Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: rJ4jxRl32+vCRA/s/j/Oat5CO3rtAQbWLY3Ns5Vd1PQ=
Subject key identifier: B2:E7:20:BF:10:45:16:6C:21:5D:DE:A5:83:5E:CA:7F:E1:D7:5A:F2
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 0199240D1CEE1415CC17E70C7D360F983BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 12:01:03 +0000
Manifest this update: Sun 07 Sep 2025 12:01:03 +0000
Manifest next update: Mon 08 Sep 2025 12:01:03 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: 0yCDDSXjvHipouT3SIri4Ap99HUxvUwUZMqGsct4lSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:1c:ee:14:15:cc:17:e7:0c:7d:36:0f:98:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Sep 7 12:01:03 2025 GMT
Not After : Sep 8 12:01:03 2025 GMT
Subject: CN=b2e720bf1045166c215ddea5835eca7fe1d75af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7f:03:e1:4d:ef:06:fa:5b:b9:d1:4a:0d:3e:
15:8f:3f:ec:87:b5:2d:58:f1:6c:56:d6:97:3c:7b:
6a:53:70:5d:53:52:41:41:57:de:9a:86:96:b2:d1:
eb:bd:31:f3:e8:66:31:70:82:4c:d1:d3:e1:a4:e0:
50:50:d0:08:6b:39:16:1e:03:50:b4:93:96:de:f1:
6d:36:5a:c5:29:41:93:b0:81:71:63:75:d6:a1:29:
e0:a6:49:bf:0d:38:de:ab:45:ff:f3:65:b3:fd:55:
5f:ab:b1:0f:b9:95:eb:95:6f:e7:10:cc:d5:68:45:
2b:26:3f:17:c8:b5:c2:10:bb:fd:c7:9d:bb:70:17:
f1:22:f0:6b:22:80:6d:a3:87:11:05:66:d6:65:81:
36:8c:96:4d:ad:46:65:7c:e9:35:3b:bf:ef:84:5c:
11:8b:1b:6a:49:82:29:47:0a:49:c7:d1:97:95:cb:
e8:a5:f7:42:e1:eb:d7:21:99:5b:d0:45:02:41:16:
b9:85:d6:3c:71:18:69:fd:67:97:39:fe:61:70:54:
40:b0:b6:86:43:9f:2a:fd:be:b1:19:6b:23:7d:08:
bf:68:a0:71:dc:87:8b:5a:fc:fa:5a:41:da:f3:6f:
39:93:a3:98:6f:3a:46:a0:f1:73:4e:04:32:ca:2f:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:20:BF:10:45:16:6C:21:5D:DE:A5:83:5E:CA:7F:E1:D7:5A:F2
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:05:c3:6a:1a:3c:12:0a:c9:49:da:ac:d3:b9:5b:1a:6d:
98:f1:e1:ef:07:20:78:72:d6:b2:7c:45:d3:00:2a:57:12:59:
32:e5:26:6c:58:96:b4:67:0c:8c:ea:f4:92:24:42:da:59:ed:
a8:8e:2f:7b:d3:81:7d:cf:4b:48:9e:8d:01:28:4a:ef:aa:fb:
81:ab:ea:89:41:7e:5e:20:26:36:c0:83:fc:e1:1f:69:4f:ed:
eb:e5:01:90:57:4a:32:17:54:4a:87:4a:bd:02:50:fe:bc:02:
03:54:06:cd:78:fa:f7:bb:6d:ad:6a:1e:c3:a6:2c:1e:ad:ec:
56:f9:fb:69:e9:7b:b7:9d:4a:be:83:c2:12:9f:e7:ff:f6:ff:
12:b3:60:db:6b:fe:ba:eb:cf:f3:58:0a:e3:1a:be:74:3a:8c:
9e:32:2b:d2:ab:05:11:0b:d9:2b:b2:2f:c6:9f:e2:d1:1f:0f:
51:04:6f:0b:90:66:fe:7c:73:c6:2a:ef:d3:6c:a8:a7:71:90:
db:0d:b0:ae:80:65:15:0b:68:65:f0:70:53:f6:6e:2b:3f:e5:
fc:4a:4a:87:63:9e:a3:8f:40:50:50:82:ee:de:44:9d:3c:98:
6e:86:28:7e:01:32:09:1e:29:c3:13:96:c0:15:25:99:4c:1c:
f0:d4:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client