Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json)
Hash identifier: FLNp+yEXen1/WWMBS16zOEXof8Tog0Y/3ldu/deogVc=
Subject key identifier: DB:C5:12:D6:E3:21:E0:3C:8A:F6:E9:D0:5A:E1:61:1A:82:1C:C8:8E
Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Certificate serial: 0198D705E1EEC86A950014A4E6C133D08F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
Manifest number: 0219
Signing time: Sat 23 Aug 2025 13:02:23 +0000
Manifest this update: Sat 23 Aug 2025 13:02:23 +0000
Manifest next update: Sun 24 Aug 2025 13:02:23 +0000
Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: dD3sFfK/YDaP4G9aKua5HLtJaH4Ul5kZR9/aHQUjQSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e1:ee:c8:6a:95:00:14:a4:e6:c1:33:d0:8f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Validity
Not Before: Aug 23 13:02:23 2025 GMT
Not After : Aug 24 13:02:23 2025 GMT
Subject: CN=dbc512d6e321e03c8af6e9d05ae1611a821cc88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:2e:0c:e5:7d:d1:c8:c5:61:e5:d5:88:9b:
09:ef:6e:4c:58:80:5c:90:12:9e:d9:60:70:02:9c:
f0:b6:9f:25:10:cd:b5:52:86:df:2c:4a:33:bc:49:
4f:d2:81:0e:ce:55:e5:15:bb:c2:02:40:1e:57:65:
29:f0:6f:c1:b4:2d:71:ba:43:61:f7:8a:3f:8a:33:
15:e1:63:d0:ed:42:18:58:03:52:73:dd:bc:5c:45:
10:13:c5:8c:7d:f5:3f:84:fb:29:95:57:31:8c:98:
7f:19:98:9f:dc:ba:f5:c8:d6:aa:25:55:9b:8c:c3:
38:40:6c:41:d1:4e:83:5c:f0:db:05:a4:43:a4:c1:
a9:07:cc:b3:1b:24:83:38:0c:90:47:57:80:b5:ed:
8a:ce:d0:24:04:d9:e6:16:e0:23:0a:ef:a6:42:14:
63:5a:b9:b3:eb:2b:e0:51:6d:43:59:40:38:64:97:
f9:cf:87:8d:fc:9e:8a:86:43:4f:7e:3e:05:78:be:
05:cc:8c:73:98:96:5b:b1:dc:aa:7f:fd:55:7b:11:
ce:8f:fb:9f:51:c6:f6:ef:fa:f0:7a:fe:7f:d6:35:
f6:52:66:28:5f:bf:8c:b4:5d:1b:94:0d:d8:82:78:
19:5e:49:4f:2b:d2:5a:d3:ad:78:0b:1d:d1:aa:3a:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:12:D6:E3:21:E0:3C:8A:F6:E9:D0:5A:E1:61:1A:82:1C:C8:8E
X509v3 Authority Key Identifier:
keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:55:ec:c5:ea:d0:ee:35:fe:0a:41:31:35:c7:75:ce:6e:27:
ba:1a:dc:7d:6b:96:69:65:aa:c3:28:ce:81:00:a3:63:43:f4:
47:e4:84:f7:7a:ea:f1:07:0f:f3:79:50:9f:e0:5f:1e:19:48:
50:b9:e1:b1:49:f5:58:55:e8:06:ac:31:69:39:ff:2f:72:fe:
81:bb:84:e1:bb:7e:e2:3d:36:ce:f6:1c:4a:c8:35:84:a6:49:
6e:12:38:c0:08:45:7b:ac:0e:53:57:fe:23:7a:12:f0:ab:fd:
76:4a:0e:c3:b2:67:1d:62:89:32:63:35:09:13:5a:f5:2f:58:
91:04:e2:e6:ae:9f:d2:74:ca:06:7b:b9:af:5d:14:30:ce:02:
1f:16:10:ef:28:eb:8f:e2:f9:5f:17:95:de:49:d8:94:ca:01:
94:b8:fa:a8:c1:bf:a6:36:68:31:b3:79:72:76:e1:7c:2c:e2:
4c:bf:e6:73:d7:10:2d:c6:30:e3:89:9e:c8:22:b9:61:65:84:
de:42:cb:2b:d4:76:aa:dd:c7:d8:4d:6c:28:da:f0:8a:d2:6a:
1b:7a:39:c9:dd:f3:e8:3d:07:bc:11:8d:d6:5d:75:0f:eb:34:
3e:e1:0b:16:79:43:3b:67:d4:2d:f8:fe:f2:d9:65:d0:3d:f6:
e8:da:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:52 2025 by rpki-client