Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
File: Q9JznRqU2rlXbiF80N-FdyBLIwA.mft (raw, json)
Hash identifier: gGDzVTPmco0VCLKSk+907kZrBWTLRb3euhTP20DL/XI=
Subject key identifier: A6:61:37:75:A7:C4:CA:5F:32:82:25:AB:85:40:64:A6:0B:85:A3:22
Authority key identifier: 43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
Certificate issuer: /CN=43d2739d1a94dab9576e217cd0df8577204b2300
Certificate serial: 0198496693554E804B01E47FE7ECA884F50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
Manifest number: 0358
Signing time: Sun 27 Jul 2025 01:01:55 +0000
Manifest this update: Sun 27 Jul 2025 01:01:55 +0000
Manifest next update: Mon 28 Jul 2025 01:01:55 +0000
Files and hashes: 1: Q9JznRqU2rlXbiF80N-FdyBLIwA.crl (hash: 1w4p9k0DcT6cSf1mUP2Vc8ubEqCPsBfZCE/2sm2ynro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:93:55:4e:80:4b:01:e4:7f:e7:ec:a8:84:f5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d2739d1a94dab9576e217cd0df8577204b2300
Validity
Not Before: Jul 27 01:01:55 2025 GMT
Not After : Jul 28 01:01:55 2025 GMT
Subject: CN=a6613775a7c4ca5f328225ab854064a60b85a322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:5b:16:ec:da:b7:e3:9b:9b:a0:0e:9b:a4:
68:c4:96:83:7a:06:47:77:00:80:aa:0c:c3:0e:88:
33:f6:2f:be:f5:ef:4d:87:2d:49:21:76:f5:ac:53:
90:9f:91:52:65:b9:fa:4a:02:72:8d:95:79:e2:4e:
ce:cf:18:c4:36:d2:1c:5f:37:06:ae:35:53:78:c9:
12:c0:64:57:7e:50:9f:ee:7e:d4:b9:01:58:2d:e3:
dd:1e:6d:a3:94:1f:28:42:42:49:70:fa:1b:5c:01:
95:81:ad:6e:c7:75:55:e3:7f:60:c7:3a:93:c7:db:
48:26:54:33:de:74:75:a3:3b:98:ae:c1:c3:71:5b:
3c:dc:40:95:30:21:d9:93:44:a2:7b:c4:a1:88:d1:
be:df:7c:50:43:35:26:fb:37:28:43:86:70:4e:62:
61:4f:bd:cb:8c:7b:12:b8:7b:65:7f:4b:31:70:47:
26:9b:2b:a2:28:c8:b3:a0:ad:8a:a5:4f:57:25:78:
a5:33:bb:ff:41:01:d5:86:56:d6:cf:ca:77:41:55:
ae:b5:ac:10:6b:0c:63:61:94:bd:84:ea:56:ae:96:
09:9d:7c:77:85:15:16:14:e5:a3:fd:4e:e0:94:c2:
58:e2:a5:64:76:9e:26:f2:c6:d7:d7:a2:0a:76:d0:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:37:75:A7:C4:CA:5F:32:82:25:AB:85:40:64:A6:0B:85:A3:22
X509v3 Authority Key Identifier:
keyid:43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b7:03:38:eb:e2:0d:1a:6b:c7:0e:3b:51:d7:8e:b8:2e:e3:
f1:c4:71:78:09:6b:7f:8e:1d:84:3b:52:8d:03:01:b2:8b:2e:
f7:7b:db:c5:22:05:7e:54:b0:ad:a2:d9:56:05:d2:04:58:20:
50:71:7f:d9:be:17:8c:07:5c:a5:89:29:e6:cb:cc:5d:ae:74:
03:34:ff:eb:78:7d:ec:55:a3:18:bf:ed:6e:74:72:2a:4f:0b:
cf:b4:f9:8c:c8:a8:27:d9:9e:dd:0e:bc:13:77:0c:2a:f1:9e:
d2:88:c0:d0:21:e6:5c:eb:9a:57:59:de:68:e2:6c:da:57:e4:
5e:14:eb:8e:31:27:8d:61:53:09:43:6b:25:7f:62:1a:ec:eb:
2c:71:c9:cd:27:40:71:8a:a0:bc:d6:5d:29:d5:27:08:0f:0a:
ec:fd:3e:6b:66:10:3c:dc:44:99:4e:2c:f8:63:b8:ef:cd:f5:
c2:a4:a9:14:cd:00:3d:a5:b9:cc:ee:ba:f9:61:29:de:35:a2:
6a:95:c4:48:a8:3f:3a:24:e5:e4:7e:d3:57:cd:90:96:5b:53:
59:94:6d:80:b5:59:2a:3b:13:14:99:d2:68:da:17:35:5d:c8:
1e:bb:66:58:16:47:07:02:62:87:4d:51:12:46:f9:85:46:fb:
e5:f5:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:11 2025 by rpki-client