Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: sJtRa2aDlTn9QJmzqmelWbZRYbieT/JooijPivAbQyU=
Subject key identifier: EC:8A:94:14:93:A8:45:43:07:05:77:F3:A2:8E:C2:A7:7D:E7:D8:54
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 0197B58E0210A372632FE2F9DDE1B00FE799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0F30
Signing time: Sat 28 Jun 2025 08:01:12 +0000
Manifest this update: Sat 28 Jun 2025 08:01:12 +0000
Manifest next update: Sun 29 Jun 2025 08:01:12 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: kxiW6Wi0xH/FtHZFxtMAhDmQHakuPVh21uyfWo2ZbnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:02:10:a3:72:63:2f:e2:f9:dd:e1:b0:0f:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Jun 28 08:01:12 2025 GMT
Not After : Jun 29 08:01:12 2025 GMT
Subject: CN=ec8a941493a84543070577f3a28ec2a77de7d854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:b7:63:1b:9d:e0:cc:62:16:2b:2d:95:86:
c2:55:f7:b1:4c:17:0a:8d:86:2d:53:f0:aa:2e:59:
b0:f7:f3:57:7f:51:d8:23:92:7e:dd:5a:55:5d:60:
71:52:4e:2c:8d:68:a3:9e:f9:f9:29:8b:a6:91:d2:
52:bb:d1:0e:0d:c1:79:a2:a1:59:0d:f5:0d:9f:ff:
00:9a:3f:06:c9:4a:3d:85:75:61:38:9f:c8:9c:fc:
68:7a:22:e1:7f:71:3a:47:2e:95:c7:f7:7c:f6:43:
b7:ba:1a:57:eb:be:cc:87:f2:b1:e2:61:55:61:a6:
e2:f2:03:b3:5b:bc:f9:42:77:6f:c8:68:33:b2:b1:
69:74:67:71:f7:f1:3e:5b:a5:0f:40:49:ce:fb:cc:
d6:ad:6f:c7:75:36:fd:de:5e:34:0a:c1:61:b0:be:
74:6c:36:42:30:14:b1:bf:d9:6d:09:54:7c:aa:b7:
9c:f9:07:9a:d8:ea:27:a5:24:54:63:d7:c3:88:cf:
f5:b3:09:96:a3:33:f6:66:72:09:8b:ce:97:d8:d7:
c3:7f:aa:93:70:9d:0d:ea:6a:21:d9:78:27:e4:fc:
9b:59:ee:38:83:5d:29:07:1b:c9:d0:51:ee:97:14:
06:e9:2b:1b:79:6b:f3:4a:eb:c9:e8:72:10:01:96:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:94:14:93:A8:45:43:07:05:77:F3:A2:8E:C2:A7:7D:E7:D8:54
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ea:e4:dc:b0:97:0d:7a:f0:cb:08:4c:f2:dc:bd:24:f3:d7:
fd:29:2c:79:7b:04:14:03:83:26:72:14:ad:93:c3:68:72:a5:
bd:1a:f3:14:8d:f8:0b:7a:89:b4:f1:54:46:f3:80:0b:c8:38:
2d:ee:1f:61:1d:79:52:57:8d:20:17:a6:c0:c9:5c:d6:e2:56:
ca:20:f9:08:21:b2:13:10:ba:23:f9:5d:73:bb:8e:fb:f0:92:
fc:77:59:0b:12:5c:e7:92:34:51:ec:dd:07:58:46:07:fe:53:
4c:d8:09:09:ef:4f:d0:da:1d:4d:6f:b6:25:56:9c:ee:6b:c5:
df:ea:d7:77:16:7c:99:8e:fb:9d:4c:fb:0f:eb:79:c9:86:a0:
3c:a9:f5:1d:7f:3d:a6:2f:97:ea:5e:73:99:8f:ad:70:f2:f4:
7a:bb:99:70:a1:69:00:df:5f:35:19:14:f5:4d:f1:8d:b7:9f:
bd:e3:45:e8:2c:7a:71:80:f8:27:38:e8:6c:0e:78:4a:b9:aa:
e3:de:2a:35:87:28:8c:31:27:3d:8d:e7:92:7a:69:af:e7:27:
32:fc:53:36:29:21:79:06:b0:2d:cd:78:6c:e3:e2:35:93:c3:
6f:c5:28:3d:3c:13:c0:ba:db:87:4a:51:aa:20:b4:d7:62:54:
b8:ad:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:36 2025 by rpki-client