Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: rfeC4SMTWleoPaF8HU/UwdbXz+MlZX98TOnmzfmDc9M=
Subject key identifier: C3:21:B1:10:59:9A:6E:43:83:57:84:14:0E:9D:DD:71:0B:B5:47:73
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 0198D472F59FCA812BC0C59684ED0083111E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:40 +0000
Manifest this update: Sat 23 Aug 2025 01:02:40 +0000
Manifest next update: Sun 24 Aug 2025 01:02:40 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: 4+z9fesjq+kIk6nGxZzYMMsqGReliULyVDyRoEPtkDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f5:9f:ca:81:2b:c0:c5:96:84:ed:00:83:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Aug 23 01:02:40 2025 GMT
Not After : Aug 24 01:02:40 2025 GMT
Subject: CN=c321b110599a6e43835784140e9ddd710bb54773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:60:5d:1d:bc:93:a0:80:ed:96:6a:12:f5:
11:f5:9b:30:2f:2b:0c:53:a7:bc:0d:c9:fc:e5:75:
42:b6:da:c3:1a:1c:05:20:7e:6c:64:c8:33:1b:4f:
57:4a:90:f6:12:09:18:8f:51:b7:ed:be:81:ac:27:
b7:34:d0:ec:d8:1e:c4:31:0f:e0:fa:21:f3:df:c1:
b3:2e:f0:8e:72:2a:53:fc:c8:46:32:0e:4c:8f:30:
72:46:e8:d9:68:9f:34:a6:d9:56:aa:80:f8:6b:c8:
70:ea:5c:1d:dc:8d:61:61:62:bb:db:04:3e:77:c1:
13:ba:bd:a2:4f:98:44:7e:ff:74:39:29:cd:b1:c4:
a4:6e:b6:6b:6a:7f:2f:a9:18:02:a9:4d:fd:36:55:
c1:d3:f2:30:f1:bb:32:bc:7f:36:86:78:f2:b3:f1:
01:7f:25:eb:73:ff:c9:6c:0d:61:ec:06:0b:83:fb:
bb:ac:db:fc:d7:2f:b8:2e:69:44:c4:5c:fd:24:e0:
26:88:12:8c:6a:ed:ed:00:55:f6:5f:cd:eb:f5:88:
4f:4c:3c:27:6b:f8:2a:c7:ba:78:34:b0:0f:db:c5:
c3:9b:43:02:90:7a:50:3c:c2:78:a3:12:80:1f:b3:
ef:90:62:e5:a9:7a:22:15:5d:a6:21:6e:12:40:d1:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:B1:10:59:9A:6E:43:83:57:84:14:0E:9D:DD:71:0B:B5:47:73
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1f:41:88:97:45:0b:7a:52:4b:28:d3:a1:07:08:18:13:46:
55:d0:ad:a2:2d:85:a6:bc:6b:06:d4:c7:7d:5f:c7:d9:9c:1d:
ea:23:13:ee:c9:13:2c:57:09:53:27:99:6f:ce:ec:33:e0:0f:
db:ee:16:23:6e:c2:a6:bd:2c:33:2c:2e:b9:c2:41:91:36:cb:
b8:46:59:ba:83:c5:ac:47:9c:cd:28:d4:1b:3a:04:35:02:ce:
0e:e4:a1:96:ba:00:63:c5:46:b9:ea:82:69:39:f5:6b:ca:5d:
aa:be:2d:06:00:51:80:b3:0c:59:0e:f8:5f:c7:7e:fa:74:2c:
60:6e:cd:87:c4:eb:88:15:23:d5:fd:b8:f5:ed:a8:ba:de:41:
15:90:6a:9c:11:e8:76:c5:54:a2:48:e4:9e:a6:2d:0e:9c:39:
97:c4:aa:31:71:92:e0:ae:e5:26:10:c3:7c:68:9c:fe:61:3e:
9d:84:31:87:f9:fc:3b:e0:a7:00:e2:e0:40:96:6a:ec:1e:7d:
9b:0b:62:09:bf:b3:63:86:63:32:28:e5:4b:98:aa:8b:cf:f3:
97:17:8c:1a:1f:22:a5:57:27:12:3d:79:72:ff:75:e0:69:4e:
01:5f:81:0c:46:68:56:ec:ab:dd:86:3f:4e:ed:10:c7:7a:43:
7d:19:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:06 2025 by rpki-client