Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
File: q7lESdTSRidxdzvAimJFB9pRKw0.mft (raw, json)
Hash identifier: qdjwfg5umfy4pRsPusS7gERWjLUuNMzMug7YpcLB5mY=
Subject key identifier: 9D:44:0D:64:98:5A:D2:18:D9:BF:C3:05:E9:1B:20:7C:82:2A:64:58
Authority key identifier: AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Certificate issuer: /CN=abb94449d4d2462771773bc08a624507da512b0d
Certificate serial: 0198D73B7ED2AB6EEB199473AEEC33C45C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
Manifest number: 072F
Signing time: Sat 23 Aug 2025 14:00:57 +0000
Manifest this update: Sat 23 Aug 2025 14:00:57 +0000
Manifest next update: Sun 24 Aug 2025 14:00:57 +0000
Files and hashes: 1: q7lESdTSRidxdzvAimJFB9pRKw0.crl (hash: v9a0S1DcugQtvKQ9UlQUshYbZGMvtbQuz4xvso9aGxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7e:d2:ab:6e:eb:19:94:73:ae:ec:33:c4:5c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb94449d4d2462771773bc08a624507da512b0d
Validity
Not Before: Aug 23 14:00:57 2025 GMT
Not After : Aug 24 14:00:57 2025 GMT
Subject: CN=9d440d64985ad218d9bfc305e91b207c822a6458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:b0:a1:ab:7e:40:9d:09:81:e5:78:26:26:
12:29:7b:de:4d:32:13:49:6c:95:b7:ac:a5:65:b8:
d7:4c:43:cf:9b:a4:bb:49:4a:7b:3d:f1:64:73:95:
30:c9:98:d9:78:0a:ba:05:d9:e1:72:18:67:b4:de:
7d:7d:87:18:c6:dc:b5:f8:83:13:c7:92:15:84:5a:
00:dc:20:63:f8:96:a2:28:a6:1f:63:0f:6b:30:30:
0c:49:ef:16:9e:c6:80:59:50:cc:e2:ad:41:8f:a0:
e1:b8:11:c7:c4:37:fa:89:01:95:ef:01:b7:b2:b9:
2d:2f:82:34:49:e9:34:1c:a0:cc:1b:a4:10:69:0e:
85:a8:6b:90:9c:8a:c2:58:bc:e0:a5:7e:33:73:b3:
6e:b0:7c:14:dd:3b:05:57:f5:88:09:43:4d:c3:ad:
6a:61:9d:84:10:4e:ab:7e:b2:f6:96:d3:a3:9c:90:
31:87:8f:8a:71:a9:bb:54:12:30:67:e1:f2:a8:67:
cc:eb:40:3e:ea:9b:9b:26:9c:0f:1c:bb:5a:3a:89:
f9:f5:79:d1:b9:66:41:84:6a:3f:f0:d2:3c:3e:a4:
21:c5:14:89:b7:ba:15:d4:97:2a:21:ab:51:f0:fb:
3f:15:a9:b5:66:be:b6:66:14:88:c4:69:e5:a5:a7:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:44:0D:64:98:5A:D2:18:D9:BF:C3:05:E9:1B:20:7C:82:2A:64:58
X509v3 Authority Key Identifier:
keyid:AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:19:90:83:b4:d0:7a:54:59:cb:20:91:9d:da:bc:1b:17:
d9:66:f3:64:b3:91:cc:29:d9:1a:68:17:f0:04:1d:81:3e:a1:
6b:cb:f4:55:b3:aa:89:f8:c0:f0:79:9a:b5:39:ba:9a:e2:7b:
94:76:22:92:73:6b:fe:4b:cc:e7:08:dc:29:e6:df:9b:56:8e:
31:14:97:ba:74:56:69:e8:f3:cb:e0:02:26:01:05:2e:11:36:
af:7c:68:10:31:c8:dc:88:69:14:82:65:71:8d:63:20:6c:8a:
14:26:2c:b4:b0:1e:bc:2c:58:cb:89:b3:41:af:8b:22:f7:3c:
6c:71:0f:50:56:a8:05:a6:4b:8a:5a:87:a8:2c:2a:6c:8d:21:
a9:2f:82:c0:29:83:a1:6c:a5:90:0e:00:67:5a:b9:63:c2:c2:
2a:47:bd:fc:ad:c1:a6:ca:e8:ad:83:d7:c1:1a:ae:05:bf:e3:
57:59:22:e3:d2:8e:2e:8c:27:89:a6:26:ed:2d:76:b0:f8:a0:
30:62:f1:a1:8c:f6:a9:64:94:9d:0c:8d:b5:85:f6:ac:87:8d:
0c:01:6e:72:e7:ff:1e:53:6b:35:f7:cd:68:7f:85:75:62:69:
3d:90:ba:fb:ad:25:27:86:dc:38:af:13:27:e7:3f:00:30:fb:
e1:e0:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:12:38 2025 by rpki-client