Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
File: QpeJWSkM6bssG1thREOEQVta-tY.mft (raw, json)
Hash identifier: RqBNtsyjNgojdi47KlvXRpHx+3DcdpXYwAbHLOttGqs=
Subject key identifier: 75:6C:5A:97:C4:62:8F:8A:27:A7:F6:C3:01:1A:8C:E0:0A:1E:F9:7A
Authority key identifier: 42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
Certificate issuer: /CN=42978959290ce9bb2c1b5b61444384415b5afad6
Certificate serial: 0198D47343E03FADB87E21D45897611C450D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:00 +0000
Manifest this update: Sat 23 Aug 2025 01:03:00 +0000
Manifest next update: Sun 24 Aug 2025 01:03:00 +0000
Files and hashes: 1: QpeJWSkM6bssG1thREOEQVta-tY.crl (hash: GU8QJMcCtCr7pQqR7BkDm0IWqr+VVKvqyU6so8W89hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:43:e0:3f:ad:b8:7e:21:d4:58:97:61:1c:45:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42978959290ce9bb2c1b5b61444384415b5afad6
Validity
Not Before: Aug 23 01:03:00 2025 GMT
Not After : Aug 24 01:03:00 2025 GMT
Subject: CN=756c5a97c4628f8a27a7f6c3011a8ce00a1ef97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:0a:99:6d:00:b6:0c:bb:a8:e4:25:78:fd:
96:9e:b9:ed:34:6e:21:76:cd:e3:c2:22:fc:3a:05:
92:a6:ec:67:6a:ef:74:dc:cf:1a:fe:ee:40:a1:fa:
42:9a:25:29:a5:ea:c0:f0:1a:f3:b5:70:9e:42:a6:
68:94:23:29:f1:cf:97:fc:2c:ab:0e:7c:6f:70:f2:
74:53:19:7d:e0:9e:01:3a:96:04:19:7e:93:ec:2e:
02:f9:ef:d8:5d:80:11:98:0e:30:09:42:ff:af:5d:
d0:4f:e9:29:74:5d:49:04:1e:03:62:16:e5:03:13:
a7:a9:9b:ff:3d:b4:72:91:89:3d:0b:5e:83:2e:76:
97:26:81:1c:04:22:7f:85:16:99:fd:f1:86:85:c7:
5b:9e:72:e0:60:59:ec:e1:f1:f3:d6:2b:be:a7:4f:
d0:4a:8a:b7:85:67:17:a2:cd:06:cd:3c:dd:93:76:
84:1c:6d:53:31:2d:4d:4e:9d:50:c5:8c:e6:66:59:
d9:7f:b9:ee:6a:d7:c4:67:78:cc:52:42:90:20:d2:
de:5f:ac:69:47:fe:42:04:00:b3:43:0f:07:22:8c:
ee:2e:0d:a0:13:e2:97:77:41:a3:f0:27:16:25:5f:
b1:71:b8:97:06:f0:14:f2:38:91:36:34:45:7a:61:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:5A:97:C4:62:8F:8A:27:A7:F6:C3:01:1A:8C:E0:0A:1E:F9:7A
X509v3 Authority Key Identifier:
keyid:42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cd:3c:55:02:5b:fc:6c:a3:26:fc:77:d1:ed:d0:51:24:6e:
ba:83:00:be:df:64:d4:d2:3d:ab:7a:67:47:d6:88:72:13:4b:
24:14:38:10:07:76:96:71:15:e5:b5:41:b9:8c:b5:ce:9f:9a:
a6:fe:c8:77:27:4c:c2:d3:19:da:d1:3a:eb:06:5f:36:49:a0:
e6:84:c6:01:02:06:00:5c:de:45:aa:99:2a:04:62:90:82:af:
3f:cb:81:db:23:a3:0a:51:1d:7c:b4:4f:33:36:0e:a1:a2:99:
87:ff:92:fe:17:66:d3:98:d5:83:86:38:12:41:28:6e:44:c8:
09:eb:d6:3f:4a:8d:ff:f1:7e:9e:4e:6c:3a:57:a9:b7:16:61:
d1:11:6f:4b:ad:d4:0e:da:32:2c:46:d1:7d:33:8e:13:8f:05:
29:07:aa:35:4d:f8:a5:71:2c:8d:63:52:76:fc:3a:37:d7:83:
ce:8c:36:b8:5c:86:9a:41:16:4c:db:3f:17:92:57:b1:c0:8d:
78:2c:5d:06:69:7d:08:5d:ed:80:79:3c:60:41:ab:85:7a:48:
2f:df:70:ea:96:fc:83:aa:e9:26:bd:2c:fe:a6:c2:e7:ea:12:
bb:39:bc:cd:7e:75:a5:4d:4d:30:b6:d4:be:8c:6d:ab:29:37:
44:6c:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:31 2025 by rpki-client