Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: +ML8qrvdgLmjwtmEDKakdwycKeMxY4D2sIUcgP7ZA3Q=
Subject key identifier: 3D:A3:F7:78:9E:50:86:99:DB:87:AF:A4:7E:82:A9:31:55:2B:00:9D
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 0198D47367DE7FFF39FE5AF5021334A28E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:09 +0000
Manifest this update: Sat 23 Aug 2025 01:03:09 +0000
Manifest next update: Sun 24 Aug 2025 01:03:09 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: dqeKYi9O1kXE/bikQBMcERWDJVinBRhUHiBjZ0hnjFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:67:de:7f:ff:39:fe:5a:f5:02:13:34:a2:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Aug 23 01:03:09 2025 GMT
Not After : Aug 24 01:03:09 2025 GMT
Subject: CN=3da3f7789e508699db87afa47e82a931552b009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:35:d4:1d:1b:76:56:93:7b:7d:78:1c:78:
11:c2:f3:37:48:13:e5:51:85:c9:1c:33:5d:ca:67:
75:cd:da:3b:6a:14:85:0b:d2:60:62:73:bf:dc:bf:
5b:ba:9e:eb:cd:da:18:34:6a:b2:b0:6f:13:af:c1:
d7:00:e3:68:15:67:52:06:24:4e:03:56:40:c4:d0:
74:37:8a:d9:6e:73:26:db:6f:19:9d:c3:21:ac:ad:
02:c7:c0:63:c9:42:b3:6c:8b:36:9c:41:ab:6a:05:
d8:2e:e3:85:c1:b7:b9:3e:fd:88:15:8d:c4:ce:72:
9b:44:1e:72:0e:6c:fb:f6:d4:ad:87:d0:99:2a:83:
07:cb:0d:62:a9:b0:21:91:17:7a:ec:d1:1d:95:47:
fb:12:55:f0:f0:35:f6:1f:53:a5:35:a4:5b:86:4b:
f8:e6:9c:ef:b8:9a:f9:b0:07:02:9c:88:de:7a:15:
93:f4:8c:92:06:6a:3c:4d:f5:20:e0:95:1b:89:93:
e6:4c:67:ad:c5:17:31:08:7c:ab:c8:aa:39:2f:64:
d9:d9:3e:87:25:79:ef:24:a8:ad:f5:e7:8c:b6:28:
97:56:c9:3b:33:80:ae:8c:d6:6c:b9:d3:55:65:ec:
76:23:81:45:d5:79:7f:f7:3c:a8:8e:12:13:74:71:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:F7:78:9E:50:86:99:DB:87:AF:A4:7E:82:A9:31:55:2B:00:9D
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e2:55:44:92:3c:3d:b0:ef:a4:7f:48:d8:06:5b:68:11:35:
9f:12:c5:d6:50:16:c1:10:fe:ea:c6:3d:7b:bf:f5:57:db:6f:
b2:76:ac:24:20:69:46:f1:2d:03:a8:e5:8d:0e:31:d4:f7:44:
04:5e:4c:7d:ff:86:9f:1e:4a:59:8c:3b:09:6e:21:dd:d3:8a:
95:96:e5:3b:40:06:8e:f3:7d:2d:23:1f:0a:36:f7:af:90:3a:
99:22:1a:58:a1:7c:dd:5e:2c:3f:e0:9d:80:e1:8b:1f:ff:0a:
3d:14:c0:2a:bb:a2:44:e2:49:57:c6:ee:d6:1a:6e:00:ae:ee:
37:4d:fa:da:3a:7d:59:87:d8:43:45:9e:9e:78:b1:c1:4b:37:
0e:d1:59:78:3b:d9:37:0e:16:1e:cf:74:16:42:3d:4f:5b:cc:
81:8d:05:60:8b:74:2d:bf:bd:81:f6:59:f8:07:70:fa:b5:1b:
b7:5a:bc:0d:1a:42:ca:d1:4b:84:03:0f:23:df:46:4c:77:8c:
d5:2d:5a:a8:45:35:f9:bc:5a:1b:7f:98:e9:7f:f4:2d:2b:8d:
25:f1:b8:06:de:34:fd:bb:fd:a2:9e:45:5b:a6:ce:d8:b5:83:
ee:3c:bc:d7:96:f1:50:6d:69:bf:a5:7d:8f:e1:ec:de:fe:1b:
41:e2:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:20 2025 by rpki-client