Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File: QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier: KaAJloFGvubRFs5RmNBn/zz1jLTpBtCr1uLELY528Oc=
Subject key identifier: 03:81:13:27:85:A9:39:B9:7C:FD:EF:15:76:A2:C8:08:56:84:A6:94
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial: 01984966E432EE12CD541D23603F49D26DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number: 0248
Signing time: Sun 27 Jul 2025 01:02:16 +0000
Manifest this update: Sun 27 Jul 2025 01:02:16 +0000
Manifest next update: Mon 28 Jul 2025 01:02:16 +0000
Files and hashes: 1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: djVmPF9qMK9J5BdUltOy8jWcGKkuOxPykkWbBvZqUoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e4:32:ee:12:cd:54:1d:23:60:3f:49:d2:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Validity
Not Before: Jul 27 01:02:16 2025 GMT
Not After : Jul 28 01:02:16 2025 GMT
Subject: CN=0381132785a939b97cfdef1576a2c8085684a694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:0b:22:23:88:62:9f:10:dc:ed:fe:7a:81:
a8:d7:00:8b:25:95:19:dd:42:4a:92:1a:1d:67:bf:
73:4c:d7:ef:93:32:af:e0:ba:1f:d2:48:c6:32:77:
8d:21:37:2d:50:c0:c4:8c:aa:7a:71:1a:0b:ba:c7:
48:b6:9e:86:b6:5f:4b:03:50:b7:18:1f:e1:41:48:
04:b2:43:f3:da:11:0d:0a:2c:df:98:5c:32:bd:b9:
8a:2d:c6:6d:d4:b1:ac:d3:6b:04:b1:ad:f8:8a:0b:
b4:ed:a6:69:95:f3:54:39:93:35:01:85:4a:d7:18:
7d:4a:b4:88:4d:da:d4:26:1c:83:e5:68:f4:49:f7:
3d:e8:3d:f1:67:ac:31:26:a9:af:f5:c5:9f:60:75:
dc:d5:17:3b:c8:e5:0a:0c:03:41:fb:c7:42:e7:b9:
15:9c:58:8c:f7:fd:f9:90:f8:8b:4b:3a:0a:c1:94:
a2:52:a4:13:64:9f:86:ac:10:d6:90:4f:31:1b:a7:
88:41:cb:7f:b9:cf:20:e6:2b:e4:86:52:fd:ad:c4:
25:67:bc:37:07:b6:99:98:85:a5:fa:96:84:2c:47:
bc:d3:6b:5b:ec:27:b6:15:4e:9a:4b:54:4c:f1:24:
84:81:0d:fe:e8:0e:e1:81:6a:14:26:e2:56:a1:32:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:13:27:85:A9:39:B9:7C:FD:EF:15:76:A2:C8:08:56:84:A6:94
X509v3 Authority Key Identifier:
keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e5:cd:2a:67:4e:e4:62:5a:20:dc:37:8b:d9:20:14:17:34:
f5:0d:73:ea:06:c2:cf:fc:6f:67:cf:69:88:29:61:c9:cd:71:
07:b0:0d:6a:dc:49:3c:4f:0d:5f:92:42:46:09:05:da:12:06:
49:06:66:cd:c1:c1:1d:b6:8f:82:a4:8c:05:25:4f:16:d4:47:
f6:ba:51:fd:c7:db:7b:a6:05:36:49:94:49:e1:0c:e2:9a:84:
3f:76:bd:fa:94:6a:b0:30:11:78:15:16:a6:ce:90:64:e3:37:
4e:c3:0a:9a:05:44:04:15:02:92:85:ad:83:7b:ee:fc:84:b7:
aa:e7:8a:8d:dd:7f:cb:89:d6:01:5f:3e:bb:d8:8e:14:25:84:
1f:a6:c4:ad:e9:b4:25:9a:40:ca:7f:42:cc:9c:3a:d6:e9:83:
bd:9a:c6:9b:37:e5:2f:9a:c9:18:84:41:8b:49:5c:2e:e6:69:
89:f0:8f:93:c6:c4:95:45:bf:c3:9a:50:3d:f2:39:2c:51:56:
3d:21:53:92:b0:84:2f:fa:96:0f:d1:fd:50:b6:a8:20:b8:5f:
56:3a:fa:84:ef:55:6b:c4:55:bf:6d:0f:ce:b6:6e:a7:87:20:
5b:b1:46:35:6f:bf:fc:ff:c5:0f:f4:ea:9e:a4:85:0c:b4:a4:
13:4a:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:17:40 2025 by rpki-client