Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: XmJgy+RJFFmRlFFemdvpS1b5wKT7g0QiKPRUDSEuofo=
Subject key identifier: C5:03:26:4E:73:2F:F4:8F:89:CC:11:04:25:F2:4B:C4:AD:65:39:0C
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 0197C56F31CCF0FB0D0F949E23685FEF25CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 0899
Signing time: Tue 01 Jul 2025 10:01:28 +0000
Manifest this update: Tue 01 Jul 2025 10:01:28 +0000
Manifest next update: Wed 02 Jul 2025 10:01:28 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: OGOvs/fSLKPkSlTzuK1ylPuXiKsOFggdePLrkwOrQik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:31:cc:f0:fb:0d:0f:94:9e:23:68:5f:ef:25:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Jul 1 10:01:28 2025 GMT
Not After : Jul 2 10:01:28 2025 GMT
Subject: CN=c503264e732ff48f89cc110425f24bc4ad65390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:aa:e5:d6:6f:18:27:4d:8b:84:b2:b8:23:
dd:02:40:fb:7d:87:12:b6:83:4c:ae:aa:35:82:cf:
fe:b7:44:47:88:dc:aa:ae:f1:04:60:d1:f7:0d:bc:
b0:61:43:b4:5d:f4:e1:5e:0d:46:4b:83:ed:da:7e:
a2:23:67:13:b1:73:97:da:e5:1f:89:a0:c5:9f:4c:
cc:95:7d:ce:d7:b8:20:33:cd:16:f6:23:d7:e3:f5:
41:60:ee:eb:bc:05:97:9a:16:d6:85:61:9f:00:51:
44:75:74:0e:c7:bf:12:39:ea:9a:bb:34:52:a0:f3:
dd:a7:8c:ad:3f:bb:24:07:5c:5d:b5:40:e7:34:d8:
3b:5a:a6:c4:85:5b:1f:d9:be:ff:24:2b:34:3a:6a:
13:3a:20:ca:5d:1a:dc:ec:9b:74:ce:d4:91:55:a4:
c1:be:fa:fc:ee:7f:a7:ca:18:b0:00:ca:44:17:89:
51:c6:f1:89:4c:6f:73:c3:db:88:55:7b:6f:e8:74:
a5:13:1b:9f:f5:a7:c5:80:e7:61:50:47:47:34:50:
61:21:cc:77:12:32:44:7c:03:a4:ca:3e:53:61:84:
1a:20:38:04:bc:9a:89:1e:7f:be:39:4a:ff:db:20:
7f:e5:79:b7:0e:3f:38:ee:c4:0e:35:d1:71:73:04:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:26:4E:73:2F:F4:8F:89:CC:11:04:25:F2:4B:C4:AD:65:39:0C
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fe:a3:87:07:77:a4:b5:9d:33:68:ae:5f:b4:f0:2c:2c:67:
a6:99:38:47:04:84:1a:11:a5:00:82:49:03:a0:af:5b:37:56:
80:57:25:a6:41:ce:d1:57:66:4b:6a:dd:c2:28:a7:77:9a:30:
9a:21:c9:06:b0:50:3a:60:62:da:c5:54:92:e2:00:92:83:c2:
b6:c8:0d:61:63:67:01:29:c6:1b:b8:7d:88:2c:da:da:c2:9b:
e7:64:a2:06:c7:03:a9:6e:69:fe:f0:91:2d:5c:39:c7:f0:95:
bc:4f:d8:e1:c2:ae:68:a0:e7:2d:42:5e:79:47:6e:d4:56:77:
6e:2a:5a:0e:16:f3:a5:81:d7:7a:a9:4f:da:89:ca:a8:82:e8:
d4:83:7a:08:2b:7b:10:eb:cc:b7:f7:b7:c9:66:df:f7:78:ee:
dd:54:b1:37:7e:83:69:e8:03:1b:42:f0:85:cb:6e:a6:51:60:
b8:34:36:ce:0f:b0:86:34:46:b7:9a:2e:21:bd:aa:2d:2b:61:
f4:60:da:8a:83:36:db:d8:e8:8a:bd:76:96:27:bb:33:91:b4:
e9:30:cf:50:93:28:c0:a2:5d:81:7a:18:45:70:4a:79:ea:10:
72:be:1c:00:57:56:7c:8d:c8:7f:88:f3:be:75:eb:1f:74:fd:
05:f1:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:29:54 2025 by rpki-client