Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: pUHCDhtQDkPR+BHxS1cBpaT1UIz3MNz/gHNF3aW5qbY=
Subject key identifier: D9:DC:35:B9:44:1D:94:9D:87:21:9C:FD:A5:EB:D0:F5:5D:67:09:9A
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 0198530D4B990AEE088340730C5E280CD5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 1596
Signing time: Mon 28 Jul 2025 22:00:36 +0000
Manifest this update: Mon 28 Jul 2025 22:00:36 +0000
Manifest next update: Tue 29 Jul 2025 22:00:36 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: HXYztXIpMp2w8Awrmd4os1oqywvrOrNb2zXV4H9V6wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:4b:99:0a:ee:08:83:40:73:0c:5e:28:0c:d5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Jul 28 22:00:36 2025 GMT
Not After : Jul 29 22:00:36 2025 GMT
Subject: CN=d9dc35b9441d949d87219cfda5ebd0f55d67099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:22:44:00:b4:6c:e9:04:df:a9:79:fa:70:
57:f6:f4:46:68:06:e0:4d:a3:8e:11:a0:e3:60:1a:
6d:c1:d8:8c:94:0c:30:d0:ab:33:2f:23:2e:b2:5a:
c8:d1:93:36:86:63:47:5f:87:90:5d:ad:c9:ab:f2:
47:3e:af:81:b4:dd:28:6d:7f:0d:9d:a9:0d:4e:9b:
9b:73:6a:88:85:10:a2:ec:2c:8d:24:50:0e:b2:8b:
aa:3f:67:46:14:1c:43:ae:10:fe:15:32:67:6d:0e:
07:b5:e0:c6:72:a2:01:e2:c0:d4:09:77:0a:be:6c:
51:7f:a7:d5:34:95:09:5e:69:7f:51:76:e2:28:f6:
be:70:6e:93:54:c6:55:25:c0:e5:dc:9c:fb:c9:7d:
80:94:2b:84:03:64:9a:c4:ac:5b:77:13:7c:02:ec:
e9:c4:cd:db:24:1b:6a:80:60:f0:84:60:8d:31:81:
a0:c8:f7:68:3d:95:c4:2a:b4:9b:56:c7:54:f5:e3:
e2:3a:f7:9f:7f:00:bf:8e:77:6a:92:3a:bf:49:ef:
df:9b:7d:84:01:7a:1e:3a:0e:53:d9:91:ad:e3:4e:
b8:13:a1:0b:e7:ef:6a:75:cf:d1:21:25:5b:93:21:
b4:fa:39:69:fd:2f:b5:86:1d:ab:f8:11:9a:c5:b9:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:35:B9:44:1D:94:9D:87:21:9C:FD:A5:EB:D0:F5:5D:67:09:9A
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:15:9c:ba:00:42:13:4f:f0:a9:91:e7:7f:01:5a:dc:58:a0:
cf:67:45:23:c3:2c:f4:a6:eb:2e:58:59:db:e8:de:ad:6f:1b:
ec:05:c4:99:d0:4f:24:dc:29:be:f0:fd:90:7d:39:64:5e:36:
59:5c:57:01:9d:4e:5a:77:84:d6:92:e8:aa:3e:5d:11:58:2d:
c6:ec:f0:97:2b:e9:86:08:17:e2:c9:50:cd:02:18:9e:8a:b6:
5a:83:fe:16:7a:5a:d3:67:f5:83:27:1a:ea:93:58:f2:2a:2a:
5c:62:1a:64:15:e4:74:ee:15:2c:02:dd:09:97:4b:25:04:b6:
ff:0c:c7:f1:79:a5:13:3d:69:86:29:27:91:a2:d8:48:6f:d0:
8f:37:2e:22:e3:51:4a:29:39:21:30:de:b5:a3:b7:ff:bc:a1:
f9:59:3f:5c:f4:bc:52:4d:ae:c0:d3:d3:78:01:6a:b1:0e:86:
34:fb:dc:b9:e1:43:97:1d:94:d1:5c:2f:6c:17:cc:03:95:d8:
8a:7d:05:5b:57:0e:23:d2:20:29:df:95:0e:a3:82:a2:5e:7b:
90:d3:de:ba:dc:0e:04:a5:ff:c2:3e:de:26:7e:4d:eb:2e:f3:
09:6d:f9:af:70:19:35:56:b0:1a:c5:76:f2:e3:98:86:88:f8:
4a:81:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:11 2025 by rpki-client