Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: vBXlYudDlEhuOoVDZ6uu/beraQ8e3vitPksWhdlIoRs=
Subject key identifier: F0:5B:14:E1:10:BA:3C:4F:C7:3B:5D:FC:BE:3B:FD:A4:A0:11:AA:5C
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 0198530EBB4171F47118E2F004D46A678314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 1001
Signing time: Mon 28 Jul 2025 22:02:11 +0000
Manifest this update: Mon 28 Jul 2025 22:02:11 +0000
Manifest next update: Tue 29 Jul 2025 22:02:11 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: SpRVi/KWB8IJtfKpWyIyS8rZFJ92eCnGrzJqj9Iukgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:bb:41:71:f4:71:18:e2:f0:04:d4:6a:67:83:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Jul 28 22:02:11 2025 GMT
Not After : Jul 29 22:02:11 2025 GMT
Subject: CN=f05b14e110ba3c4fc73b5dfcbe3bfda4a011aa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:13:46:fb:a8:6f:45:c4:42:ec:f4:64:f5:
ca:16:94:84:56:ea:75:88:50:78:e6:c4:d0:3e:d0:
ba:a6:11:cc:0d:28:6d:24:27:5e:39:10:5a:7b:01:
7f:b6:16:bf:e9:5d:13:57:d6:25:7e:04:87:6c:0d:
64:19:89:d3:cd:8f:2b:74:05:77:f1:35:3e:f5:08:
e4:65:8d:f8:2b:15:b4:23:33:d4:33:9b:32:b4:56:
3b:bb:06:da:1b:2f:8b:dd:94:98:64:1f:61:0d:ce:
15:88:80:41:45:69:27:48:13:47:44:b5:75:ef:1b:
4e:ee:97:93:29:a0:28:d7:3c:3a:43:26:54:13:4d:
a1:89:f8:8f:9d:11:ab:04:a4:8c:74:dd:ae:bd:c5:
1b:1a:35:03:e4:43:2a:98:ae:b9:69:1f:1e:2f:f2:
b2:6b:75:7f:31:95:68:ee:9c:41:a2:7e:60:3d:45:
53:20:a4:c9:28:fd:ba:4c:93:fe:93:dd:97:f0:fb:
26:7a:b5:1a:26:2d:57:02:d7:d3:70:8b:fe:53:ec:
c0:51:75:25:04:4d:39:ed:8f:0d:88:63:16:fc:24:
9c:1b:8e:02:f4:7b:9e:eb:1b:03:13:dc:c2:5e:28:
31:4f:14:1c:a5:27:a6:f9:3e:da:4b:57:e5:68:54:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:14:E1:10:BA:3C:4F:C7:3B:5D:FC:BE:3B:FD:A4:A0:11:AA:5C
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a1:3d:cd:e4:6d:14:85:1d:75:34:80:1b:b5:5c:eb:42:2a:
41:90:7b:4b:f1:1b:15:4d:13:06:95:a2:18:fc:39:42:65:d4:
34:fd:d2:4c:91:79:d9:4e:46:2d:a8:0c:45:40:a3:c4:82:72:
26:b5:77:46:6d:41:51:56:4e:74:b6:03:9f:ed:15:2d:5a:95:
23:e0:f0:05:8f:dc:b7:81:ab:8e:9c:25:79:3f:01:64:d1:9e:
e8:8e:80:c5:89:29:e5:ee:b3:3d:16:a3:3b:2a:4b:35:5d:c6:
6a:d4:f5:26:9c:20:ea:3b:d7:c6:b4:70:11:d4:cf:69:54:45:
20:d9:58:51:c5:b5:dc:7d:a7:10:ff:56:4d:bd:f5:2e:b9:d7:
4f:9a:5a:c8:27:8e:37:4e:32:ba:6e:35:90:0b:ff:b0:0d:76:
cf:35:63:cf:a7:44:f2:6a:18:28:b1:47:50:5e:72:14:06:a1:
e8:39:5d:3b:3f:0b:c9:de:15:48:6d:fe:62:b8:73:82:fb:c2:
09:8d:87:fd:8b:1a:ce:ad:27:5d:ae:d4:95:90:b0:b2:76:3f:
6b:4a:5f:57:c5:0e:c7:74:66:17:2b:80:7c:1a:af:49:9f:a4:
d0:32:91:38:24:c8:3e:52:96:7a:1c:01:f8:3f:2a:e9:87:03:
fb:a6:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:24:57 2025 by rpki-client