Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: OP70JJIlHRIuGawBJ52gqpxcOa3NMVS7oEuTez9v+xA=
Subject key identifier: 3D:6B:EB:52:4A:DD:58:AA:2C:B0:33:B9:2A:2B:F9:27:EF:61:03:DA
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 019A00A306326387271BC79FB10FBAB3E394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 1060
Signing time: Mon 20 Oct 2025 08:01:15 +0000
Manifest this update: Mon 20 Oct 2025 08:01:15 +0000
Manifest next update: Tue 21 Oct 2025 08:01:15 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: BwlV2XN4JjTPLlNX2luS9H/BJudCFnRbXYwznsqAhn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:06:32:63:87:27:1b:c7:9f:b1:0f:ba:b3:e3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Oct 20 08:01:15 2025 GMT
Not After : Oct 21 08:01:15 2025 GMT
Subject: CN=3d6beb524add58aa2cb033b92a2bf927ef6103da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:04:34:95:8b:33:ab:44:6a:d5:70:9e:b1:
f6:10:4f:a5:5b:80:28:54:0e:24:f7:7a:6e:6a:3e:
d7:81:0c:8e:c1:3a:42:71:7e:ef:0c:8e:7b:28:16:
f0:94:05:56:23:3a:92:5a:93:77:3e:08:7b:0b:ae:
6f:a5:1e:93:6e:dd:d1:ed:0f:23:12:bb:ef:02:b3:
37:ec:e5:de:2d:54:2d:08:90:df:a3:ae:fd:2e:b3:
70:48:b4:87:6c:30:d5:0c:ca:c4:b6:84:43:f1:38:
5b:e1:31:8d:2e:64:a5:66:f5:b1:fa:66:f5:45:5b:
ac:eb:02:8c:ab:eb:1d:69:91:db:9e:9a:37:54:d7:
99:c5:d3:fa:f5:9f:8a:2b:b8:58:01:cb:57:a4:1e:
f9:62:91:44:b5:28:d6:fc:01:2f:ff:a7:65:f2:d7:
cb:53:77:2a:c2:45:6c:21:bb:3d:31:4d:2a:39:ca:
13:f8:44:f5:d3:bc:df:67:98:b1:06:00:a9:ac:e3:
de:da:25:93:08:ee:17:39:b9:ed:84:34:01:dc:84:
9a:72:81:8f:4c:57:bf:ce:35:df:4e:20:5d:99:dc:
d7:97:8f:d7:79:fa:b1:e5:45:69:f3:d5:e8:6e:c7:
e8:de:64:89:8f:3e:db:36:bd:b5:e4:62:65:86:1e:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:EB:52:4A:DD:58:AA:2C:B0:33:B9:2A:2B:F9:27:EF:61:03:DA
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a8:cb:0a:ba:a5:89:41:91:c7:eb:a9:51:e8:43:7d:16:09:
0c:2f:db:68:cf:0c:8e:e8:fe:9e:4c:30:3b:02:44:a4:f4:db:
c4:5d:9a:dc:88:c5:e7:39:43:d7:a0:5d:5d:20:77:8e:59:2c:
e7:f8:e2:18:3a:14:71:5a:04:75:39:0d:21:ee:8b:77:b9:27:
04:c1:33:5c:db:32:59:00:25:f9:d8:0e:61:c6:ad:06:66:3b:
c3:b8:c8:5c:ee:d9:4c:e2:aa:90:fa:f7:a4:c0:c5:25:b1:95:
9d:8e:68:40:43:e9:21:62:af:d9:43:77:eb:96:f1:e2:8d:62:
03:64:19:cb:35:fc:9d:f6:4a:5d:a3:e1:e6:01:69:5d:bf:ec:
69:a6:f1:de:f8:ca:8d:5e:f4:82:b6:fb:68:cb:45:08:bc:f1:
dd:50:fe:6b:9f:67:60:c0:86:f6:7f:6e:d1:69:fb:ca:4e:e0:
41:35:2f:f5:cc:cb:da:53:e5:bb:6e:fb:fd:d7:d8:ef:c3:0b:
2d:0b:35:54:52:30:09:92:ed:17:76:3b:95:f0:f0:24:91:6e:
53:5f:f6:5a:a8:05:dc:c1:17:f4:6f:eb:07:9f:6d:ec:e5:e8:
27:79:7e:ee:e8:ad:b5:df:3c:87:c2:47:fe:b6:10:67:31:84:
85:23:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:00 2025 by rpki-client