Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: 7C3R6J4Gf+6X/X1WVk31npodrceBJrs2IluBdgHGA5E=
Subject key identifier: E8:0D:02:BD:A9:2E:75:BE:E4:8E:DE:18:79:5F:82:70:EE:B9:F6:8E
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 0198D5838C59877BC5A8400B91F4D0AC3A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 119C
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: 28/MGP9hIrjFFT5AXcG3QLjO5VbuO09Z5qsgzCUlVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8c:59:87:7b:c5:a8:40:0b:91:f4:d0:ac:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=e80d02bda92e75bee48ede18795f8270eeb9f68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:02:03:83:89:8c:e1:50:ac:e8:10:cc:be:
1b:70:6c:67:69:df:3a:fd:0c:f4:34:96:ea:af:c2:
46:c0:ef:2e:79:4a:a9:20:51:00:3a:6e:59:a0:e2:
26:17:cf:34:33:ae:07:40:d2:6b:79:00:26:04:d7:
5b:ab:01:74:7a:25:c1:44:69:37:ef:8e:ff:75:30:
6d:2a:13:89:3c:ba:97:19:f7:c8:10:b2:d4:69:2b:
ab:8a:f2:3f:47:1e:18:ed:a8:75:52:7b:df:1d:67:
bf:87:2f:b6:74:24:0a:88:43:2d:50:01:ec:c7:46:
3a:83:61:d2:d2:20:70:4c:9d:66:af:8c:c3:4a:5e:
b4:8c:a8:fa:ca:92:f5:24:b7:d1:82:5b:2e:15:ea:
dd:3c:af:03:b9:90:39:99:f9:19:35:69:1a:0d:60:
63:56:f3:99:63:83:e0:48:44:bc:a4:06:19:d1:e7:
d5:ec:16:e0:f4:ed:7d:99:69:dc:e2:cd:1e:33:61:
ca:a8:37:88:c8:32:32:c5:83:62:37:ce:62:54:84:
6a:91:93:34:ee:8a:cd:31:a4:45:b1:75:b6:5d:b0:
14:af:c8:0a:8d:08:1b:c4:ee:91:f6:45:f6:ec:e2:
20:a1:44:c1:b1:b9:65:35:24:96:b6:30:ce:0c:74:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:02:BD:A9:2E:75:BE:E4:8E:DE:18:79:5F:82:70:EE:B9:F6:8E
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b5:1a:9a:11:72:ad:84:74:75:08:42:6b:51:01:a8:f1:0b:
de:5e:05:bf:ef:47:b0:df:61:72:39:7c:b4:98:5a:ed:83:d9:
c0:1a:cf:77:cf:11:87:84:17:0f:cf:44:8f:d5:af:c8:a4:c3:
a4:ad:2c:a0:c8:9a:2e:9e:e2:61:05:bd:19:5b:fd:f6:0a:a9:
47:9e:e7:47:b3:71:60:a0:c7:83:dc:e8:b4:97:4c:f9:f6:0c:
1d:36:4a:3c:7e:1d:a8:09:db:ca:2e:44:9d:ca:bf:a1:fc:d6:
96:08:d1:be:38:c4:b1:24:39:71:94:e5:26:33:ec:8a:84:3c:
6a:83:f0:a9:7a:79:d8:f4:a2:53:5a:f0:e3:00:db:2e:f2:0e:
05:cf:ec:7f:1e:08:5d:cd:5a:4b:74:3d:74:25:ef:be:4c:67:
25:09:d6:a8:40:73:6f:4b:be:71:e4:31:a8:10:99:6b:b0:f3:
6b:54:09:5f:54:f3:17:80:cd:72:f5:e5:08:38:b6:1d:91:0e:
69:5c:40:89:55:1a:d2:31:c9:f0:61:d0:cd:a1:07:d4:cc:8c:
07:e9:84:5e:b0:56:0e:48:b7:73:47:31:a7:23:e8:18:ce:9a:
17:79:ff:a6:fe:a0:30:7e:5c:c6:2d:38:f7:8f:c9:97:01:d6:
bc:cc:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:03 2025 by rpki-client