af:27:e9:d1:ef:
08:57:5f:17:c2:78:75:a9:ae:c4:e4:e2:c2:a7:05:
72:ce:0b:bf:49:41:c2:3f:aa:98:97:a9:1f:0f:01:
8f:60:2a:3e:6f:19:c3:12:1f:fc:3f:0d:33:14:33:
5c:b9:99:b0:0b:55:d2:a2:87:da:c4:9c:fa:aa:42:
f6:fb:09:ae:1e:39:63:2e:e0:41:07:c4:8e:68:ac:
bf:c9:e1:36:cf:55:ed:4e:be:b1:36:58:66:51:77:
de:f1:79:a4:18:dc:96:44:99:21:45:e1:60:90:2c:
1d:52:4b:3e:da:48:d4:e9:cb:6d:26:d9:40:63:00:
1a:1b:02:65:b4:86:7c:4c:a5:19:f3:e6:86:75:3f:
a7:5e:21:cf:d3:40:c4:88:c9:38:d0:6b:4f:b8:9a:
c8:f0:86:07:0b:b1:dc:02:a6:0a:57:c3:24:3f:38:
85:07:c9:af:e4:ab:72:27:b9:aa:83:52:74:07:06:
5a:e5:b0:0a:19:a4:27:86:f2:86:f0:58:61:f9:fd:
cf:c5:23:1f:a9:f8:33:62:9c:13:c4:46:55:91:b6:
2f:28:07:91:f0:a0:3b:42:b7:e0:ab:8b:71:3b:60:
ab:df:0f:60:20:d6:6e:f1:af:3f:d4:0f:71:73:74:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:50:8B:18:EA:C9:AA:2E:3B:59:3B:63:1C:25:75:E3:94:76:C9:BB
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:34:a9:21:0c:e5:12:05:df:86:34:5a:a6:85:32:ab:88:09:
e6:eb:8b:c5:7c:ec:87:1a:a2:95:c8:e4:a0:be:f6:28:9c:de:
33:3a:49:8d:c6:69:24:55:36:a1:89:fe:7a:c1:74:de:85:5c:
77:83:59:5f:fc:f8:da:08:da:98:64:3f:24:e1:ce:b8:cf:3c:
b2:3b:ff:e0:f2:a7:36:48:da:ef:f2:a9:a5:03:bd:01:dc:7e:
e6:1e:71:8b:0a:33:f4:19:3f:26:0e:64:4c:9a:4d:9b:2c:f7:
3a:88:ef:c9:b0:85:7e:65:55:9e:32:cc:13:68:1d:9c:a7:37:
1b:16:d2:e2:b2:99:ad:75:c9:29:54:3b:ef:5d:f8:95:be:04:
8a:50:56:b7:32:19:a9:aa:24:21:0e:2b:8e:cb:eb:9f:e4:a6:
fb:9b:f5:9f:3e:f2:3e:7e:37:96:0e:09:16:68:b3:7f:41:4f:
89:6b:1e:9a:13:b1:bd:72:f0:05:ec:ef:be:7f:3d:da:14:db:
58:6d:bc:e6:45:2c:cf:f5:97:12:d5:71:d8:10:2f:ec:f9:0d:
8e:16:8d:3b:67:65:e4:61:eb:1e:52:5f:c9:99:f7:ff:2a:86:
cb:cb:38:7d:f3:0a:b0:64:71:95:46:e6:e0:36:51:e5:c2:4e:
27:e4:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:17 2025 by rpki-client