Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: IJ0FYshTIEVOS/ZnrQn5PUmna7bFn6BGDwoo4KrobOA=
Subject key identifier: BA:13:2E:E8:8F:B4:5C:5E:AD:FD:F7:43:B9:B0:AC:5D:E3:30:FD:9A
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 01984C9D4B083B451620C68A82F5BFDFD285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 028B
Signing time: Sun 27 Jul 2025 16:00:33 +0000
Manifest this update: Sun 27 Jul 2025 16:00:33 +0000
Manifest next update: Mon 28 Jul 2025 16:00:33 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: W1AueodEEmmwAYNcVF2WZNGIYzNC1u+CiewanfwUWiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:4b:08:3b:45:16:20:c6:8a:82:f5:bf:df:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Jul 27 16:00:33 2025 GMT
Not After : Jul 28 16:00:33 2025 GMT
Subject: CN=ba132ee88fb45c5eadfdf743b9b0ac5de330fd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:55:aa:a9:bd:ea:6f:86:a2:b1:a3:21:59:
c6:70:dd:e2:5f:df:dc:f6:73:a3:15:24:c2:3d:57:
ff:1b:0e:c6:ae:5f:d8:ef:9e:93:23:77:5f:a1:a4:
4f:26:26:ce:18:09:33:bc:dd:90:81:06:fb:76:82:
b5:11:3d:28:13:04:f7:92:4c:29:d5:9f:bb:d7:df:
44:37:93:8f:fd:71:e4:d5:45:40:9e:0d:fe:58:5b:
31:73:68:0d:d8:43:06:5e:af:1b:56:cd:38:3d:14:
51:6e:56:52:39:45:f5:b7:74:81:6a:fa:5d:63:c0:
9c:0e:8a:48:b1:c4:02:c3:4f:94:99:1c:a2:21:ee:
3c:d4:5a:81:4e:20:b4:be:c0:a8:fb:cf:e5:7d:e2:
46:89:98:86:e0:f8:e9:55:2b:1c:ea:4d:a9:a3:78:
42:94:99:71:79:08:39:d1:eb:aa:c4:00:07:7a:fc:
94:cc:8d:88:c0:f4:c0:51:94:ce:49:f7:58:b4:d7:
4a:5c:f8:3b:31:57:1d:d8:6b:46:cd:3a:05:1f:d1:
fa:ec:0f:1e:56:9a:db:46:74:0b:ee:ed:5b:5b:39:
5e:3e:49:0a:80:27:9a:c6:5f:0e:03:7d:16:bd:4f:
36:76:6b:a4:c3:51:eb:18:b9:af:b3:c8:56:3b:d7:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:2E:E8:8F:B4:5C:5E:AD:FD:F7:43:B9:B0:AC:5D:E3:30:FD:9A
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3b:27:dd:8f:77:87:6f:ac:74:54:f4:94:a4:e1:1b:4c:eb:
6a:ff:f0:5b:6a:4c:cc:de:25:22:a3:32:91:73:22:13:4c:91:
1b:d2:70:f0:39:9b:be:47:94:34:54:52:14:74:dd:ea:6a:b9:
af:0d:5e:00:a9:0f:0a:e3:b5:22:28:bd:ff:e5:2a:f3:27:67:
a6:79:18:88:88:d3:75:8c:fe:85:6f:b4:88:47:73:9b:36:d3:
aa:6d:49:e2:d2:79:57:08:fd:e9:cf:7c:c3:07:a6:3f:6f:e6:
78:c1:fb:d6:39:94:fb:47:b8:49:16:2a:48:8e:9e:ff:a6:f2:
49:17:6b:b7:a7:73:e5:66:7b:fe:00:d3:e1:ce:9a:20:cc:e7:
08:ee:0f:da:c0:88:64:ff:ba:b5:68:e5:f1:93:40:10:80:e5:
9b:ea:7b:a6:44:b2:9a:68:aa:e7:da:4b:f1:3d:43:f8:27:8b:
dd:2f:09:28:8a:35:a5:9d:5d:bd:61:2a:ab:85:41:ff:e5:c8:
d5:f3:61:9d:40:88:4d:c9:1c:c9:9f:36:ea:6f:df:4a:5e:8d:
67:64:9a:01:aa:bd:dd:a0:44:df:85:35:e9:5f:ec:62:9c:14:
c7:6a:3e:9e:3e:6d:8b:e0:6f:ea:4a:c5:3d:a6:64:ca:03:b8:
2a:c7:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:29:14 2025 by rpki-client