Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: vkyo8hUIiKgjTMTpxsnRSCNN2IA6FAv/5aQ9mAaemI8=
Subject key identifier: 2E:DF:CF:F5:6D:17:F7:8C:3B:76:32:59:C0:1F:BB:9F:15:8C:96:9C
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 01984A416D1C0122357BE0229B6BF5999D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0F7D
Signing time: Sun 27 Jul 2025 05:00:58 +0000
Manifest this update: Sun 27 Jul 2025 05:00:58 +0000
Manifest next update: Mon 28 Jul 2025 05:00:58 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: ABT6tw0QgVGsM3qIJ7teAf39yKa/4NzOmdYbCvCmE30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:6d:1c:01:22:35:7b:e0:22:9b:6b:f5:99:9d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Jul 27 05:00:58 2025 GMT
Not After : Jul 28 05:00:58 2025 GMT
Subject: CN=2edfcff56d17f78c3b763259c01fbb9f158c969c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:e9:d4:1b:9e:db:b8:c0:29:67:b2:1b:f9:
7b:86:2f:cd:73:78:0b:b3:1f:1e:58:3f:88:62:3e:
c6:74:ba:cf:53:c0:28:a2:29:c2:47:cc:53:cd:c2:
88:51:72:c8:72:44:87:10:53:42:68:24:74:75:bb:
9a:ad:ce:2b:4f:17:a4:16:38:8b:e6:c6:69:32:6c:
a9:32:1f:7f:13:d0:90:ba:1c:b7:7d:76:91:17:ce:
e0:84:ec:91:0f:1a:7f:c5:01:98:44:2c:1c:db:8a:
fd:2b:3b:5f:ff:1a:54:d3:26:72:66:41:ec:8e:9f:
a8:56:fd:1f:45:f7:1b:6b:fb:57:fc:9d:02:a0:b0:
bf:aa:6c:61:90:12:aa:ae:b7:ca:98:b3:f9:cd:ff:
b8:cf:c9:85:37:f9:4b:8c:79:92:09:df:f5:f7:80:
d5:91:e7:39:47:18:a7:db:11:a4:f3:08:e8:f1:94:
58:e2:e7:bc:d5:27:b6:3a:dd:2a:56:0a:81:36:55:
cf:79:a2:cd:25:f3:c3:7d:67:bb:84:3b:a9:fa:51:
58:f3:18:5b:ab:01:10:4a:ae:60:ee:05:c6:bb:aa:
d9:5a:17:bd:f1:bd:0a:cf:f4:6d:b4:64:88:b0:5f:
44:23:63:15:84:f2:4f:26:36:7f:02:02:75:1d:24:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DF:CF:F5:6D:17:F7:8C:3B:76:32:59:C0:1F:BB:9F:15:8C:96:9C
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:0d:66:f1:78:e1:92:93:1d:31:4d:9f:db:11:31:86:80:
b9:99:ec:3c:d2:51:f9:bf:ae:c7:73:ab:fd:46:32:de:ec:5b:
54:55:d2:b6:4a:07:da:27:96:99:cb:7b:a7:1d:10:82:25:50:
78:4f:cc:56:3c:d8:37:41:91:62:af:06:82:56:0b:91:77:0c:
d5:ae:f5:bb:cc:ba:f7:93:6f:8c:40:0a:a5:13:16:58:10:a6:
5f:ce:47:bf:df:95:da:e0:3a:2e:00:8a:85:be:87:8f:0a:23:
2c:8e:d8:44:28:0e:cc:2d:5f:36:9e:d0:cf:17:26:b6:83:be:
ec:ba:72:45:0c:fc:10:93:9e:dc:4c:d6:ac:78:64:a1:7b:79:
65:8c:8f:f0:06:8a:66:a6:55:db:aa:81:30:95:e0:f1:f0:44:
c2:cf:be:f9:e3:d9:7d:26:e5:64:a1:c8:2c:60:49:bf:a3:96:
0f:91:64:a5:71:ed:54:99:ed:16:2a:5f:b9:54:15:aa:4b:90:
92:83:04:3a:06:ad:76:69:ad:37:53:d7:df:8c:0c:fd:44:2b:
41:92:ec:55:56:3b:31:9d:1f:98:f1:27:0d:73:49:26:21:0b:
f5:11:bf:5d:cb:59:19:4e:61:8d:24:51:f1:4a:f4:03:dd:48:
f8:bb:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:13 2025 by rpki-client