Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: mrXmuxqhbhQRQ8WQqdUJB+TCJpmhWarZxYOmq4iewwM=
Subject key identifier: 1D:0F:0A:13:4B:49:70:7A:7D:FD:BD:F4:3C:15:60:A6:8A:27:C2:58
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 01984A419A8598710FF588EE592F938BAEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 1098
Signing time: Sun 27 Jul 2025 05:01:10 +0000
Manifest this update: Sun 27 Jul 2025 05:01:10 +0000
Manifest next update: Mon 28 Jul 2025 05:01:10 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: czMTm+6ve+t0gB6+9oAQi3n/UbibAZ6gl8Yt3NG1JoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9a:85:98:71:0f:f5:88:ee:59:2f:93:8b:ae:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Jul 27 05:01:10 2025 GMT
Not After : Jul 28 05:01:10 2025 GMT
Subject: CN=1d0f0a134b49707a7dfdbdf43c1560a68a27c258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:cc:ce:6f:10:c9:4d:0d:20:df:fe:ce:48:
68:18:d6:57:f2:bb:64:11:0f:47:d6:ed:a8:3c:04:
0b:3e:bf:72:43:76:e0:cb:08:2b:5e:7f:c1:c6:ad:
b1:67:51:f0:49:06:91:08:80:ed:a3:0e:0f:98:ba:
00:50:b1:70:ce:9c:76:2b:25:32:48:81:5c:ce:66:
fb:f2:8f:05:73:9d:fa:98:92:6b:ff:0a:10:36:0f:
fa:12:70:ef:d9:b7:dd:c1:4a:3a:82:7f:68:ab:6d:
2f:dd:0b:f2:07:68:2f:f3:8a:39:80:49:75:77:48:
84:ec:9c:db:22:06:3f:4c:43:1a:21:c3:db:79:41:
21:32:9b:d3:65:92:b1:80:70:56:3b:de:7a:f0:b7:
d9:c1:7f:e2:56:0c:1f:0e:5e:d1:21:5d:7a:3d:f0:
1d:a7:a3:74:38:18:e4:79:9d:ef:d0:e7:49:c1:d6:
96:ef:22:61:5c:50:1f:91:12:5b:4f:92:69:df:55:
73:f8:db:a1:cc:30:be:68:03:81:e6:74:35:6c:c1:
2d:48:8f:54:4f:ca:04:64:70:14:62:15:d1:26:64:
91:98:f5:58:b8:75:e1:48:67:8c:72:b0:91:20:9d:
18:19:55:e3:ca:b4:8e:5a:31:58:06:b7:64:79:7e:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:0A:13:4B:49:70:7A:7D:FD:BD:F4:3C:15:60:A6:8A:27:C2:58
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2d:ac:f6:44:e1:c3:58:6b:40:4b:ed:38:8d:88:01:d1:16:
fd:7f:0f:72:7f:5c:ec:24:e4:a4:dc:60:71:74:08:c0:a9:cc:
f8:9e:ec:2d:9b:e1:98:c2:98:8b:7c:9a:b6:64:a5:e3:5f:55:
23:c4:ac:aa:08:a0:06:d7:86:b9:27:79:2a:bb:38:db:9d:c5:
8e:11:ad:d4:d9:6e:b5:4e:5f:ea:61:6d:f7:d1:57:75:c6:b4:
6a:52:e5:8a:90:b2:80:87:a2:6e:13:c4:32:fc:a4:0d:c7:3a:
3a:8c:25:fb:af:3a:c7:30:58:d1:30:6c:35:75:60:15:a5:39:
6b:4c:3c:0a:64:b3:0b:37:2a:f6:ac:33:5c:2a:cd:80:20:67:
96:f3:36:bf:66:2c:80:5a:56:cb:f9:5a:e9:df:26:a8:52:59:
b2:3a:ea:b7:36:b8:b8:c4:bf:94:82:ca:dc:d1:be:87:aa:7d:
7a:e7:90:ed:7f:11:53:38:4e:72:d4:03:ef:bd:c4:63:17:07:
e3:61:6b:65:ce:06:89:d6:2d:f0:87:b6:90:f6:c1:2a:98:45:
4e:b8:af:0f:94:b2:cc:e2:08:01:03:23:88:e0:cd:b7:1a:af:
de:2a:94:71:70:cc:f1:c4:a0:14:80:1c:d8:06:6e:9d:7c:58:
83:df:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:17:53 2025 by rpki-client