Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: eMOtc4td6ZIwhNvsjOdbGQ+PPEFVK2qVjGlcsVTfkDs=
Subject key identifier: FF:C2:65:51:5D:6A:A1:82:98:5C:D7:EF:E5:B4:C7:87:A1:AF:68:66
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 019849D368EA1641D35BFD8990A71D43C1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 0550
Signing time: Sun 27 Jul 2025 03:00:48 +0000
Manifest this update: Sun 27 Jul 2025 03:00:48 +0000
Manifest next update: Mon 28 Jul 2025 03:00:48 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: 3B2ZC1BofoLyQPY6ZQTDXa87LIe9emGw1F4dRm7HKvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:68:ea:16:41:d3:5b:fd:89:90:a7:1d:43:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Jul 27 03:00:48 2025 GMT
Not After : Jul 28 03:00:48 2025 GMT
Subject: CN=ffc265515d6aa182985cd7efe5b4c787a1af6866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:e1:7c:a5:74:54:36:f0:af:6b:a9:1b:3e:
64:f1:7c:21:f8:17:01:7d:5e:ba:9e:ec:52:3b:aa:
2c:0d:ad:13:6f:41:b3:6e:41:e4:71:59:38:7a:46:
59:84:97:f4:28:e6:a0:01:cb:74:c6:a4:9a:a7:50:
71:50:27:70:39:28:cc:e6:50:8e:dd:6e:3c:cb:6d:
1c:b1:4a:0c:07:08:31:ae:a7:69:a3:fe:cc:f2:b1:
63:07:fd:7a:24:14:23:33:f1:7a:c6:b4:00:ff:0a:
11:55:81:be:f8:4f:31:f8:99:15:8b:2e:ea:f3:59:
f9:99:43:8b:73:99:55:0a:13:1e:c0:2e:c2:95:e6:
06:55:34:f3:be:0b:f1:02:48:29:d6:d0:dc:8c:cf:
1c:1c:ce:33:b3:6b:c7:c2:fc:f0:58:bf:a7:93:9e:
8e:a7:ca:3e:86:dc:d7:de:6a:a7:dd:7a:c3:be:57:
c0:10:d5:61:8e:4c:cc:a4:3a:8a:1c:da:70:53:18:
c1:17:3b:96:0f:c1:3a:f9:44:a2:af:4c:42:ae:52:
27:9a:69:a9:d6:ae:83:76:32:18:44:2c:63:5f:b5:
45:75:d6:8e:cb:1d:a6:fe:fa:95:3d:61:c5:49:16:
54:28:9a:18:0d:96:cb:ab:30:2c:f7:4f:f8:e8:94:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:65:51:5D:6A:A1:82:98:5C:D7:EF:E5:B4:C7:87:A1:AF:68:66
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:eb:dc:f6:0c:94:87:f7:be:d0:89:76:db:22:fd:89:26:79:
e3:8a:bc:e0:fb:14:8d:21:8f:44:88:f4:35:c9:00:0a:c2:00:
11:f4:8f:de:fe:6e:39:67:5a:33:41:3a:12:de:f5:69:a5:81:
9c:84:94:a6:8f:bc:5d:b2:ca:9f:c8:fa:26:67:6b:de:bb:c6:
63:34:d2:6e:1e:14:8a:93:de:a6:93:7e:cc:a5:ee:87:ab:80:
93:4d:3a:07:5c:a4:e5:70:d2:d9:f7:28:78:7b:9e:2a:ff:7d:
e8:27:99:34:84:a9:0e:17:4b:42:41:87:75:47:52:68:2e:c9:
6a:90:6c:17:42:f7:96:d0:e5:7a:62:24:55:b8:a3:82:08:f9:
cc:23:43:d7:bc:2f:f9:80:2c:5c:98:08:2f:d8:3d:ec:bb:8e:
3c:ca:bd:1e:77:05:33:54:5e:a2:71:fe:49:bc:76:5f:32:58:
12:11:00:c2:cd:67:f5:31:f3:d1:d7:dc:ae:6b:31:27:57:72:
1a:47:8b:95:dc:b1:d6:f9:88:1a:f2:b0:63:fa:83:49:67:8b:
d5:23:35:cc:9c:94:74:9b:47:5a:db:d8:66:a9:77:03:71:27:
eb:ee:53:ed:a7:95:39:ac:d9:bc:36:55:45:8f:92:9b:6a:f5:
69:16:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:49 2025 by rpki-client