Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: xcL2whcv3VXMrbGxVYC7fRPO8mYgKgK5mHYsgimkVUM=
Subject key identifier: E3:7F:09:91:F7:9C:6E:8A:FD:F5:9C:73:04:2E:31:C5:4E:4E:AB:1C
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 0199FD34736D66D0EAD2949D98666E805311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 04C7
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: m3DswuNPgE7jtUx1rGCAGTw0b8khfqJrZ/EGMmvbOzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:73:6d:66:d0:ea:d2:94:9d:98:66:6e:80:53:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=e37f0991f79c6e8afdf59c73042e31c54e4eab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:e7:ea:96:b7:c5:16:2c:0b:80:9d:e4:9c:
d9:ab:c0:3f:11:fa:b1:a7:c2:90:28:4a:39:ed:58:
39:eb:6e:c6:ed:47:80:17:03:ea:89:82:c8:f3:b9:
3c:dd:89:d1:c5:11:8b:29:be:44:38:69:9b:a2:57:
5e:75:95:6b:38:4f:8b:ad:54:01:aa:94:ac:db:fc:
5b:69:50:f6:d1:c6:16:89:3c:3a:75:6c:00:63:d0:
51:14:15:01:1f:d8:09:5f:12:f4:99:9f:ab:c1:d3:
98:5f:1c:8d:eb:77:dd:02:d2:dc:44:9a:c6:a7:e5:
eb:9b:21:84:13:da:57:69:ed:bd:8f:de:06:d5:92:
40:ec:d9:6f:6c:4e:e5:da:a8:28:9a:b3:18:93:87:
88:c6:99:c9:ee:e3:05:52:2c:c8:80:15:4a:a2:0a:
77:63:8b:ca:ae:78:63:78:45:1d:5e:86:8d:7e:82:
2f:9e:17:3a:2d:87:3d:16:ca:46:9d:c3:7f:8e:da:
8d:d6:61:e4:57:0d:1d:ab:11:21:80:20:f7:8d:bb:
cd:76:e7:86:f4:d4:81:74:15:41:a5:77:4e:4f:71:
08:81:ba:ca:45:ec:c3:dc:74:10:3e:a5:90:98:3f:
74:e4:e8:06:86:99:06:ac:86:b3:c9:9f:35:c9:56:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:09:91:F7:9C:6E:8A:FD:F5:9C:73:04:2E:31:C5:4E:4E:AB:1C
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:78:2a:82:93:0b:45:17:9c:46:f2:c5:d0:8a:1e:12:51:
4d:76:1a:86:0e:4d:89:33:7c:70:fe:59:06:5d:5c:8c:6e:2b:
27:52:a2:ee:7b:7e:27:20:82:e1:02:ed:2c:f8:0d:43:de:d4:
29:e1:69:58:31:57:18:03:cf:75:70:77:87:5e:22:5f:a7:32:
3a:28:7f:0c:ad:9b:b9:97:6a:5f:8e:92:56:1f:4a:0b:c8:1e:
9f:3b:89:a8:9b:f8:04:db:55:04:f6:30:d4:e1:29:e5:14:9d:
f7:22:c3:b7:e0:d3:a2:a8:5e:2c:ff:42:a9:c5:01:4d:23:ee:
ee:0b:d0:f1:df:24:eb:2e:a3:12:45:84:0d:70:e1:e4:09:f6:
95:f9:78:a5:13:f8:74:60:e0:46:37:c8:3b:5c:8c:33:69:3b:
16:56:2e:1e:c4:68:77:e1:33:62:10:47:d4:5b:67:6e:d8:5e:
d7:94:60:38:b2:89:ae:bf:9e:0a:c4:93:ad:77:16:de:a9:5d:
ad:43:2f:16:42:4d:bb:9c:ce:c5:3e:1b:a1:a1:99:78:09:72:
4d:df:70:bd:74:a1:21:48:55:da:21:e4:03:08:4e:7a:c7:b0:
22:41:02:96:36:7f:5d:e4:c5:ab:9b:bf:e7:84:e2:c2:04:0d:
88:22:0e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:32 2025 by rpki-client