Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: nGVcXpt8MQEqRe+KN7J12c9z0DHWYCs4eSuzd9vzhp8=
Subject key identifier: AC:BE:9B:8B:73:E0:F6:AD:D6:68:F7:32:8D:E4:24:4B:3C:08:43:C4
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 01987B9C7C0E77FE13E0F816BCE2D036ECCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 1115
Signing time: Tue 05 Aug 2025 19:01:49 +0000
Manifest this update: Tue 05 Aug 2025 19:01:49 +0000
Manifest next update: Wed 06 Aug 2025 19:01:49 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: NVBygsY91OYlImA962LSkq9bF7Xi46mCM4QI+qYADmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:7c:0e:77:fe:13:e0:f8:16:bc:e2:d0:36:ec:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Aug 5 19:01:49 2025 GMT
Not After : Aug 6 19:01:49 2025 GMT
Subject: CN=acbe9b8b73e0f6add668f7328de4244b3c0843c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:34:88:85:5d:de:7b:31:13:c8:bb:93:fe:
6a:5d:4b:75:85:79:79:c2:fe:75:60:e3:dc:27:e5:
37:0c:10:06:65:56:fc:d2:f5:62:84:ab:10:bb:38:
fe:9e:81:03:3a:5e:37:71:8a:ec:a1:bb:55:f4:71:
80:cf:e0:75:a9:60:68:4a:5d:6b:aa:17:b0:da:e2:
12:f4:93:9d:75:d9:d9:e2:97:30:5d:d7:98:c5:b7:
25:f5:06:e0:8e:f8:99:f2:55:ff:03:d6:59:81:75:
6a:22:cd:82:f4:da:e6:16:8d:64:e7:3e:83:a7:f6:
ef:cc:a1:8d:4f:66:58:9b:78:19:62:03:a5:35:78:
95:ca:a7:25:ad:a5:ad:e8:cd:bf:47:e4:61:8a:0b:
25:f9:f5:fd:a1:c8:d0:7e:fc:fa:01:48:35:ca:19:
52:f6:35:2e:69:c0:1d:b0:81:34:02:65:72:07:ed:
d1:5b:24:5c:7b:9d:f2:99:6b:37:11:5b:a2:ab:b2:
68:b0:37:e3:ea:ac:e4:95:95:fc:06:19:fb:55:81:
57:d3:26:0b:fa:51:b0:69:2b:3f:41:97:cd:3d:b0:
41:64:9e:78:0e:6b:e3:c5:38:17:7e:6f:6f:1f:35:
a7:42:1b:fe:35:b9:d1:b0:f3:bf:08:ef:c8:df:8f:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:9B:8B:73:E0:F6:AD:D6:68:F7:32:8D:E4:24:4B:3C:08:43:C4
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:e3:11:16:51:01:d2:71:de:6c:13:d1:d9:56:d2:69:c7:
d4:4b:00:0d:df:26:28:8c:02:07:7e:ae:73:16:9b:97:ce:f7:
3a:ea:d3:da:44:6a:0b:c4:bd:9a:78:47:87:2d:59:61:6b:10:
06:03:c7:e4:59:4a:4c:71:17:ea:e0:94:90:c3:dc:21:b9:78:
f4:13:e9:a3:69:02:40:c9:f5:7c:b9:0c:15:6a:92:7a:bd:92:
a4:ef:47:dc:c8:3c:92:7f:1e:a5:fc:45:be:7d:25:db:08:ba:
c4:88:3d:34:02:49:0d:87:1d:03:90:d0:bb:e9:58:46:9f:76:
39:98:ec:25:66:18:91:2e:07:b1:1a:f9:10:03:db:62:fe:81:
52:8b:01:46:63:9e:32:a6:07:b7:47:50:d1:eb:b3:5b:99:6c:
39:4f:82:5b:38:ad:6b:18:f7:2a:31:b8:7f:f0:54:f0:a8:fd:
29:93:67:18:6a:27:29:d2:8c:3b:49:3c:5b:f0:42:5a:6b:81:
4f:de:ca:aa:7d:d0:e8:a7:6b:c3:8e:b8:a7:5e:cd:ab:49:8b:
79:ad:83:95:96:1e:ab:df:d5:05:46:d5:bd:dd:89:28:91:e6:
ab:67:e6:b2:01:49:a5:5e:c1:09:9f:4a:b9:29:cb:87:40:62:
f2:de:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:18:06 2025 by rpki-client