Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier: 3SVBcaKDmr+aWTQeJ1f4knc0+pasirY+MLv8pCRVcYU=
Subject key identifier: 9A:FD:04:C7:7B:13:D7:FB:86:A2:B3:C0:40:8D:E9:B4:1F:61:F1:B3
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial: 0198D6CD36C72EBF40DA51DEB272DD580CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number: 0D62
Signing time: Sat 23 Aug 2025 12:00:29 +0000
Manifest this update: Sat 23 Aug 2025 12:00:29 +0000
Manifest next update: Sun 24 Aug 2025 12:00:29 +0000
Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: 6Duo5RnOzn4wgQTkRqtlOKBIYmrAPZCgkdu4f3/txbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:36:c7:2e:bf:40:da:51:de:b2:72:dd:58:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Validity
Not Before: Aug 23 12:00:29 2025 GMT
Not After : Aug 24 12:00:29 2025 GMT
Subject: CN=9afd04c77b13d7fb86a2b3c0408de9b41f61f1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:4c:b1:8f:eb:75:41:55:51:bd:bf:46:11:
b7:d1:4c:28:5f:f2:c1:ad:71:a6:17:34:6b:e3:89:
47:79:7b:c6:23:d3:9b:73:11:d8:ee:83:5f:75:af:
94:ed:29:f8:b3:f0:20:62:6d:63:1e:f9:00:70:6a:
8b:db:0b:55:52:e8:67:3b:62:08:c8:3b:94:18:dd:
65:b7:fc:3d:56:15:06:d7:25:a6:21:36:99:96:f6:
fb:30:13:19:ee:da:31:1f:aa:d2:b2:c4:1f:a5:7e:
82:0f:a1:2e:70:1c:72:aa:af:1f:e5:4c:eb:eb:35:
8b:64:aa:8a:fe:4b:88:75:86:e7:66:5c:47:67:0f:
19:40:05:c2:c5:8b:7c:d1:4c:1d:bb:d6:68:38:e0:
fd:bd:ad:00:8d:40:5e:70:03:b6:83:11:dc:38:f6:
35:b4:7d:d8:a3:6f:19:7d:32:35:1a:e4:b1:e5:2c:
0a:2f:65:4c:96:74:f3:9f:95:34:2f:cf:6f:6d:9a:
94:cb:13:95:cc:d9:7b:b5:0e:4c:2e:91:35:68:ed:
0d:d0:cd:6a:99:50:c0:a7:4e:d4:6d:0f:3e:4d:15:
81:10:05:df:bb:45:98:90:f3:d9:3a:ca:a1:05:1c:
9d:6f:d6:b4:ce:0d:8a:a2:ab:80:9e:ab:68:6b:3f:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FD:04:C7:7B:13:D7:FB:86:A2:B3:C0:40:8D:E9:B4:1F:61:F1:B3
X509v3 Authority Key Identifier:
keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fc:ab:65:99:84:9c:43:eb:6b:1c:13:1b:29:b0:90:a5:03:
cc:e0:66:0c:33:6f:ce:1a:a4:ce:27:27:a9:cb:f6:c6:cf:4b:
2f:84:12:a4:80:ab:50:07:f4:fb:d6:78:63:64:93:f1:13:64:
7b:66:ef:1c:57:60:4f:91:8e:28:1c:46:79:d2:a6:0c:4a:0f:
7e:f7:34:5e:29:4e:72:8f:09:50:51:51:fb:94:55:f0:db:37:
c4:7f:2e:a5:d3:8c:22:40:94:e4:5b:de:95:16:11:b8:60:55:
df:fb:a2:8e:97:24:bf:3f:c8:16:66:98:a0:37:cb:be:1c:46:
21:3b:fb:2b:26:04:5c:8d:1c:6d:23:f5:9e:6a:e8:68:68:8c:
8c:52:0e:e8:ca:d1:32:0c:a6:59:39:00:3b:01:76:5e:55:95:
9d:15:a7:31:a9:6b:cf:00:0c:65:f4:cc:d6:83:04:61:57:68:
d4:16:03:be:27:36:bf:a3:0b:4c:35:89:32:07:2c:c3:87:99:
c9:73:ee:a9:6c:5e:18:55:51:50:f6:43:94:37:69:8e:a6:94:
6f:a1:4c:6f:12:f5:4a:6e:d5:42:e6:79:6c:3f:21:99:f1:74:
00:83:28:06:ab:01:04:d1:9d:f8:67:8a:f0:7e:c5:e8:34:91:
40:a7:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:39 2025 by rpki-client