Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: tvmO4GAyiYKXVObsv+s2vIxo9GVcxTWKycSNaK63FHY=
Subject key identifier: 26:E5:1C:E5:3D:9A:58:17:66:A0:B2:96:5C:37:0E:35:78:6E:AC:EB
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 0198D5BBE3AEC9D01005ABDD35F3AA139EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 0406
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: QoSj/dkqTNUILOn6fYetR1Yef5e8W8mOk4pMRLaSJNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e3:ae:c9:d0:10:05:ab:dd:35:f3:aa:13:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=26e51ce53d9a581766a0b2965c370e35786eaceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:ce:dd:25:a0:bd:24:d2:55:8c:cc:6b:c8:
d2:92:d6:ac:2c:f5:30:5e:35:29:27:39:5f:db:78:
15:35:6d:54:b1:0f:c1:3d:e0:8d:61:b5:08:45:47:
8c:0d:73:8f:ed:90:7a:5a:30:16:26:7f:98:ee:5b:
17:e1:3c:8d:61:2a:19:f7:cc:b7:a6:06:b0:34:70:
de:8b:a9:77:9b:56:d6:70:de:da:93:a7:1d:8f:5d:
32:30:cc:2d:34:a8:21:e6:0a:6a:3e:fc:0c:76:34:
f0:39:04:13:6a:09:ac:d8:c3:f5:46:ef:46:be:ea:
15:7f:f7:17:98:df:f0:a9:12:ad:a0:43:e6:df:b5:
f1:3a:7f:34:20:5f:67:0b:84:1d:e0:98:17:47:01:
2d:3e:32:14:b4:ab:92:55:f5:8c:0c:17:e4:bd:3c:
99:ea:5b:f1:83:fa:51:46:f9:d0:1a:e4:59:5a:65:
1b:7b:b6:12:ca:8d:1a:50:f6:a0:f3:24:3e:df:3b:
60:d8:07:88:8b:ba:ec:c1:ad:50:9d:18:07:ff:a7:
5b:17:db:87:97:97:ff:86:3e:96:49:29:6d:43:2e:
d8:9d:cb:cc:9c:73:66:db:7d:70:75:f5:aa:ae:e5:
36:55:21:c1:43:8f:17:f4:80:12:b8:fe:11:15:df:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:1C:E5:3D:9A:58:17:66:A0:B2:96:5C:37:0E:35:78:6E:AC:EB
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:15:64:b6:89:b7:8d:74:be:dd:c3:45:65:c4:af:c2:c9:96:
48:77:89:4a:3e:03:79:65:ca:76:a0:6a:91:e9:36:16:fe:22:
8a:ae:66:85:b2:9c:d9:3c:0d:e6:91:be:17:cc:36:c3:ae:9e:
21:c7:82:b6:24:da:d8:24:32:6f:3c:f1:c0:bf:ee:17:cc:ca:
ff:47:58:6d:ca:d5:a7:77:75:1e:17:a8:d2:6a:4a:cb:cf:98:
72:73:35:ba:de:fd:91:21:93:91:61:4d:bd:1e:8c:fa:0f:95:
45:10:72:5d:5f:4e:e6:65:eb:a1:a1:d7:a4:34:0d:ad:90:e4:
7d:07:d6:39:4a:6b:ee:e7:6e:a2:98:fb:55:29:b2:0a:74:29:
b2:29:39:17:31:be:bd:4c:08:2e:6f:02:66:c3:e1:62:49:05:
bb:06:25:b2:e7:87:bf:99:be:dd:aa:74:ed:5f:87:22:25:db:
6f:52:b2:fb:79:82:0b:e9:3e:87:44:e6:a2:06:95:c5:5b:1f:
3f:d2:9c:88:0c:9b:2d:45:f2:ca:39:7b:64:cb:c7:ec:ef:f7:
60:fb:d4:13:d9:2a:76:78:76:7f:a4:99:e7:e2:e3:d1:28:cc:
3c:2a:f1:66:ec:59:0b:3d:0c:35:59:55:7a:80:7e:61:d2:63:
6c:6b:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:07 2025 by rpki-client