
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
File: Q5OKPegDvWyR8UrZZ71BQbigKK8.mft (raw, json)
Hash identifier: aBd+cNhDVVln76C6MRXZnaUBc4mTgoHMPDLVAuZGlTw=
Subject key identifier: 12:26:B1:D5:5D:0C:34:EC:0C:7F:84:89:8E:48:E7:7F:F5:64:D2:EA
Authority key identifier: 43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
Certificate issuer: /CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Certificate serial: 0198D54DFF10A407D5938A257D569B0FD5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
Manifest number: 136A
Signing time: Sat 23 Aug 2025 05:01:55 +0000
Manifest this update: Sat 23 Aug 2025 05:01:55 +0000
Manifest next update: Sun 24 Aug 2025 05:01:55 +0000
Files and hashes: 1: Q5OKPegDvWyR8UrZZ71BQbigKK8.crl (hash: Or8SjK8/8/u/vSe5iIdvqGBMvIOMecEvfwsJ4XvF0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ff:10:a4:07:d5:93:8a:25:7d:56:9b:0f:d5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Validity
Not Before: Aug 23 05:01:55 2025 GMT
Not After : Aug 24 05:01:55 2025 GMT
Subject: CN=1226b1d55d0c34ec0c7f84898e48e77ff564d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:61:67:ea:3d:dc:55:6c:43:7d:9f:e7:24:
07:8f:c0:81:b4:42:96:57:91:00:71:c7:b2:26:41:
9c:23:3a:55:d2:15:32:44:7b:55:c5:1f:d3:c0:73:
da:b1:e1:e7:81:9b:11:fd:3e:85:88:d3:7a:77:45:
71:17:bf:5a:9a:f7:eb:b5:d2:38:bc:c1:ed:08:9a:
3c:43:ab:ad:83:87:5f:cd:f2:f9:2b:43:24:50:15:
b4:79:92:67:66:b7:1b:d2:bb:d7:92:23:cc:3d:d7:
22:d0:20:b8:97:db:bb:7e:47:39:c1:3d:56:86:40:
09:a8:12:df:74:69:75:05:3a:8f:12:26:69:20:da:
2b:fe:3a:fe:55:c1:5e:89:25:58:cb:00:61:c4:cc:
04:24:0f:ee:2f:95:8c:4b:b8:30:c9:0e:bc:82:bd:
aa:6a:ed:f9:d6:bb:7d:14:00:9d:9e:41:f2:e5:8d:
75:55:ae:52:37:72:7c:5d:fa:0b:28:74:b3:91:4b:
e8:c9:53:28:5d:c4:41:b1:91:8f:36:4e:e9:53:38:
0a:3f:84:43:d7:6f:fe:79:4f:b3:dd:a4:b1:b6:0d:
c0:11:9e:a1:18:ee:f1:a4:ea:24:6d:50:6d:79:b0:
a9:d8:ba:3f:90:16:a1:20:7c:57:7e:30:1e:92:de:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:B1:D5:5D:0C:34:EC:0C:7F:84:89:8E:48:E7:7F:F5:64:D2:EA
X509v3 Authority Key Identifier:
keyid:43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d7:f8:45:2a:4d:2c:a2:ce:5a:0b:21:4a:69:70:b2:67:4b:
a7:69:8f:80:4c:54:c5:cd:c6:01:1e:76:f2:e2:9b:dc:73:e5:
0a:1b:88:93:b0:ca:be:d5:62:ae:1a:01:13:85:ee:66:3c:ef:
e3:57:3b:d2:34:8f:21:18:a6:d8:b3:d8:d0:86:36:5c:ba:03:
10:2d:64:f7:47:f7:05:3d:8b:67:5b:4e:c3:e1:55:5e:4f:ef:
9b:25:f7:9a:54:91:b1:92:e0:d1:6b:f1:8a:37:27:c6:f0:24:
28:a7:c3:3b:a2:d5:9b:45:21:21:14:32:34:74:ca:6b:94:63:
03:b4:80:6c:1b:ec:57:7a:78:3a:9f:33:37:d7:38:d8:cd:16:
0c:47:60:09:90:59:af:e7:e7:45:af:eb:7e:9f:e1:c2:31:82:
de:33:0f:0d:d0:7a:c7:19:2f:08:69:0c:71:04:ed:46:b5:4d:
e9:19:39:13:81:54:1c:45:06:dd:47:69:a4:20:4d:c7:32:1a:
9b:9a:32:3e:5a:ad:2f:7c:70:f3:ef:4f:32:ca:5e:ca:6a:fb:
3f:c7:02:a1:92:ad:14:96:4f:05:b8:3b:85:af:2d:17:19:12:
ea:da:f4:0e:84:0f:0f:49:74:a1:b5:cd:5c:59:0f:77:66:1c:
96:f1:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:00 2025 by rpki-client