Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
File: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json)
Hash identifier: 5vFbAfBfxs0VS3yFQP6LuB3lXa6BF5i3PmdFQHzooIM=
Subject key identifier: A5:A9:3D:FC:23:30:A3:05:C0:9A:3D:A0:5B:A2:C5:F1:27:94:28:DB
Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
Certificate issuer: /CN=424c165b6a49349541c65af9b21580163819f284
Certificate serial: 019883569F8ADFA22E999B489B1157D71347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
Manifest number: 09BD
Signing time: Thu 07 Aug 2025 07:02:28 +0000
Manifest this update: Thu 07 Aug 2025 07:02:28 +0000
Manifest next update: Fri 08 Aug 2025 07:02:28 +0000
Files and hashes: 1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: W6Oucy66ph4fXb73w6HYbSxbJi6HeRA8tuTGLrl5aA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:9f:8a:df:a2:2e:99:9b:48:9b:11:57:d7:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424c165b6a49349541c65af9b21580163819f284
Validity
Not Before: Aug 7 07:02:28 2025 GMT
Not After : Aug 8 07:02:28 2025 GMT
Subject: CN=a5a93dfc2330a305c09a3da05ba2c5f1279428db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:0f:56:e6:d4:2c:ce:81:79:0c:d3:d6:c7:
41:70:7d:b1:82:63:f8:b5:12:6f:50:90:85:8e:96:
64:2e:f6:18:9c:b9:9e:d0:7e:e4:86:8f:3e:d1:97:
b2:46:cf:f1:79:d0:df:e3:a7:76:65:16:7b:44:08:
a4:97:14:5a:25:2a:fc:41:7f:82:8a:7b:52:ee:a3:
e8:b4:a8:ed:a5:be:d5:f6:69:d0:0b:06:80:83:bc:
67:3a:f3:13:16:6f:ec:da:b7:b1:e0:5d:66:0e:be:
81:29:fa:35:14:63:35:9c:55:b7:79:6b:79:d3:bb:
d4:50:6e:64:5a:61:77:10:e5:96:03:73:9e:6c:8b:
b8:ac:c0:d6:b8:fb:88:12:89:ab:8a:b7:99:0b:39:
32:a8:e0:82:d2:66:39:d1:69:e0:40:8d:27:c0:d2:
8e:dc:1b:6b:48:b6:bd:6b:f8:e3:3c:2c:af:cc:77:
f3:cd:1f:28:7f:f5:e6:f6:77:8a:3a:89:fa:47:6e:
3a:e3:dd:12:8f:b8:a5:fe:e4:43:5e:bc:d6:ab:15:
8b:1c:41:d5:76:53:e5:84:02:7f:ee:4e:5e:b1:e7:
9b:15:42:e1:51:d2:17:7c:ba:a3:92:1b:7d:74:31:
9b:cf:48:99:7a:79:f1:e2:ba:d8:26:c3:c7:60:ac:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:3D:FC:23:30:A3:05:C0:9A:3D:A0:5B:A2:C5:F1:27:94:28:DB
X509v3 Authority Key Identifier:
keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0d:69:9b:6b:ed:55:25:9e:d9:56:b3:d3:00:22:d3:ac:4d:
91:56:1d:76:3b:f1:c0:aa:0e:31:e3:3d:4b:51:d6:6a:5b:d0:
e5:ab:4d:34:83:65:d4:50:25:98:71:b1:5d:11:b1:23:09:3e:
fe:97:f0:7c:e4:74:99:b7:75:f1:3d:1f:bb:da:b7:e3:11:95:
ae:71:6b:91:e7:ad:b8:7e:08:47:cb:35:90:41:ff:7c:54:41:
57:10:ed:7c:d5:cb:5f:89:07:a2:9f:61:27:7a:39:44:bd:15:
8a:cc:4b:f4:21:a6:04:43:0c:fd:80:86:68:d1:5a:76:19:a4:
92:58:91:44:a2:09:ea:95:0f:73:74:ec:90:39:22:e5:98:14:
e4:ba:8a:4a:9d:86:a9:a3:49:47:f9:ea:78:dd:c1:f5:16:85:
95:f0:e8:87:0f:6c:c8:d6:d1:8d:57:69:c5:50:e2:34:dc:70:
ea:e3:e1:e4:05:4d:7c:8e:95:d5:02:de:31:a1:d4:23:5e:8f:
43:39:6a:74:10:86:fa:44:59:69:6c:93:68:76:c2:4f:48:da:
ea:34:cd:46:c7:20:ee:6d:c3:4a:67:3d:8a:cf:d9:70:bf:6c:
91:43:5b:9f:da:28:52:b6:18:fe:cf:57:58:19:38:4d:71:a2:
d5:28:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:35:44 2025 by rpki-client