Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: IsRSe9vgCXNcpEVC2xM33lWlxgz2TsyHQ4lpCKQn8FM=
Subject key identifier: 00:0A:C6:E7:7B:B0:6A:BD:3A:3A:83:EB:63:E3:DA:06:4C:9D:D6:B8
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 01992255383144184949CBFB60128781FD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: 4eGrLdYUFZfvt+N/deoLKmP9lfFQJn4rpG5N5KzrNbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:38:31:44:18:49:49:cb:fb:60:12:87:81:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=000ac6e77bb06abd3a3a83eb63e3da064c9dd6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:9f:2d:e9:7f:0e:31:f5:30:84:61:33:6c:
1b:1b:6b:e4:b1:ed:9d:ea:5e:2f:d9:7e:9e:ce:81:
66:61:72:6c:b4:74:63:e9:ab:19:8b:62:39:0b:97:
ed:3d:08:b3:6e:46:2f:6a:92:03:24:e5:9a:16:e1:
70:6c:b8:4d:bd:ac:e7:9c:4c:98:7a:01:48:90:2f:
3e:53:57:62:2d:8f:7f:5f:38:93:bf:6d:3a:90:2a:
62:44:10:d6:94:2f:87:b5:3e:3b:cb:86:db:ba:11:
3d:39:d5:e5:df:f2:ac:1c:9b:27:9a:d6:1a:a1:b5:
cc:25:1d:1c:a8:51:63:24:50:40:12:df:08:4c:b8:
52:87:30:95:90:89:65:c9:41:af:ce:24:da:2a:20:
94:a5:e7:ae:49:16:c6:e6:8e:ff:bb:d7:93:44:92:
3d:a5:f2:f7:da:6d:7e:d7:14:5e:4a:1f:d1:e6:a0:
bb:83:b3:4f:4a:c8:4b:da:08:a3:43:1c:72:eb:11:
34:bf:44:dc:48:8f:0b:f9:0a:8c:25:fe:d2:3e:98:
8f:4c:48:c1:2c:b7:67:69:d1:74:47:98:4d:65:f8:
01:0a:04:f8:fd:65:8f:2a:cd:02:e8:59:06:2d:64:
c4:dc:29:20:d7:de:98:df:9e:e2:ca:9d:e8:80:c1:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:C6:E7:7B:B0:6A:BD:3A:3A:83:EB:63:E3:DA:06:4C:9D:D6:B8
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:40:79:8c:a7:ed:dc:d3:da:29:2e:0b:6c:68:a7:00:5c:d4:
5d:79:4f:d0:dd:1a:86:84:f4:31:95:65:82:94:70:84:f4:46:
88:ea:87:2b:36:82:83:67:96:26:35:67:9d:c6:cb:1a:66:3b:
69:24:de:ae:45:af:ce:6c:81:c0:61:50:58:5d:73:b0:f4:17:
75:ed:69:d0:89:7e:c3:41:5f:9e:9a:7e:65:f1:b0:6d:e5:35:
72:9b:0d:4b:19:ca:9a:8c:bd:a7:03:3d:f1:aa:01:c7:67:00:
56:6f:91:65:bf:5b:59:f8:c9:b9:8f:ec:a4:00:86:a8:dc:b4:
8a:02:a1:13:53:28:61:f4:e1:d6:1d:2c:5e:9d:74:5f:0a:fb:
5c:41:8f:7a:db:e2:11:73:91:ee:6d:a2:a0:35:fb:ea:da:4d:
63:79:fe:71:e4:03:a7:be:6d:4b:f3:2f:25:09:a3:bb:df:cd:
6f:20:e0:49:38:89:08:46:63:54:9d:1a:57:6d:0b:5a:8c:b9:
c7:2d:5d:5d:8c:27:3c:3e:33:2d:21:ae:a8:83:43:42:fc:e7:
f6:a8:6f:ff:d1:b1:1d:f4:d0:2d:1b:83:ed:2c:ad:a3:16:2c:
a1:03:d0:08:d5:9c:42:21:29:66:00:17:85:eb:bc:00:a9:df:
21:bf:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:15 2025 by rpki-client