Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
File: qwJca7PczxsWUUnChzwEsabH2no.mft (raw, json)
Hash identifier: BLQmRGGGHgW+gb2bWQB8ekCbMZ+ge9fVQQYmE8Dh6BE=
Subject key identifier: 80:AE:A3:58:51:D1:B9:89:CB:01:6A:8B:0C:77:C5:B1:2E:0A:8B:70
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 019849655C1D12BDD32EECF29E9A02E5F696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
Manifest number: 0ABD
Signing time: Sun 27 Jul 2025 01:00:36 +0000
Manifest this update: Sun 27 Jul 2025 01:00:36 +0000
Manifest next update: Mon 28 Jul 2025 01:00:36 +0000
Files and hashes: 1: qwJca7PczxsWUUnChzwEsabH2no.crl (hash: Dcbp3+Elr2g+7FvEin8PzFeclg3D9LX6Q1ERUuA5KWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:5c:1d:12:bd:d3:2e:ec:f2:9e:9a:02:e5:f6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Jul 27 01:00:36 2025 GMT
Not After : Jul 28 01:00:36 2025 GMT
Subject: CN=80aea35851d1b989cb016a8b0c77c5b12e0a8b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:10:29:c3:dc:0b:16:c6:f4:fd:e6:63:f1:
f1:94:b8:0d:d4:34:69:fd:43:8f:18:fd:70:ba:19:
b4:88:12:9a:fd:b0:25:d6:62:ac:32:1e:99:85:2e:
73:71:fd:2c:57:2a:bd:52:9b:22:56:08:1c:98:53:
0e:6e:af:4f:ba:dc:06:46:66:1e:c1:5e:53:ee:90:
1f:9f:23:e7:7f:94:a1:0e:99:23:84:bf:ef:39:9c:
4e:9a:f0:04:0e:79:1f:27:9e:c4:44:9a:d5:e6:67:
16:49:59:a2:03:de:34:03:67:69:64:6c:52:af:ab:
61:a3:d2:ca:05:d2:91:13:6a:46:f4:ea:b9:a8:b5:
08:dd:27:d5:6a:28:71:d2:51:84:34:83:79:de:f9:
ee:42:9e:b2:db:5b:15:17:d8:dd:55:28:51:9e:53:
74:6c:cf:7f:08:e5:31:95:79:17:ea:ce:7b:53:14:
b1:d6:9c:66:b6:e9:43:20:0d:75:d5:ce:d7:3c:98:
d3:62:30:8f:d8:24:85:83:af:a2:9d:94:4a:3f:fb:
a3:45:0b:8c:96:ba:fd:81:27:03:00:de:e6:3a:9c:
f2:f2:cd:47:f5:e5:14:23:fd:ff:eb:9f:f6:1b:1e:
fb:9c:1a:c2:a0:04:cf:96:98:6c:8b:9f:dc:f7:59:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AE:A3:58:51:D1:B9:89:CB:01:6A:8B:0C:77:C5:B1:2E:0A:8B:70
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:0a:49:c1:b9:10:58:ad:9b:b0:8f:54:e4:2a:ff:33:66:
b3:a5:24:23:84:a7:0e:08:a8:66:39:8a:38:ba:09:3c:cd:fb:
c6:67:10:6f:d0:3e:97:a9:b8:86:15:78:8e:74:ee:c2:4d:f5:
31:88:15:ff:3f:d1:7b:de:97:fb:30:6c:db:27:0b:02:68:7c:
83:4e:2b:be:4b:da:30:48:27:f1:e4:c0:1b:2e:70:88:03:54:
ce:b3:fc:69:1a:3b:f5:8c:c4:24:da:77:f1:ae:75:49:32:5c:
74:eb:45:4e:da:a2:7b:12:8d:e7:2b:7a:6c:85:22:08:42:40:
30:ae:df:b2:8a:af:e3:0d:2f:6e:1c:58:8e:76:fe:66:cf:a7:
75:36:05:d3:ef:37:ae:f2:4c:eb:81:65:16:09:fa:93:38:d2:
c4:2e:36:92:ed:49:15:ae:56:ad:6b:10:ea:29:aa:01:67:d7:
ec:48:f6:b7:89:d5:a8:05:bc:15:fe:dd:3e:6b:9b:e0:22:dd:
87:d1:66:ed:23:c1:56:66:4e:d6:fc:e1:91:76:25:56:f0:85:
8d:a2:41:46:9c:52:8e:64:84:02:c1:5b:c9:45:77:a8:16:5b:
f4:fb:ac:ec:cb:1e:94:40:c0:3d:1b:4d:a3:94:73:42:fd:2f:
88:23:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:57 2025 by rpki-client