Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: SRakrLSxCNE/N5VITVF+0livjKkjps/dRFN3eQcgXs0=
Subject key identifier: 7E:2C:5C:34:A2:9D:87:CD:EA:9B:86:B7:B6:3A:43:AA:D5:12:35:22
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 0198D473D47B476FC478817521C57B07FE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 05C8
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: 4BfvhwjZAgOctJUyQ8n1IR9bRCsYKD7yXo97E/oAzQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d4:7b:47:6f:c4:78:81:75:21:c5:7b:07:fe:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=7e2c5c34a29d87cdea9b86b7b63a43aad5123522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:3e:25:77:82:02:2a:2d:2b:59:dd:47:26:
d2:96:3b:72:a3:bb:70:02:5b:12:2a:5a:2e:5e:51:
ca:4d:0b:e1:56:b1:f8:54:61:c8:83:16:b9:c0:6f:
16:41:de:63:ca:a1:40:b3:53:f1:de:31:33:7b:b1:
e0:7a:02:30:1e:b9:7c:6f:86:0b:a2:97:3a:a7:97:
f2:0d:b3:17:20:a4:c1:55:66:b5:51:26:a9:6d:17:
51:87:0b:bd:1c:12:58:89:a3:c0:fd:e1:56:a5:bc:
43:3f:57:7e:d0:88:26:68:db:74:0e:09:59:54:bc:
71:e5:0d:18:4f:83:90:a4:10:b8:26:87:90:83:dc:
8e:4c:dd:37:ad:7e:a5:ea:f2:0c:ca:7d:ed:c9:75:
df:be:8d:54:db:75:e9:5c:37:be:76:c4:71:be:c9:
c8:19:fb:19:7c:72:ca:6a:24:f4:2c:0b:5b:fc:97:
2c:95:ac:73:ee:a1:2b:5f:90:a6:ee:87:32:9c:3f:
c2:e4:64:89:42:92:e2:25:ca:0f:a0:51:7b:ed:c4:
bc:b2:13:cd:c9:5f:41:c8:59:75:6a:6e:5c:0d:ed:
c3:1d:07:ec:9e:e3:c4:37:a4:77:a8:f7:34:0e:7b:
e4:9f:62:3f:c6:a5:a5:29:9e:52:cc:ed:49:7c:cb:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:5C:34:A2:9D:87:CD:EA:9B:86:B7:B6:3A:43:AA:D5:12:35:22
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e7:12:03:80:b9:05:82:c3:95:74:73:29:f3:1a:c8:51:47:
f3:9c:b3:3d:a5:a6:a7:48:b6:b5:c7:11:e1:4f:b5:e3:3e:57:
ba:35:c4:aa:16:73:58:53:c4:fd:7c:f7:fe:a2:5b:d3:42:a2:
03:66:13:c2:74:0d:5d:63:84:86:c4:9e:50:97:a9:50:66:29:
f2:4b:d3:2b:a0:d9:be:78:63:cc:19:56:2e:b8:27:db:b4:25:
89:76:23:76:c4:75:9f:7c:57:79:aa:19:58:51:ae:9f:af:92:
0d:9b:37:23:e3:cf:fb:6f:e9:43:2e:c3:0d:59:ff:32:4a:88:
41:4a:68:97:c5:79:37:8f:f1:36:e1:c7:de:1b:eb:b5:e9:82:
1c:66:41:d9:85:39:07:f7:53:d4:66:97:09:0a:f9:26:93:0b:
e4:8a:a3:d5:b1:a1:f7:1c:3a:36:75:cc:09:c7:62:d4:a7:91:
c1:01:1b:84:4e:04:3d:90:fa:c7:58:95:66:22:39:b7:98:c1:
0a:e1:1a:e4:9e:50:5c:51:6a:31:ac:14:05:13:69:fe:99:ff:
86:22:7c:6d:a6:b6:b4:8d:4d:8e:f4:3a:c4:a7:8f:a0:2c:2a:
f3:f5:74:3b:2c:ad:a0:01:8d:6e:00:59:da:5e:dc:13:48:a1:
1d:17:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:29 2025 by rpki-client