Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: HUBxDeF9mFTDfQ3rrs38coz6GwQZvLiPmQwEhYrH/Ss=
Subject key identifier: 89:49:73:D9:EA:89:9D:20:16:53:DB:2B:0B:3F:62:87:40:EE:CE:6B
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 01984B53C42366560F0453B143F4E4C7FABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 10:00:37 +0000
Manifest this update: Sun 27 Jul 2025 10:00:37 +0000
Manifest next update: Mon 28 Jul 2025 10:00:37 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: gb8iHr70k62lGui8FZGhsd6trfbnVOGHI5/DE+QwNQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:c4:23:66:56:0f:04:53:b1:43:f4:e4:c7:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Jul 27 10:00:37 2025 GMT
Not After : Jul 28 10:00:37 2025 GMT
Subject: CN=894973d9ea899d201653db2b0b3f628740eece6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:ed:16:89:e3:b2:41:b3:27:cd:7e:eb:39:
5a:b0:f1:22:ad:b9:d0:76:fd:05:45:78:45:23:d2:
63:df:5f:ea:3d:88:e1:c4:58:6a:02:44:0b:f4:f4:
b7:cc:d1:31:cb:fe:ef:13:d3:30:92:2e:f6:f8:09:
8f:16:0c:e0:2b:4d:e8:27:51:44:ca:0f:c0:86:a5:
8f:40:a5:b5:f1:a9:05:30:d9:96:e8:16:f7:76:2f:
c7:2a:96:48:ce:ba:f2:45:f3:b6:f6:14:af:66:43:
ac:d6:be:d9:af:c6:8a:3b:1c:2b:c3:10:38:cc:fc:
59:48:22:e3:05:f7:e7:7d:cf:35:36:e5:f9:79:59:
bb:e9:aa:e9:f7:4f:98:f0:41:e6:54:0d:a1:52:24:
41:75:5d:fa:eb:c9:7a:c8:e8:b1:d8:d9:cf:0b:67:
9a:cb:ff:bc:00:41:40:9c:3c:cc:41:27:75:0b:21:
7c:ba:dd:cb:7d:a4:2c:84:8c:06:f8:de:0d:68:8f:
a9:e1:19:e4:71:25:26:72:9b:d9:b0:d4:00:e4:a5:
43:db:38:36:a8:0f:81:12:bc:e3:3c:5b:38:6d:45:
42:61:d6:5d:83:c9:4d:e0:d4:47:63:55:77:fb:fd:
9f:a0:c2:14:07:e5:9f:cc:5c:42:bd:e9:e0:68:f8:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:73:D9:EA:89:9D:20:16:53:DB:2B:0B:3F:62:87:40:EE:CE:6B
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e7:8a:0c:b6:ba:f8:5e:b9:6c:b2:b4:5b:58:9f:6d:d4:a9:
b8:75:ac:e2:f8:50:cd:3e:ba:b2:40:9f:95:4f:bb:66:c6:ee:
f5:37:db:5a:5c:ae:aa:16:d8:7f:54:d3:d2:39:cc:35:51:eb:
ba:ca:29:00:c7:96:94:98:67:8d:5e:9d:71:f9:ab:96:a7:d1:
73:0f:a4:ff:39:04:a2:30:6d:ad:74:98:27:f1:bb:ff:b8:5c:
ae:9a:ba:94:e9:a0:7d:f3:13:1a:09:5c:cc:1e:db:d6:ab:a3:
8d:92:b5:47:70:6c:57:cd:e4:67:63:ce:be:63:9f:66:f4:09:
da:43:cd:3f:45:a2:ca:ae:10:f4:23:0b:53:44:bb:fc:7b:ef:
f0:63:0f:2e:0c:61:59:4f:d8:69:33:3c:01:1e:d3:66:f9:b2:
e0:fa:35:83:74:14:46:bb:73:ab:40:ee:4a:56:1b:e5:1d:a9:
75:af:a3:c0:21:08:58:87:ec:62:22:48:ac:70:d6:03:a1:d3:
dd:db:a8:5f:9d:38:67:7c:9b:93:29:07:fc:3a:60:17:80:3d:
2e:4a:1b:9a:f4:02:58:56:d6:0b:0a:c5:28:78:69:81:54:7c:
47:a7:15:7e:1a:5e:13:a0:80:53:1c:fe:6e:9c:f9:63:f8:b4:
87:ad:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:20 2025 by rpki-client