
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File: QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier: qwS56PEo8Q9DlXY+b6A4uQlRyuFgT3HnvQT0MfPvwXI=
Subject key identifier: 10:E8:08:ED:42:73:AE:1C:C8:B4:B3:51:A7:6E:69:D1:29:0C:BC:F0
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer: /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial: 0199239FB8E5A2FB068BA036264B3B36A75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number: 1304
Signing time: Sun 07 Sep 2025 10:01:33 +0000
Manifest this update: Sun 07 Sep 2025 10:01:33 +0000
Manifest next update: Mon 08 Sep 2025 10:01:33 +0000
Files and hashes: 1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: nf4wVNllJotDzq8rNtbcs9tWbfZ84z50rhBw0Ny4rdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b8:e5:a2:fb:06:8b:a0:36:26:4b:3b:36:a7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
Validity
Not Before: Sep 7 10:01:33 2025 GMT
Not After : Sep 8 10:01:33 2025 GMT
Subject: CN=10e808ed4273ae1cc8b4b351a76e69d1290cbcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:f3:62:3b:2a:1b:df:aa:4d:80:c8:cb:d7:
20:91:dd:05:a1:2d:c8:00:42:d3:b6:fe:b5:4c:30:
c0:ad:19:19:96:b7:62:58:05:40:07:dc:9a:af:00:
11:3e:bd:f0:17:fd:4f:b1:77:74:77:e2:20:3d:b2:
50:96:94:6b:f6:04:d2:06:1b:32:96:22:53:67:79:
4f:56:2e:bb:9c:a6:bd:ed:a1:3d:cf:79:e8:51:97:
5f:71:16:cc:a0:a5:0e:56:da:8b:b1:8f:d3:88:eb:
85:ba:1a:05:44:d3:8f:23:a7:fe:7e:f5:be:fe:9d:
b8:7d:e5:ef:b7:28:c9:2d:09:90:d8:29:4a:b2:df:
66:9e:ee:b4:3b:94:2c:4a:80:89:f0:bc:2b:6e:08:
4d:c9:63:0b:68:5b:a8:1b:f1:21:1b:64:6a:94:06:
13:c6:e4:1b:d1:e3:03:99:d1:13:62:52:e7:67:85:
e0:97:11:50:b4:d5:25:49:f3:4d:42:78:5b:5c:45:
e6:f0:1e:23:37:e4:f4:9a:6c:c3:d6:9a:17:36:57:
e4:04:b9:8a:b2:f2:2c:a1:8a:dd:78:f7:26:31:bd:
7b:b6:00:34:e6:e5:86:81:fc:30:75:fc:f2:53:97:
6f:e5:67:62:2d:c4:85:eb:20:ea:74:e5:1d:64:36:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E8:08:ED:42:73:AE:1C:C8:B4:B3:51:A7:6E:69:D1:29:0C:BC:F0
X509v3 Authority Key Identifier:
keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:52:40:8d:21:a4:eb:06:d2:6d:f0:92:98:21:3d:33:38:3e:
af:fd:92:df:c6:c4:5c:7b:0d:3b:f3:27:73:a4:40:a0:00:08:
d6:23:2c:e2:b9:98:a6:09:c5:46:1c:9f:c9:79:1c:e7:19:2d:
2d:0b:9f:48:22:c2:5f:6c:c5:a2:f3:2d:d5:91:f3:c6:3c:2b:
99:b4:ae:69:86:d7:02:d9:94:19:57:4f:77:e3:7c:cc:b5:21:
36:b4:a9:e9:ff:89:37:f2:00:7f:2a:12:6f:d5:14:36:35:0b:
e5:02:07:ea:8f:ca:b9:1b:80:3a:9c:db:90:55:f6:cc:9d:ad:
43:79:11:45:48:2a:b0:69:87:42:eb:38:c6:d1:29:88:5b:6e:
2e:74:36:91:85:cd:4b:6d:e9:eb:81:51:77:97:c6:86:28:b6:
24:3f:e5:f2:3d:2a:5e:6a:01:e6:f2:90:77:47:f0:69:3e:93:
d9:8b:03:e8:d4:16:83:be:61:15:68:59:f5:c0:86:35:cd:5b:
32:4e:c9:b4:f0:ff:97:f2:f9:72:28:46:d1:38:ff:90:24:8f:
fb:e9:0f:fd:99:75:96:9d:dd:de:a9:38:31:ad:34:9a:a6:97:
9e:95:b1:a7:61:26:4d:ec:47:58:0f:3a:4e:1c:ad:f6:60:5d:
45:a5:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:56 2025 by rpki-client