Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: ZqBx0bAnyWG3MLmYdivEyoNT7c+h6bcK6pysU8iItQk=
Subject key identifier: 93:C4:C0:17:E7:DB:29:B9:29:A1:44:38:C9:14:B6:3E:0E:31:92:C9
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 019917641D81914FAAA9879EDA53C69492C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 0948
Signing time: Fri 05 Sep 2025 01:01:01 +0000
Manifest this update: Fri 05 Sep 2025 01:01:01 +0000
Manifest next update: Sat 06 Sep 2025 01:01:01 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: S372HbEmzjwjEHf6IqwtVwIIrWOJdanF69tCC+s9xWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:1d:81:91:4f:aa:a9:87:9e:da:53:c6:94:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Sep 5 01:01:01 2025 GMT
Not After : Sep 6 01:01:01 2025 GMT
Subject: CN=93c4c017e7db29b929a14438c914b63e0e3192c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:f6:ee:05:a7:07:e8:e2:dc:57:f2:1f:64:
e0:b0:4a:14:b2:3c:47:6e:04:61:1e:c4:32:5f:f8:
b2:67:f9:62:17:82:75:2f:fe:c5:5e:2f:f4:fc:47:
55:e0:3c:01:9d:ea:fb:cd:9d:1e:14:64:4e:e3:de:
0b:c5:70:e8:23:fa:70:9e:e8:a8:50:98:51:1c:1d:
15:ed:3a:2f:c4:06:15:a8:21:e4:89:6c:f6:26:6c:
45:cb:24:de:22:0a:5a:6d:29:6f:01:a0:b0:fc:0f:
7a:c1:95:4c:84:eb:bd:fd:b9:b5:d9:d0:fa:be:90:
b8:f7:5a:ed:ba:26:10:c0:66:26:fc:2a:29:91:eb:
a5:2f:ed:50:7e:30:bf:4f:c2:56:6e:fc:fa:2d:a7:
18:3d:20:c9:dd:76:08:15:bb:87:ab:78:ea:c4:c8:
b5:e7:fe:05:eb:6d:a6:a1:0f:9e:a6:a6:e9:ec:94:
b5:33:19:22:66:a1:6d:a1:c6:ce:61:6e:14:e1:a9:
83:8f:b4:08:77:42:55:57:5d:05:06:50:f6:1f:89:
f1:95:75:b1:80:57:b4:08:30:1f:5a:71:e9:0f:6e:
41:5b:0f:b9:15:7e:da:e0:38:33:91:80:3d:f2:e5:
60:fe:05:09:7b:24:38:17:e3:a4:8c:70:d6:d0:77:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:C0:17:E7:DB:29:B9:29:A1:44:38:C9:14:B6:3E:0E:31:92:C9
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:29:81:24:79:69:f5:94:25:f9:3f:52:0d:99:d9:e8:41:72:
04:ce:6f:e0:73:b0:50:7d:2f:01:c1:ad:6e:53:64:41:5a:a5:
15:c1:05:cc:c5:b0:2e:b3:ac:b4:8f:6c:dc:19:e9:88:50:91:
f1:4d:22:9f:9a:4e:3c:22:c0:08:57:e2:40:df:2d:ee:05:2f:
89:6b:0d:98:cc:61:19:f4:57:1f:07:c1:d0:15:12:14:de:88:
a4:5b:29:07:e7:6a:60:c4:d2:7d:aa:8f:9d:a0:45:18:88:c3:
22:77:85:b8:d4:c4:ff:82:e9:d4:f7:c6:d8:98:f8:f9:7e:d0:
86:70:79:9e:e7:fd:2f:89:8a:5e:36:25:01:c5:82:14:25:95:
c2:58:60:bd:74:89:07:b4:bf:2c:80:ad:b5:8c:53:d3:80:44:
e4:1e:d2:1e:6f:7f:8f:32:32:b0:e7:d2:7d:30:c2:64:08:2a:
86:28:6b:17:07:35:d7:2b:51:ed:b7:16:5b:6e:ea:2e:8a:44:
6b:bb:7b:a7:8e:cd:f7:59:f6:7f:41:0c:66:f6:fb:c9:a9:80:
ad:cc:cd:84:d6:93:2b:77:8d:e2:b1:11:ac:9b:c8:65:b7:c7:
25:08:10:a4:93:4a:94:0e:83:05:e1:e0:6e:2b:e4:89:d7:67:
44:0d:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:14 2025 by rpki-client