Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: 1InmhHR0mJvaWSUxfzcN6mMtEa3dYAf7vkDCDOfqXpw=
Subject key identifier: 3F:5E:F9:F6:72:BA:C4:22:CE:A7:E8:F7:49:69:AD:01:38:D7:07:0E
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 0198D473D7F083291784202B2F96FC3BBEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: rR7llHl1nXSu8dh8gGo554T9NgYsScwp//ban7kauWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d7:f0:83:29:17:84:20:2b:2f:96:fc:3b:be:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=3f5ef9f672bac422cea7e8f74969ad0138d7070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:d1:45:84:f6:32:be:da:ae:98:01:30:69:
5b:e5:a8:ba:8a:13:6f:cf:b3:e3:bc:24:4f:bf:de:
44:e0:b1:ce:8d:f1:de:63:c9:d0:4b:1a:ad:5d:ef:
4d:27:97:07:33:d0:4c:84:71:6a:90:05:b2:8c:b8:
9e:22:1a:49:49:38:f1:20:d3:8a:56:e9:a4:24:85:
a9:f8:b5:1f:3a:d8:f5:f4:38:2b:43:2c:ec:a2:b5:
a2:06:d9:4f:4f:6e:62:ab:a3:03:a4:ba:07:d4:8f:
2c:4b:24:dc:8e:62:0c:67:c3:c8:0a:88:b4:64:9b:
12:15:67:25:04:6e:b4:28:95:12:5b:2f:54:45:9f:
9d:60:24:42:88:d4:db:14:9f:87:ec:54:49:71:6c:
8f:50:f0:b6:7c:ca:b5:17:55:da:94:fb:fc:ae:a5:
5c:54:b7:47:5b:f9:3c:fe:9b:76:0f:07:c9:4a:39:
99:2f:76:08:51:b6:e4:12:b0:e2:11:34:3b:a3:bb:
3f:f1:88:61:54:6e:72:14:36:26:ef:00:2e:81:64:
65:9f:b1:d3:24:a9:a3:f6:02:55:55:af:49:31:71:
e4:cd:fb:70:ab:a0:13:04:a6:3d:a6:fe:a6:49:55:
c4:1f:4b:e5:0e:a6:1d:18:4b:db:32:69:07:cd:9f:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5E:F9:F6:72:BA:C4:22:CE:A7:E8:F7:49:69:AD:01:38:D7:07:0E
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0e:2c:51:76:a7:b7:58:ce:2f:fe:11:3a:64:0a:e9:b0:3f:
cf:a5:f9:e5:93:73:df:1c:ff:03:4a:ea:5e:17:fd:ff:20:04:
9f:5a:14:94:4b:4f:6a:2e:ec:4c:d2:7b:dc:51:aa:13:29:ee:
e4:df:61:2b:6b:6d:f3:a5:f8:3d:00:b6:12:b3:90:82:d3:a6:
ef:32:6f:52:ad:76:40:3f:4e:b3:02:4c:65:a0:55:ec:80:71:
2b:ad:ac:22:ab:b3:78:76:85:bb:cd:0a:69:0c:7f:81:6b:88:
71:40:ba:0c:a4:ba:40:33:bb:a3:89:d1:b8:6b:00:55:c1:87:
16:da:65:bd:09:74:e2:f5:dd:30:8c:1b:c3:f2:ec:77:eb:9f:
26:bb:f9:75:56:2a:86:ea:d4:6b:2c:66:14:39:27:e7:60:66:
ed:ff:29:35:67:22:6e:15:b7:60:ce:8c:fb:2a:e7:04:10:da:
f2:d3:5f:2e:5c:6d:75:fe:94:37:98:1a:73:0a:05:53:ad:3b:
e1:ba:88:79:6d:96:ff:fc:07:60:b8:20:bd:a4:d7:0f:30:19:
26:c1:0b:c1:87:b0:32:0c:19:22:37:b0:79:34:06:3b:11:2f:
3a:9e:eb:14:5b:ca:a7:64:07:af:11:88:ee:9b:06:1e:7f:be:
f2:35:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:46 2025 by rpki-client