Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File: QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier: CHOgRKVOnfABYyplKJTM6HuawWaHwSENYYgabOu5rpE=
Subject key identifier: 18:93:36:59:41:15:9B:3C:29:4C:9D:0B:15:51:9E:30:AA:96:75:A1
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer: /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial: 0199221F20906DD27279394BD1C42351B7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 03:01:29 +0000
Manifest this update: Sun 07 Sep 2025 03:01:29 +0000
Manifest next update: Mon 08 Sep 2025 03:01:29 +0000
Files and hashes: 1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: 5XTq+bSopxR239vDYTpiRV2MM2JgcQ96CWwZOgjKCgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:20:90:6d:d2:72:79:39:4b:d1:c4:23:51:b7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Validity
Not Before: Sep 7 03:01:29 2025 GMT
Not After : Sep 8 03:01:29 2025 GMT
Subject: CN=1893365941159b3c294c9d0b15519e30aa9675a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:c1:bf:1e:a3:4e:ea:26:76:45:10:c6:10:
d3:3a:b4:df:68:a8:99:c8:50:05:f5:bb:d4:09:6f:
e2:37:10:cb:f9:b6:d0:f4:26:ec:55:a9:d0:a2:6a:
7d:a1:30:5f:12:46:21:5f:ae:2e:5a:4c:44:f8:af:
08:92:c6:f1:ce:8c:7b:29:59:eb:6b:07:a6:cc:77:
cd:fc:ae:99:17:64:42:3f:4a:aa:b3:5d:29:91:66:
cc:1e:ee:92:93:0b:ca:b2:ec:52:23:c7:35:81:67:
8e:04:ea:56:1f:19:44:2a:af:da:42:f0:a1:1e:47:
07:5f:47:3c:38:f4:0e:4b:b5:d4:d9:47:d8:c9:f9:
df:73:97:17:e7:f0:34:3c:2f:71:ed:31:e4:84:e7:
46:d3:df:2a:01:27:61:11:6d:ea:be:65:4d:2f:d7:
32:23:d9:dc:f8:4f:24:c9:49:db:ee:16:6b:65:3a:
26:cf:2e:ae:d9:39:fa:b5:92:9c:4b:73:59:e1:a9:
b6:fe:9f:48:c8:36:4c:aa:0c:3a:56:f0:ee:1d:e8:
db:02:8a:64:77:14:4c:77:46:46:67:bf:ff:16:4b:
10:e4:69:2b:47:14:5c:99:fa:f6:fd:1c:91:08:70:
70:5c:d5:74:f9:b4:95:d7:09:fa:3e:41:e4:43:f3:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:36:59:41:15:9B:3C:29:4C:9D:0B:15:51:9E:30:AA:96:75:A1
X509v3 Authority Key Identifier:
keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8b:b1:fd:f2:0a:c7:5d:e2:fc:c8:51:ac:58:35:0f:ca:2c:
4e:d9:b8:e2:e9:a2:80:63:b4:fc:52:e1:98:68:02:14:f6:0c:
83:75:f2:45:a1:81:d1:f2:f2:9b:38:57:da:f9:20:a5:3b:b7:
1c:0b:88:45:45:30:d0:41:87:02:4b:44:5d:1f:2e:9c:f5:31:
02:b3:d6:13:44:fd:71:76:92:4a:bc:7d:ec:fd:9d:b6:23:bc:
c1:1f:dd:6f:0d:fa:fa:1e:02:08:7c:19:cb:b1:c9:e2:62:d4:
0a:87:9b:4f:f9:ee:ca:92:ed:84:73:a3:2d:17:65:27:7e:51:
c0:8f:48:84:6a:35:04:51:6a:aa:4e:b7:9e:74:0b:b5:b7:79:
78:d6:43:e4:75:9e:ce:4a:5b:0c:73:cb:8b:28:76:b6:f1:ec:
b1:6d:98:7d:4a:e5:a0:58:fa:02:99:42:5b:cd:4d:9b:22:63:
02:5d:ad:f1:e7:4d:e5:d1:88:f0:de:78:ac:1f:41:36:20:f2:
fa:6a:61:a3:69:c7:5a:f8:13:12:0b:49:df:ef:26:5a:52:a8:
10:87:ea:5e:09:57:36:88:4e:9b:51:66:58:ea:a7:0c:68:8e:
ce:9e:93:eb:cb:19:0b:9f:e4:e6:55:34:8b:e7:74:a5:77:ff:
89:a7:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:04 2025 by rpki-client