Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
File: QCzcwN4_54S70vviah2BZWpGfSI.mft (raw, json)
Hash identifier: +YhCHTvqywiR9lIPQOwKiNmvt1HQCs7GgBpgfGszKUk=
Subject key identifier: EC:52:C7:F8:3F:DA:5A:D9:F0:F7:47:70:09:D2:71:F9:89:AF:9A:FF
Authority key identifier: 40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
Certificate issuer: /CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Certificate serial: 01984965434A10100AC8108ADDE2B050145F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
Manifest number: 0873
Signing time: Sun 27 Jul 2025 01:00:29 +0000
Manifest this update: Sun 27 Jul 2025 01:00:29 +0000
Manifest next update: Mon 28 Jul 2025 01:00:29 +0000
Files and hashes: 1: QCzcwN4_54S70vviah2BZWpGfSI.crl (hash: 0K4hwbcut2ALyucYS6ckv5Nyx/Q6yUDn0d8B28J43q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:43:4a:10:10:0a:c8:10:8a:dd:e2:b0:50:14:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Validity
Not Before: Jul 27 01:00:29 2025 GMT
Not After : Jul 28 01:00:29 2025 GMT
Subject: CN=ec52c7f83fda5ad9f0f7477009d271f989af9aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:1b:5d:be:31:f8:f4:e5:80:2d:b1:54:20:
9a:7b:68:2c:3a:fb:18:81:40:98:07:0a:56:86:92:
4e:a6:e1:fc:4a:5e:40:de:c0:14:8e:23:cf:bc:a4:
e9:f7:d2:4c:6a:1c:3b:9c:6f:d7:a0:25:24:67:86:
e1:fc:4f:1b:64:ff:b7:b3:d7:62:4d:86:e2:de:63:
ad:9a:24:e4:76:98:05:b5:69:31:db:59:53:c8:fb:
d6:be:1f:de:ad:75:95:ea:13:f0:68:12:0f:e4:8c:
f2:db:37:67:41:ce:3b:82:98:2d:8a:79:1f:29:e9:
ea:ef:fa:c3:ff:04:9d:d5:c7:d7:9d:13:a3:59:60:
34:82:41:85:13:63:af:c9:d2:e9:68:18:ef:77:d8:
40:9e:1a:e5:d2:9d:af:6a:d1:57:ce:d7:2f:3c:6c:
2a:81:4d:74:61:30:ad:29:86:02:55:fe:26:9f:1e:
88:b4:28:86:51:96:51:18:04:63:56:47:eb:05:68:
0d:e5:b2:16:d6:0c:d9:ca:e2:40:ef:e0:72:b1:f6:
64:ac:9c:8c:50:54:bf:b6:99:df:86:9a:23:6e:ca:
7c:cd:18:f6:57:dd:9d:d9:ad:be:39:79:f7:9b:2c:
c5:50:fe:50:cb:fe:fd:92:c9:14:00:7d:c8:e4:cc:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:52:C7:F8:3F:DA:5A:D9:F0:F7:47:70:09:D2:71:F9:89:AF:9A:FF
X509v3 Authority Key Identifier:
keyid:40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a6:bd:ca:cf:aa:e0:49:92:6e:55:9d:e5:35:5d:bd:dd:88:
32:9a:6d:8f:91:8d:9f:d9:ad:f5:67:bb:91:9e:ab:18:4f:94:
6b:9a:9a:f6:cb:e6:c6:2f:dd:08:23:33:90:f2:48:27:56:5d:
97:67:3b:46:55:eb:94:0e:a4:49:f1:d7:3e:37:47:4e:a5:32:
17:97:01:a3:c3:87:56:c2:a9:e0:48:de:01:84:65:b2:2c:e7:
5e:ce:7f:df:c7:35:48:38:85:02:90:60:d2:f6:d5:1a:72:98:
de:e6:dd:1d:d4:57:aa:82:91:bc:f3:f7:16:c2:18:64:82:6a:
27:ff:7a:f0:04:1f:04:ec:08:dc:d9:27:a4:fb:46:d1:21:c8:
c0:17:78:9f:f6:2a:56:2f:64:fa:b5:07:c3:2e:d5:68:da:8a:
3f:92:61:01:a9:c9:8a:fd:9f:6a:94:73:a6:91:df:ba:c0:d1:
a1:87:7a:2d:bc:67:ed:69:60:c8:47:c1:bf:25:94:92:fc:f1:
b5:e5:73:3e:ef:d4:2c:14:23:7b:16:df:70:a3:80:3b:9d:c6:
37:de:6a:3f:c8:26:4c:33:f1:db:f9:b3:83:cc:c8:45:ee:48:
50:cf:83:b8:06:fc:b9:d4:e3:7a:c0:76:12:82:72:55:6c:70:
71:12:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:35 2025 by rpki-client