Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: KL52yndZaUquI5w4GOnH3XH3TNA6Zy0KROamnaqxk+A=
Subject key identifier: AC:33:57:F3:0C:29:97:85:1A:F6:B2:6A:59:7E:36:37:C5:0F:9F:94
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 019921B1D0680738D3E509F4E4593401793A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:02:05 +0000
Manifest this update: Sun 07 Sep 2025 01:02:05 +0000
Manifest next update: Mon 08 Sep 2025 01:02:05 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: Qo67CNXYJi6I2u2YFq9JL9RROCP52O+wiP8+ab7l7o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:d0:68:07:38:d3:e5:09:f4:e4:59:34:01:79:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Sep 7 01:02:05 2025 GMT
Not After : Sep 8 01:02:05 2025 GMT
Subject: CN=ac3357f30c2997851af6b26a597e3637c50f9f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:85:7a:62:6e:ad:7b:35:d5:ca:5f:a5:7a:
14:b2:41:51:4f:ec:62:01:13:1c:62:0b:c3:48:5c:
d3:8e:09:f2:c3:02:f6:55:0d:cd:8b:ba:30:79:0b:
2a:3a:c0:9e:ba:5f:ee:ae:26:40:86:69:c5:69:48:
66:5e:c6:85:3a:04:c8:bb:e6:42:6b:66:00:42:2f:
95:b0:91:d0:c6:1d:ac:7f:9a:bb:ee:6c:9d:7c:ef:
97:ac:a4:fb:db:a0:94:30:7d:9f:2e:88:bf:ed:63:
f3:e8:56:f8:bb:9e:8f:04:11:0f:d0:80:f2:c8:07:
0f:ba:65:8c:a0:d6:48:a0:b9:0b:98:8d:00:a2:dd:
9f:9d:17:e4:c6:ee:26:64:18:16:4d:5c:2f:3d:d5:
43:e9:59:9c:3b:4d:f7:e5:f4:61:66:9e:ec:4a:ce:
b1:e6:61:c0:7d:1f:d6:0b:f5:c9:08:e2:df:86:51:
bf:8e:bf:96:88:da:44:a7:41:07:46:63:99:f2:d2:
8b:86:80:60:d6:20:8c:0a:2e:03:6b:b2:2e:4e:fd:
d7:90:11:1b:bf:ea:e8:29:25:62:91:09:8b:30:88:
38:4c:0d:d9:c7:32:32:a3:0d:9c:3a:0b:53:55:4a:
0e:84:43:e2:f5:c2:e1:d8:3a:c9:07:e7:a2:f3:47:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:57:F3:0C:29:97:85:1A:F6:B2:6A:59:7E:36:37:C5:0F:9F:94
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:a8:cc:a2:3d:82:e1:2a:6a:a9:ac:9c:a7:01:dc:a3:f9:
bf:b4:a9:5e:69:8a:2a:61:4e:3e:f1:97:26:61:cc:75:73:10:
95:2c:51:8e:4d:da:18:ec:8f:6f:fa:61:de:df:7f:56:5e:d6:
7f:ae:ac:bd:ef:a2:74:21:65:a6:74:4e:3d:b9:f6:d3:7b:6f:
94:59:a0:13:a7:b6:26:23:97:cc:80:2e:6e:71:62:7e:e1:d9:
ba:f9:21:e3:59:3b:90:9a:1d:af:a9:d8:7d:e8:b4:7b:74:92:
19:d4:b2:82:f2:ab:81:6a:69:fb:e3:c0:42:50:58:00:ab:5d:
81:2d:5d:c8:59:b2:ff:f0:a2:9c:8f:2b:23:8e:ad:3a:94:9e:
d5:4e:61:71:d0:b9:d0:da:aa:26:9f:4e:13:9d:1e:1c:95:9c:
11:76:6a:ce:53:37:82:c9:e7:a8:f0:2e:27:e9:8d:a2:93:00:
85:69:0b:16:d9:36:1a:7a:e6:02:58:97:4e:43:60:d1:1a:ca:
12:66:bf:02:74:35:67:b9:31:90:9f:2b:36:5f:b2:7e:a4:24:
48:6d:ac:7e:82:85:46:77:b0:b2:97:84:f4:ce:61:e3:6e:12:
ea:ac:45:b8:6f:fa:08:8a:ee:d2:6b:75:82:f1:90:ef:7e:5f:
84:93:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:12 2025 by rpki-client