Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: 5W0HQ4yvQp2tF2/Njca+Zu7D2eohF9P/F0T8PRfvhAw=
Subject key identifier: EC:B7:8C:E3:98:71:F3:E5:88:B8:FD:0B:57:41:B6:8E:DB:4E:82:C7
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 01984A40C8096B6CA2C286CB44810F78118E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 038C
Signing time: Sun 27 Jul 2025 05:00:16 +0000
Manifest this update: Sun 27 Jul 2025 05:00:16 +0000
Manifest next update: Mon 28 Jul 2025 05:00:16 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: QirSILBI2pnUW+sNA3hsJhZsbhSUGbESMboUCB8G2EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c8:09:6b:6c:a2:c2:86:cb:44:81:0f:78:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Jul 27 05:00:16 2025 GMT
Not After : Jul 28 05:00:16 2025 GMT
Subject: CN=ecb78ce39871f3e588b8fd0b5741b68edb4e82c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:06:74:8e:bd:eb:89:11:b3:28:08:6a:a8:
bf:e0:31:89:3e:23:3b:66:fe:c9:09:81:69:3d:9c:
cc:55:a6:f4:83:db:3b:19:aa:a0:0e:ef:8d:c1:1a:
f9:58:87:b2:c8:93:f2:88:90:84:dd:87:e1:3b:ef:
ca:9a:b6:37:28:38:a6:fd:67:45:2a:3a:79:71:b8:
73:76:4e:30:18:23:f9:45:67:46:bd:c8:9e:c2:59:
86:47:43:4e:9a:56:78:b8:49:b8:5b:38:35:31:5d:
8d:e6:6d:aa:4e:13:7d:d1:ee:ea:a9:eb:31:8c:87:
74:3a:cd:95:b5:cc:03:90:e9:a6:e7:9c:bd:22:91:
45:9a:2d:00:74:0f:e0:51:9f:23:76:d4:27:71:b7:
96:91:5e:db:f8:70:44:13:35:15:b8:e0:b8:85:21:
80:bd:b6:51:70:fb:3c:b3:2f:8f:5b:cd:4d:14:7c:
08:79:d0:55:d6:6b:07:51:4d:ea:91:81:af:a9:e2:
7d:f5:e2:73:54:49:0d:e2:ca:f1:0c:9a:96:02:af:
61:6e:ef:fc:45:2c:44:ce:92:58:7e:91:8b:ac:e2:
d6:d3:aa:a9:81:25:a9:db:68:c1:38:d1:de:f3:96:
9f:40:b9:8b:2b:51:ad:85:ba:60:67:b7:4c:da:6d:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:8C:E3:98:71:F3:E5:88:B8:FD:0B:57:41:B6:8E:DB:4E:82:C7
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f4:1d:75:33:fa:a5:19:40:76:55:4a:f5:e8:f6:8a:41:f6:
a9:e4:2e:55:df:07:61:80:ad:27:8b:63:c9:9d:05:06:bf:ba:
df:e6:5c:48:a9:0a:97:c8:aa:14:a8:b7:e5:b4:34:eb:60:d4:
d1:84:60:da:07:81:0f:06:3d:ab:f6:ed:46:16:72:23:9e:ba:
3a:f5:1f:eb:21:10:ba:11:a4:64:03:63:7b:38:d8:ec:48:42:
26:29:8f:bf:43:da:55:8f:c7:99:85:85:99:7f:24:13:75:05:
e0:18:24:16:0d:8f:80:7f:46:c4:25:3c:eb:b6:23:ed:8e:fa:
d2:06:b9:29:27:91:8e:89:36:e8:8f:26:7f:23:3c:69:9e:72:
79:fe:8d:74:53:3c:a6:4f:f7:ff:7d:dc:b8:3c:3f:4f:02:07:
d0:04:b1:ae:44:2f:fd:22:35:62:cc:58:b9:2d:47:40:70:29:
0a:9e:0d:46:e6:c0:5f:d4:05:52:dd:f1:db:e6:ba:43:d3:71:
03:14:c9:1d:cc:26:a4:fd:bc:e3:0a:df:99:83:16:f2:6c:d9:
9a:79:db:98:00:c5:7f:60:0a:f6:03:35:92:9d:dc:f7:19:40:
de:d7:b9:39:7a:3e:d4:d0:df:38:2b:77:d3:18:d2:d2:c3:ac:
b5:24:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:14 2025 by rpki-client