Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File: qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier: wSaxGzi0GyBgYQxeQZo28IKsZq6BkMCB9eahJm2FR0A=
Subject key identifier: 41:39:B6:DF:74:4F:06:17:77:39:96:C3:A1:31:A9:4E:F3:3E:64:9C
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer: /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial: 0198537B5C5B57BF1A9FE9407B0284B36624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number: 02D5
Signing time: Tue 29 Jul 2025 00:00:50 +0000
Manifest this update: Tue 29 Jul 2025 00:00:50 +0000
Manifest next update: Wed 30 Jul 2025 00:00:50 +0000
Files and hashes: 1: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: VbWzlVjeTc1LuDNZPYRkY/mpmF/A8fGf9K0XKJGzSIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:5c:5b:57:bf:1a:9f:e9:40:7b:02:84:b3:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
Validity
Not Before: Jul 29 00:00:50 2025 GMT
Not After : Jul 30 00:00:50 2025 GMT
Subject: CN=4139b6df744f0617773996c3a131a94ef33e649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:58:49:57:57:8a:5e:c6:d1:00:20:9c:4d:
cf:81:07:09:74:e3:c4:12:87:5e:2b:2d:ef:84:4d:
7c:c2:82:a1:14:c4:12:fb:93:60:e9:6c:8a:cc:92:
0d:5b:94:51:4d:68:2e:a2:e2:36:58:cf:36:cf:6b:
48:10:9a:7a:54:8c:ab:9c:2f:2a:8f:d1:a0:88:4f:
2c:9a:e4:17:91:5f:a2:bc:fc:d6:33:53:c1:e3:e1:
43:be:87:29:b5:f0:85:bb:8c:e3:84:82:4a:7c:16:
31:0e:88:63:6b:ee:21:26:19:2e:55:29:15:70:49:
e4:8b:6b:9e:e7:16:00:38:ab:2f:cb:38:a5:1f:2c:
36:9a:bd:27:a8:a5:61:70:4f:54:06:3f:ce:5c:91:
60:9c:85:a9:bd:49:24:6c:d8:2b:c5:b9:e6:67:6a:
39:28:ea:ed:f0:b7:dc:3b:25:6d:50:d4:64:1e:4a:
a6:5d:8c:75:3e:a0:a1:b5:36:4b:b6:a6:b7:eb:57:
27:ac:e5:c0:81:7c:5b:d0:83:ca:79:f3:cc:04:b1:
f2:52:3b:66:b8:ae:b2:6b:a0:14:6f:99:d7:3e:f9:
05:ed:a8:e2:3e:de:41:43:fa:67:54:fd:6c:9c:10:
18:13:8f:09:ea:b4:b7:fd:08:27:d6:52:de:bb:c7:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:39:B6:DF:74:4F:06:17:77:39:96:C3:A1:31:A9:4E:F3:3E:64:9C
X509v3 Authority Key Identifier:
keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:aa:e6:44:b6:01:b8:68:16:9e:ad:6f:92:db:d2:19:a5:
af:b3:93:53:47:91:cc:e0:02:cd:f7:8e:3d:9a:64:01:38:ab:
21:78:34:c2:a0:c0:5c:03:2d:24:a8:b5:dc:89:2a:cc:c5:fb:
4b:84:67:a9:33:94:66:03:d9:c7:56:a1:26:66:93:2c:cd:97:
1a:a9:b7:1c:20:df:08:53:09:36:27:d4:54:67:a5:96:9c:c3:
59:43:20:bc:8c:f4:b4:b0:bd:93:0d:af:b2:76:91:c2:c1:d3:
28:ca:98:be:16:f2:44:43:e8:01:d2:74:8b:a5:58:cc:12:ab:
5c:d0:03:0f:5c:4f:a0:e3:e4:3c:79:8e:3f:da:1d:1e:69:f1:
97:fe:49:e3:03:90:1b:e7:30:5f:21:99:22:9d:24:15:0a:ea:
d6:fe:72:8a:64:79:3c:6b:c7:c2:19:41:c6:7a:54:70:e3:59:
ce:fb:7d:71:ad:a6:f9:da:60:1a:0b:06:3b:e2:54:f9:62:36:
fe:8a:20:5a:32:ed:1a:f3:6e:e7:9c:65:f9:77:ad:49:19:d1:
f1:ad:52:d0:1b:b8:11:be:37:38:e5:a5:ab:f3:8c:5d:9b:5d:
7a:64:d4:ad:33:c0:fd:dc:41:e2:55:13:c3:d2:39:e9:71:09:
07:79:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:40 2025 by rpki-client