Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: HYiRWF6BDRrP+J4nPUfZb8BrZ07t/GkJWqX22iSPj3s=
Subject key identifier: 87:C4:46:BD:8E:94:01:17:31:5B:EE:C7:33:61:DB:F3:9B:86:50:12
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 01984965957A944C6B4DFEEF56E0D061ACC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:00:50 +0000
Manifest this update: Sun 27 Jul 2025 01:00:50 +0000
Manifest next update: Mon 28 Jul 2025 01:00:50 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: 92lkJ0DBaPE3lnkBhRsWWBOnn6tXJLt3fKYPmwLhVRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:95:7a:94:4c:6b:4d:fe:ef:56:e0:d0:61:ac:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Jul 27 01:00:50 2025 GMT
Not After : Jul 28 01:00:50 2025 GMT
Subject: CN=87c446bd8e940117315beec73361dbf39b865012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:11:a1:df:25:b8:e1:1b:a9:1a:3c:5c:cf:
2b:ee:f0:56:c9:ac:d0:3e:a3:d4:51:86:a3:da:a2:
b0:24:5d:3f:03:55:9d:f6:b1:95:76:f6:4d:02:6a:
e4:dc:cd:d1:05:c4:9c:1f:15:56:e9:3a:57:8f:f6:
f3:ac:aa:91:9b:5b:76:f7:2b:67:1b:72:34:7a:a9:
dd:00:d4:1c:65:96:d9:fc:58:bf:60:fa:5d:3c:90:
c1:20:81:df:af:53:21:17:20:73:49:75:ff:e0:67:
34:b5:7f:ab:d7:f2:98:0c:df:f9:b9:16:0d:64:a2:
98:b0:21:2b:3b:46:f3:50:cf:af:62:f0:82:74:8e:
be:dd:1e:c4:49:45:93:c8:a5:dc:8a:93:b3:36:92:
0d:b4:61:92:3a:d8:d0:4a:97:73:d3:6c:be:07:d1:
1f:32:b6:13:cb:4f:91:39:05:26:e0:6c:de:fa:af:
1e:6f:cc:fd:cb:9d:9f:ec:4c:68:ef:26:cd:67:b0:
69:57:7a:ef:71:55:2b:c0:e6:2f:58:ea:c3:7d:f0:
fc:02:0f:d9:31:60:6a:58:82:f8:75:7a:d2:33:be:
5e:41:bd:a2:59:b6:ea:6e:51:4f:9a:47:1a:7d:34:
96:93:ac:04:e4:aa:ec:ad:af:1a:1d:a5:3d:25:bd:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:46:BD:8E:94:01:17:31:5B:EE:C7:33:61:DB:F3:9B:86:50:12
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:40:51:e9:4a:be:75:56:46:10:5e:53:a1:0c:89:ea:4f:79:
f7:26:1a:22:21:32:97:78:2e:ba:94:ea:a8:79:aa:66:34:db:
15:1b:fb:c1:0d:76:d4:f4:17:6f:5c:1b:d5:1f:35:3e:52:23:
61:ff:95:c4:f5:15:82:57:50:35:6e:6c:f1:df:46:5d:35:0e:
76:0d:b2:c7:d1:80:c9:06:27:a3:ab:c9:9e:ef:39:5d:61:48:
5a:73:89:42:de:ee:03:6a:db:d4:7c:34:cd:0f:e8:1e:21:82:
61:75:30:a9:46:fb:90:38:8f:25:91:55:e8:60:72:c6:29:ab:
d1:80:1c:90:21:ee:7f:e9:b3:64:84:cb:8e:e2:a3:3c:fe:09:
82:87:a1:2a:80:e6:63:c0:ff:36:06:34:f5:4a:72:47:a0:83:
40:93:f5:aa:90:c5:bf:3e:fc:fd:94:7d:f3:2a:ca:2f:9c:d8:
f5:46:bb:92:a3:ed:09:ba:39:6d:c2:4f:0d:db:61:5b:20:e1:
be:4f:99:93:b6:88:de:be:62:d9:4d:8a:d1:fc:58:a8:40:71:
e3:7f:ca:ac:11:74:51:ac:8e:9b:99:8b:a0:67:de:96:6e:e4:
f8:0b:8a:ab:be:88:ff:58:86:da:a9:2a:27:b1:33:fa:5e:43:
45:0b:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:29 2025 by rpki-client