Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: gsdLXKNzPibtpZTmg1lGiiyuZVZcdCQcnwHrQbsONwk=
Subject key identifier: 2D:71:ED:7A:CB:B0:A2:36:7A:4D:7F:3A:6D:1E:DC:63:AD:77:BA:D0
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 0198D5F14028C33E47CBE9FBC48EFD98D981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 042E
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: ZTmxIz7eJF+/A0+ebZEex3bN4pki3NpcIqV3OEPkrDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:40:28:c3:3e:47:cb:e9:fb:c4:8e:fd:98:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=2d71ed7acbb0a2367a4d7f3a6d1edc63ad77bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:22:8e:d5:7d:cb:8a:7e:c7:05:8d:37:2b:
d8:91:72:60:15:cb:b1:f6:bd:b3:26:cf:3a:34:50:
a7:89:ab:ac:e5:8a:12:ba:d9:39:27:02:1a:e3:a5:
79:08:9e:08:23:b6:86:9d:0b:a7:37:87:21:bc:c6:
30:60:60:66:bd:c4:cc:9b:19:fe:43:92:a9:e2:a1:
80:c2:a1:2d:b4:3b:31:b7:f8:24:b0:b2:ca:e4:46:
50:82:d9:b3:64:84:61:f6:91:14:48:68:40:1d:ad:
fa:02:f1:bb:17:db:ca:a7:78:f3:aa:2e:1c:6a:73:
ea:e6:18:48:05:96:27:c0:02:1d:3c:1d:ad:84:2a:
c1:ae:98:ef:36:56:83:4a:8c:65:f2:84:c0:87:a9:
45:aa:6c:a1:c9:00:c8:01:12:c4:e9:5f:74:b8:b2:
13:17:34:34:40:44:bf:da:88:42:46:c7:20:67:e8:
96:3b:2d:fb:f1:b0:a7:f8:ed:d8:e1:f7:6c:45:b0:
e2:38:db:3d:9b:c3:1d:6c:f4:9c:b8:f1:77:2b:20:
98:2a:03:57:3e:f2:f8:d3:40:37:22:d4:03:57:32:
b4:a8:bb:e4:87:98:14:e0:42:f9:b8:6a:2d:09:ab:
75:6a:7e:35:63:06:50:f8:b5:74:29:11:a5:33:39:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:ED:7A:CB:B0:A2:36:7A:4D:7F:3A:6D:1E:DC:63:AD:77:BA:D0
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:82:f4:8c:40:83:a2:5d:2d:03:70:bc:91:d9:36:a7:0c:
2e:0d:d0:4c:5b:00:58:af:70:04:05:23:8a:a0:96:93:59:0b:
49:c9:48:8c:78:67:68:50:01:2b:07:19:ee:01:5f:48:b9:05:
82:9c:fa:7d:58:8f:6d:0b:1d:0a:39:da:35:cb:39:25:b7:34:
8f:2c:59:26:28:73:f3:70:32:45:22:46:12:36:73:2e:db:bf:
cc:09:86:0a:73:c6:6d:86:fc:c7:12:1f:93:f1:27:5b:d7:be:
33:21:10:41:a9:97:e0:7c:12:07:f4:56:ae:6e:39:ae:bd:1e:
a4:2a:ac:17:41:29:52:4f:dc:77:d6:41:cf:9a:2e:c6:0d:6d:
39:9e:3a:26:fa:57:29:3d:6b:22:eb:23:84:cb:3b:fe:66:43:
8f:42:be:e9:6f:7e:ec:07:21:fe:92:52:c8:d0:56:24:bc:04:
7b:70:41:d1:7a:ed:d3:d8:d2:59:8d:00:12:d2:2d:42:2d:60:
60:ab:c9:86:ae:91:10:68:b5:22:58:a3:b7:cc:97:cc:f0:e5:
37:44:a9:cd:0e:ce:b8:56:da:bc:8e:23:08:95:42:8d:f9:82:
f1:13:bf:e3:65:cb:be:9a:0a:1b:e5:e0:27:a8:76:a2:b0:f0:
7c:e3:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:56:50 2025 by rpki-client