Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft
File: qOeaWm0FfybaCYxi-R31ExEa7a0.mft (raw, json)
Hash identifier: c7mYfZto3IJmHQr48/psBIfI+hBvEE9yT24VKy9h/9k=
Subject key identifier: 6A:92:62:F9:1A:44:A3:A4:FC:69:36:54:2F:52:BE:08:27:61:0C:C4
Authority key identifier: A8:E7:9A:5A:6D:05:7F:26:DA:09:8C:62:F9:1D:F5:13:11:1A:ED:AD
Certificate issuer: /CN=a8e79a5a6d057f26da098c62f91df513111aedad
Certificate serial: 0198477718CE7FD39B841AC40C6B64CFF9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOeaWm0FfybaCYxi-R31ExEa7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft
Manifest number: B4
Signing time: Sat 26 Jul 2025 16:00:44 +0000
Manifest this update: Sat 26 Jul 2025 16:00:44 +0000
Manifest next update: Sun 27 Jul 2025 16:00:44 +0000
Files and hashes: 1: qOeaWm0FfybaCYxi-R31ExEa7a0.crl (hash: dsv9kvhNmXnY3lDa3f3DTAqxSaWaBgGqEJkeZfqfQ6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOeaWm0FfybaCYxi-R31ExEa7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:18:ce:7f:d3:9b:84:1a:c4:0c:6b:64:cf:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e79a5a6d057f26da098c62f91df513111aedad
Validity
Not Before: Jul 26 16:00:44 2025 GMT
Not After : Jul 27 16:00:44 2025 GMT
Subject: CN=6a9262f91a44a3a4fc6936542f52be0827610cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:21:c3:11:79:54:a0:2b:cf:b1:09:c8:37:
91:d4:15:aa:90:f5:f2:fd:05:ee:34:63:d4:18:48:
33:6f:ee:24:c8:54:4f:92:8b:01:bf:cb:44:b4:90:
b2:92:c0:7a:05:f3:a4:3e:8f:f5:9b:4f:76:fb:96:
d2:f7:c8:90:c5:cd:6c:57:f9:73:89:5f:9b:b2:22:
eb:da:d5:ef:76:e6:a5:87:30:c2:e2:02:c3:6b:db:
32:8a:39:fe:88:88:85:60:aa:42:58:22:2c:76:39:
d7:f5:43:08:ca:12:1c:28:3e:2d:4e:44:49:c1:26:
8a:76:7f:44:fb:ad:53:39:35:b7:08:01:6c:0c:96:
c4:26:f9:dd:96:60:4d:6d:84:23:c7:51:d7:6c:04:
e5:27:9e:cd:40:25:a3:41:a3:16:dc:a9:9d:33:77:
e1:75:58:84:b2:2e:d8:82:41:d4:60:69:6d:1d:fa:
37:1b:57:de:ad:63:96:4e:cf:b2:d2:cf:98:f9:27:
62:35:3b:da:63:1b:61:6a:55:e5:19:eb:bd:e4:6a:
02:69:65:65:a0:cc:5b:1c:f2:a0:5c:55:cc:b4:70:
75:63:6e:51:0c:8e:bc:d7:a0:96:cb:6d:7a:3d:13:
16:43:47:22:25:8f:fe:a0:b5:76:16:ce:5e:3e:f2:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:92:62:F9:1A:44:A3:A4:FC:69:36:54:2F:52:BE:08:27:61:0C:C4
X509v3 Authority Key Identifier:
keyid:A8:E7:9A:5A:6D:05:7F:26:DA:09:8C:62:F9:1D:F5:13:11:1A:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOeaWm0FfybaCYxi-R31ExEa7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/42692b-a460-477c-baa0-eccdac8b6a98/1/qOeaWm0FfybaCYxi-R31ExEa7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9c:df:1b:98:99:d8:db:44:e5:a2:3d:eb:9c:7d:96:7f:43:
ff:a8:36:0e:06:e8:95:6b:4f:06:e8:25:1a:dd:4e:a7:a3:5c:
9c:c7:64:78:44:db:6a:de:93:f5:c3:68:15:b4:6d:ff:b3:f3:
e5:ce:61:1e:f3:78:f1:3d:21:13:a5:f3:6c:41:12:41:12:30:
94:ff:04:22:23:35:5d:5f:96:ef:01:c0:6f:62:3b:83:ef:08:
f2:44:42:1b:25:5f:ea:d6:c4:eb:98:bc:bc:53:51:41:25:2e:
81:76:66:13:5b:fb:ac:d3:d7:86:0a:32:b8:8b:2c:91:22:7a:
58:f5:4d:09:f1:5a:3b:b9:11:d9:6a:5f:4a:08:ee:cc:08:c0:
de:bd:17:0d:dd:a6:45:36:52:5b:9b:2d:cd:44:67:65:36:5a:
c0:ee:65:1d:fa:c5:33:f5:1b:99:75:96:6e:7b:17:0d:1c:d5:
6e:af:7d:a7:73:75:ea:6d:b0:cc:9b:ef:4f:d6:34:9c:fd:52:
f5:2e:20:63:5c:e9:fe:85:f0:17:46:ec:fd:ef:dc:10:3d:1b:
fd:18:ed:21:99:4d:84:79:09:41:f0:67:9b:2b:43:73:d3:a7:
e1:42:0f:92:05:8f:ef:6e:09:92:4a:63:9c:02:c1:75:6e:81:
86:99:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:46 2025 by rpki-client