Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: Xp/4g8XfXMDqiR9bB9bPx0tA6iNBoOU3dQtHZbfqjHc=
Subject key identifier: 96:0A:D3:45:A9:FB:B0:68:30:64:5A:C1:81:F8:22:5C:27:15:94:1D
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 0198530DC91856E0D5264806B98DADF1E60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 22:01:09 +0000
Manifest this update: Mon 28 Jul 2025 22:01:09 +0000
Manifest next update: Tue 29 Jul 2025 22:01:09 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: BsEeLfw1RTrf4jTx/Y5NqoLcEpvgcHF2pq38U1gRTpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:c9:18:56:e0:d5:26:48:06:b9:8d:ad:f1:e6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Jul 28 22:01:09 2025 GMT
Not After : Jul 29 22:01:09 2025 GMT
Subject: CN=960ad345a9fbb06830645ac181f8225c2715941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:12:7a:e9:53:65:0c:49:79:c1:bc:0a:40:
9d:52:f4:f2:69:2e:dc:b5:5f:27:ee:b4:5e:1f:53:
4d:2c:fa:0a:50:bb:40:a4:b1:9e:79:27:28:b6:73:
8b:c6:17:9e:62:9a:42:91:c1:d1:85:19:4e:ce:f4:
65:dd:da:f3:f2:90:91:01:af:9a:bc:9e:dc:d8:56:
82:82:b4:6c:94:c6:ae:6d:57:21:0c:53:98:4c:48:
4b:53:f4:61:b1:99:83:5a:6c:c6:22:df:53:7a:de:
e7:f5:98:83:75:1d:26:25:9f:4e:d0:be:6a:77:03:
ab:2b:b9:dc:51:0a:de:96:0a:42:91:fc:78:6d:95:
32:ee:17:9b:04:8d:d9:a9:aa:72:31:06:26:fe:88:
c0:18:5e:e3:fc:1a:c3:56:c0:36:15:e5:a7:6f:86:
64:af:d1:ec:c9:e5:13:e7:40:40:33:f9:08:6e:da:
80:95:7c:36:86:db:2c:0e:02:19:d1:03:6a:1e:49:
98:fb:c1:21:7d:48:2c:8e:25:1b:60:81:c8:ba:13:
4c:6c:f1:43:97:cb:19:ba:8c:24:8e:25:7a:24:82:
3c:c4:72:d0:74:bb:1b:84:18:94:9d:ca:35:b8:fd:
8e:19:50:d2:26:d5:7f:de:06:28:5e:c1:4d:64:45:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0A:D3:45:A9:FB:B0:68:30:64:5A:C1:81:F8:22:5C:27:15:94:1D
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:be:fa:a7:1e:cf:b2:c7:1a:ef:54:a0:28:5e:d7:74:25:44:
d2:ff:b5:ff:50:fb:58:5c:c5:d2:18:54:5c:81:ac:e7:ac:2c:
21:c2:c6:a5:73:9b:e0:6f:78:5f:8d:69:8b:19:82:76:37:a7:
f6:49:b5:ed:bf:25:28:ad:26:fd:36:70:ba:ca:89:25:14:d6:
9c:a1:37:92:84:64:78:04:ba:ed:a1:62:72:2b:d5:ae:f4:b6:
9d:30:27:9c:3d:3b:4a:24:46:4e:27:db:c8:98:53:1a:46:76:
89:77:5f:08:11:11:f2:81:ad:8d:d1:21:db:2a:ef:e0:dd:e5:
d7:2e:82:30:3b:c7:e2:5c:8a:64:a2:a6:4b:2a:b0:b5:92:d3:
4f:8b:06:7d:10:b4:15:f3:f3:c1:47:a5:b4:3a:d0:22:79:6f:
86:ce:99:90:4e:71:47:b1:8d:d5:f3:e2:09:2b:1a:bd:f8:25:
92:c0:7f:3e:7c:b6:fa:8e:ca:1a:d6:e5:78:8b:d8:81:04:42:
2e:95:15:bb:79:df:23:33:0c:d6:0a:5c:a6:26:9c:da:72:fd:
9a:2d:52:01:ab:d4:c3:21:77:0f:d2:f7:c9:a1:48:c8:7c:86:
e9:e7:52:45:49:cf:13:1e:22:d6:2d:84:21:0c:aa:a7:3d:c5:
23:1c:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:13:31 2025 by rpki-client