Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: 5VyK4p1Nx3OUhtaQjP87IUmKhfUfxA67wSx+Oa+7Xx0=
Subject key identifier: 6F:9B:2A:C9:09:90:85:14:1B:43:B5:9C:BB:F6:B9:D5:FC:87:69:0C
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 019921B1387636DA630103AAAA4A56DC8AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:01:26 +0000
Manifest this update: Sun 07 Sep 2025 01:01:26 +0000
Manifest next update: Mon 08 Sep 2025 01:01:26 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: xHP2EHhRgTYik2hxK2zGhUU/oOoPbClg8B9lhYCcGgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:38:76:36:da:63:01:03:aa:aa:4a:56:dc:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Sep 7 01:01:26 2025 GMT
Not After : Sep 8 01:01:26 2025 GMT
Subject: CN=6f9b2ac9099085141b43b59cbbf6b9d5fc87690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:c2:35:ce:45:e3:bb:64:3e:bc:96:76:19:
6b:81:fe:19:90:61:ee:ed:08:8e:b1:8b:9d:1e:8c:
ef:1c:3d:bc:5f:7e:04:a4:e5:8d:ff:64:9b:37:4e:
81:4d:5c:39:9b:98:c0:89:43:93:cd:6e:79:39:26:
1b:bf:6c:f0:24:22:86:dd:6a:a6:da:b8:ae:15:f2:
c2:3e:51:85:28:f5:10:38:da:8a:bf:d8:73:a1:a0:
59:40:a6:cb:0d:96:25:79:ee:9b:82:6d:e8:5c:27:
31:af:8f:03:ca:40:e1:24:f4:bd:97:88:65:c3:ff:
19:75:17:c4:1f:a8:c7:9a:dd:28:6f:c7:7e:aa:bb:
8c:96:84:6e:89:42:b3:ac:e0:4b:f1:83:a3:0b:c4:
78:93:81:68:e2:58:0f:28:ae:82:7d:fd:b7:ab:fe:
d6:0e:d4:1f:57:c9:65:32:e0:61:58:c9:e8:fc:37:
f2:c4:98:30:f5:01:3c:a0:d8:bc:74:33:7d:90:09:
56:b7:7e:5d:b7:94:4e:5f:0e:2f:b5:f0:1c:73:da:
58:cd:3d:32:86:56:56:cc:04:5d:da:03:f1:db:49:
80:9f:59:a4:73:b9:29:0d:16:5d:cd:ac:38:05:36:
fb:12:dd:78:f7:a1:e0:a7:79:5e:57:72:f9:43:3e:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:2A:C9:09:90:85:14:1B:43:B5:9C:BB:F6:B9:D5:FC:87:69:0C
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:82:db:c1:d7:09:13:c8:e6:a6:99:bd:85:1a:d4:bb:25:0e:
e0:1c:1f:2f:4d:ff:2f:2c:7d:f9:a3:38:e9:7c:c8:86:2f:dd:
65:e0:49:36:69:16:16:a4:44:9e:65:8f:3c:a9:c8:4c:48:e8:
aa:01:d6:cd:00:8e:8b:8c:c2:2f:bd:b7:a4:d2:e9:ff:66:f2:
81:bf:7d:9b:4f:ef:b1:9b:a4:62:f5:d5:fb:84:16:91:ab:0b:
64:a4:04:58:36:58:83:fe:5c:bc:85:e0:7d:1b:0d:5a:d6:9c:
10:56:48:79:96:f0:63:db:d6:03:24:c4:46:9b:d3:e9:a0:cd:
ed:61:7c:5e:0f:02:ff:ce:d6:ed:ae:95:c3:97:ea:8f:a1:cc:
9c:4d:2c:d9:c5:c3:9e:5e:8c:85:0a:50:88:3e:89:d4:73:0e:
8c:0d:00:be:d8:76:6a:5b:82:dc:b3:07:a7:70:16:3b:8b:d4:
15:4f:cb:98:9f:9a:b0:fe:4d:54:c6:0b:90:cb:c8:8d:f9:c9:
86:f2:bd:8a:8e:80:61:99:c6:2f:75:62:0e:90:8c:fd:b6:8b:
7f:ea:ea:df:4d:d9:06:0e:d0:2f:ca:9d:bf:0b:c3:f8:69:8a:
b7:f0:5b:94:50:a8:16:5b:87:68:1c:c0:78:b5:ec:c5:97:7b:
3f:de:56:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:40 2025 by rpki-client