Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
File: qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft (raw, json)
Hash identifier: Zm9HP6OEyGF0I9k9g9kET6VXGmouZmZpd+t8NtV7DUM=
Subject key identifier: 55:A9:83:A4:F8:24:A0:45:72:EC:3E:C2:6A:4B:92:0A:20:91:79:8A
Authority key identifier: AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04
Certificate issuer: /CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
Certificate serial: 019849652B5A6566A3ACB6D17BAAF3978DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
Manifest number: 069D
Signing time: Sun 27 Jul 2025 01:00:23 +0000
Manifest this update: Sun 27 Jul 2025 01:00:23 +0000
Manifest next update: Mon 28 Jul 2025 01:00:23 +0000
Files and hashes: 1: qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl (hash: 7k+x3+bgRM43yaX8ztYi29DjWehtn1IkpzGyS/bk4hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:2b:5a:65:66:a3:ac:b6:d1:7b:aa:f3:97:8d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
Validity
Not Before: Jul 27 01:00:23 2025 GMT
Not After : Jul 28 01:00:23 2025 GMT
Subject: CN=55a983a4f824a04572ec3ec26a4b920a2091798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:06:22:b3:21:d9:f3:9e:b5:17:83:be:e7:
c1:ea:d2:c4:be:72:43:6c:3c:8c:c4:a9:b0:1f:17:
18:4e:95:cd:8d:d6:43:9b:8b:5e:11:99:6a:1f:a2:
c8:55:7b:0d:23:04:cf:98:93:a5:02:c3:7c:4a:07:
a7:00:92:6b:4d:81:6c:e2:83:a1:f9:82:94:c9:35:
da:45:4b:12:e5:df:f8:3e:30:42:a9:45:f4:b3:96:
96:40:a6:8b:5e:22:bf:a7:ef:07:7a:98:05:ca:b8:
1f:6d:32:59:3a:12:d4:35:c4:6b:2c:57:36:f2:72:
78:b4:56:19:6d:64:47:56:8e:dd:e0:dc:fb:2f:cc:
b4:90:72:12:22:10:7c:c7:23:be:07:b3:ba:18:cf:
07:1b:5f:24:8c:e6:30:58:94:f8:0b:72:13:a0:cf:
82:e8:12:ed:c9:8a:47:50:bc:58:33:dd:f4:6d:ad:
9b:90:e4:2e:b5:d4:32:91:bb:af:89:3f:f1:72:c7:
d1:b1:77:af:b0:14:3e:08:de:fb:c8:9e:79:32:08:
f6:b0:00:75:3c:a9:4b:d3:4e:e1:2d:16:54:72:68:
4b:c6:83:6d:0f:10:66:01:29:84:9b:b2:0a:fd:ab:
3d:1e:d2:c0:60:da:8f:28:5a:ce:6c:de:dc:c2:4f:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:83:A4:F8:24:A0:45:72:EC:3E:C2:6A:4B:92:0A:20:91:79:8A
X509v3 Authority Key Identifier:
keyid:AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f2:fc:99:75:85:68:98:ab:05:e9:01:e4:26:1d:39:79:bd:
55:bf:88:87:6f:fc:ac:02:ce:e0:df:df:fe:7b:59:03:46:6b:
b5:11:4c:b7:9d:60:ea:2e:25:d3:ae:b5:aa:79:71:50:32:83:
b8:a5:47:74:d0:54:ad:ab:2c:c3:1b:e9:a7:46:fc:51:89:54:
72:47:3e:e7:be:24:b7:b4:d1:dd:32:2e:e5:4e:ff:db:ca:6b:
b9:77:73:57:8e:54:32:78:6e:31:5e:41:7b:c2:4a:32:81:0d:
3a:ab:7e:fd:53:bd:2f:2a:14:f0:4b:9e:5f:1e:78:5a:77:8e:
aa:9d:44:45:2c:00:79:bf:88:96:87:f0:b6:b0:94:73:ba:02:
a8:f1:c8:86:db:47:7f:66:21:f3:22:30:42:f7:a6:9b:3c:99:
c7:fa:6d:0b:a2:cf:82:64:e8:1f:64:0e:3d:ee:a7:66:07:30:
32:14:3d:5a:57:26:f8:3b:c6:dd:05:96:63:7d:0e:d3:5d:b2:
64:be:9f:93:25:a7:24:d8:91:87:68:9a:a1:e3:c3:1a:0e:39:
e1:98:1c:7b:86:f1:41:48:71:42:d2:d3:53:5f:73:b7:7d:a6:
96:24:d1:cb:95:c6:37:33:b8:3d:7b:28:c0:7f:d6:d6:1b:72:
07:b6:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:38 2025 by rpki-client