Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: X+Ee7HkDLqYwej+jVR8BLqQKRE3b/4Hg6rhbQxhy6Lw=
Subject key identifier: C6:0E:03:EC:D3:1A:36:AC:6C:11:4C:ED:A0:FF:3A:AB:A0:E8:A9:60
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 0199233161C885410A00245797F86A9B1945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 0456
Signing time: Sun 07 Sep 2025 08:01:02 +0000
Manifest this update: Sun 07 Sep 2025 08:01:02 +0000
Manifest next update: Mon 08 Sep 2025 08:01:02 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: C7Pq+/c5kJ9ecVYFXi8/pZ7QNTpEcqK4qDtr4Z51SFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:61:c8:85:41:0a:00:24:57:97:f8:6a:9b:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Sep 7 08:01:02 2025 GMT
Not After : Sep 8 08:01:02 2025 GMT
Subject: CN=c60e03ecd31a36ac6c114ceda0ff3aaba0e8a960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:2f:88:31:85:70:55:5d:9c:a0:38:1f:36:
e2:dc:9d:17:e1:f3:53:ee:94:f0:96:b3:b9:0f:e9:
19:b3:9f:67:70:7d:a5:0d:d0:32:01:6b:e3:1b:68:
71:02:d0:76:50:c6:01:1a:28:1f:46:1f:99:3b:4c:
e9:bb:95:6f:a1:54:41:66:95:31:c1:aa:a4:53:9f:
42:60:77:1a:24:e1:38:ed:19:9c:da:1f:fb:6e:db:
4e:87:34:95:89:06:78:7b:97:47:6c:14:f3:e2:c4:
46:0e:a4:28:52:4e:41:0f:f5:54:8f:ac:e1:87:54:
92:43:40:74:a1:03:7f:e4:be:c6:ab:8c:f1:05:9a:
f8:50:22:8a:f8:a3:7b:a0:27:4b:7d:6f:d8:a9:34:
89:bb:6e:a5:bf:c6:13:ec:50:51:9a:ae:40:14:4d:
38:ff:b4:89:ac:20:2d:0d:e5:0c:ea:ac:ab:43:28:
94:ea:fb:88:49:46:f7:18:45:6f:eb:2d:46:3e:67:
93:37:1d:e9:28:e8:64:2c:41:f5:f6:26:a1:0b:a1:
bf:0a:ad:89:0a:b8:a0:0e:7f:22:07:a9:ee:7c:cd:
f4:d1:31:ec:55:46:cf:1e:4b:f9:98:4c:05:9a:67:
ab:79:28:8f:85:9d:7c:ff:06:6b:74:9b:fe:80:4a:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0E:03:EC:D3:1A:36:AC:6C:11:4C:ED:A0:FF:3A:AB:A0:E8:A9:60
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b7:b8:48:c5:7b:e7:ce:cb:31:ec:c6:0c:75:85:36:56:96:
63:84:e2:9b:20:36:ee:e8:80:2f:a0:eb:9c:e3:89:6f:dc:37:
64:d5:87:7f:91:18:72:bc:ed:7b:64:0b:c5:ff:e6:20:7e:52:
64:68:2e:31:5b:ae:86:c5:71:0c:06:da:93:5d:54:3a:92:5d:
d7:8f:9b:68:65:e7:d9:1b:83:05:a6:ca:a1:8f:51:3f:d1:c6:
ad:49:45:63:c5:1c:17:1c:2d:e2:94:b6:20:4d:f5:94:7f:39:
3c:17:f0:73:3d:ac:4e:c7:60:c0:5e:b5:fc:5e:9b:ad:fb:14:
90:3b:d0:d1:94:ce:47:44:ec:5a:99:d3:1d:88:20:70:60:00:
a4:54:85:37:56:9b:01:a3:c6:a7:1b:c5:fd:91:fd:4d:97:7b:
ac:65:7d:2c:ca:9f:d9:57:4a:28:53:cc:d6:23:37:41:47:24:
c9:a2:d6:9d:b6:ef:19:18:b7:a2:50:72:0f:1f:41:c2:56:f6:
2e:61:8e:c6:52:59:a4:b9:58:5f:c9:a4:8b:02:74:80:ee:73:
20:e3:73:a3:e9:c4:19:57:ed:94:d2:ee:e0:e6:a9:fd:b4:1a:
7e:d8:6f:a8:78:99:cd:74:59:00:f5:d1:ba:cf:9a:f2:39:79:
cb:08:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:00 2025 by rpki-client