Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File: QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier: UvO277jcx2uCNuce6ot4uw4DJ7x0PM2lXD/RI2z77Ro=
Subject key identifier: DF:00:4A:99:28:74:1F:8C:6D:B0:21:26:C0:2B:2F:86:7A:C6:C7:00
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer: /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial: 0198D515DA91C82E3BAB32C9C4D575D8EB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number: 04DE
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: MrKSbI/RmDygH1ULHjlzZCI1+noRqZibHOF5FaAhD5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:da:91:c8:2e:3b:ab:32:c9:c4:d5:75:d8:eb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=df004a9928741f8c6db02126c02b2f867ac6c700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:07:46:7a:b3:87:bc:6b:5b:44:62:85:7e:
46:18:2e:46:50:c9:82:86:91:14:82:53:4e:59:95:
e2:ca:a0:d4:d3:7d:0d:09:9a:3e:5a:7b:f2:bf:70:
88:30:de:02:3c:61:b1:d9:ed:dc:0e:c0:37:1d:84:
b7:cc:17:b0:b9:4b:fd:c9:3f:e3:63:7e:7c:97:45:
fa:16:71:4f:58:b7:a6:d3:90:ff:01:93:9f:bc:4e:
c0:ca:01:12:50:d1:e9:5b:01:39:4a:d5:c1:50:1e:
9a:b3:b4:eb:7a:69:0f:bb:67:6f:89:09:d8:3c:a0:
e2:2c:93:49:0b:44:27:46:95:73:6f:8b:86:ce:4d:
f1:b7:35:4c:c7:39:4a:9e:de:75:07:35:60:b9:d7:
8f:3e:ce:44:87:68:fc:cc:03:aa:5b:d0:bb:ac:7c:
70:ef:ef:90:fe:6d:f7:cd:7a:4b:45:2b:87:63:2d:
6c:3a:f4:c2:b5:ab:2a:50:cf:49:e0:a4:11:e9:0d:
39:07:2b:da:61:2e:c5:8f:a5:b8:89:df:1b:59:c7:
7c:e3:fd:33:80:22:d2:c8:9e:21:1e:39:88:ac:e9:
bb:08:ea:66:0a:9f:58:1e:c5:26:d4:42:90:71:9a:
ec:d8:df:1d:10:26:47:ab:ab:2b:11:ca:7a:04:93:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:4A:99:28:74:1F:8C:6D:B0:21:26:C0:2B:2F:86:7A:C6:C7:00
X509v3 Authority Key Identifier:
keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c9:ff:92:14:d4:08:25:5f:36:b9:cd:cd:37:a3:62:02:c2:
2f:33:75:68:4b:91:6b:b8:6f:27:27:3a:d1:21:69:b0:72:2f:
ca:8e:b0:6f:8d:1d:24:84:2f:af:39:a7:38:3d:93:04:1b:1e:
05:dd:19:8e:ab:11:66:4a:13:85:90:16:a5:6a:5c:df:7a:55:
e1:13:70:68:d9:a1:12:42:07:85:49:2c:51:2d:bd:4f:11:f0:
b3:50:c4:c0:53:50:47:cc:eb:49:50:f4:d9:20:af:24:a0:a7:
31:19:d1:9a:88:08:ed:82:4e:47:67:e1:da:c0:db:da:ad:ab:
c2:3a:1c:c2:b6:ce:59:7c:1a:22:bb:95:2d:eb:36:9b:75:f6:
b9:e4:02:65:ae:9f:69:04:dd:91:07:4e:d2:db:10:d6:16:f8:
9c:c9:c0:9d:b6:8d:4e:b5:22:d1:bb:5c:2b:78:ca:61:dd:d8:
89:77:30:80:a6:da:b0:ac:76:d2:23:84:8e:cb:da:5f:f5:b7:
e1:79:6b:f4:1e:fe:d3:91:3a:7e:85:78:0b:1e:40:e2:79:b3:
c5:1c:95:af:ac:bc:e6:8b:85:00:07:9b:0c:be:c8:7d:20:07:
d4:70:6c:73:a1:42:c8:d0:52:aa:30:95:56:0c:2c:a7:2d:0f:
05:7c:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:56 2025 by rpki-client