Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: AGuf7Xk68En2VP+d+jcDqLMd+fLiYDjM75jmSFeuhrc=
Subject key identifier: 8A:48:D1:29:D9:8C:B4:88:0F:B8:60:02:14:F7:77:BE:03:4A:7B:3A
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 0198D7059B8B9111D3E267A65FADECB44A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 1179
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: mNA4t/IjlxzsD4oZJfxqCDjZPsEWcQoAVoOXjLFgCnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9b:8b:91:11:d3:e2:67:a6:5f:ad:ec:b4:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=8a48d129d98cb4880fb8600214f777be034a7b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:a2:7d:ed:93:22:92:ab:ea:dd:b1:dd:fb:
7e:9c:14:07:02:78:1c:d2:a3:bc:79:5f:c8:cc:84:
49:88:2a:ce:83:1f:37:2b:c5:3a:e2:9e:0e:7b:d6:
7b:5e:f9:76:c4:4f:a6:cc:00:00:c8:47:0d:e8:79:
a4:f3:0c:d1:82:b8:93:af:13:b5:49:40:66:bd:b1:
73:a7:57:cf:f2:37:13:db:c5:5a:92:57:63:55:8d:
c7:98:10:03:90:0c:93:07:83:cb:1e:32:0e:a2:be:
8a:cf:cc:86:62:75:5c:ce:c9:39:06:9c:5e:d7:8e:
4a:ba:8a:d3:79:79:9a:ed:03:8e:a9:cb:fb:5e:10:
48:25:76:61:96:3a:e9:e5:2d:bb:6e:a1:83:2f:c4:
ba:f7:c5:92:ac:96:05:6d:fc:61:63:1c:13:82:be:
56:19:97:34:a0:5e:a6:ac:0c:f7:eb:54:67:b6:38:
8e:58:b1:94:b0:f1:95:cf:f2:27:98:43:52:f2:85:
dc:4c:4f:20:50:5e:23:48:0b:40:e0:ac:1f:ad:b3:
a4:17:68:d6:39:75:6f:a0:5c:8d:d8:90:2b:15:6d:
66:49:f7:c3:86:02:25:99:f0:b3:3a:f0:92:3d:02:
24:79:39:4b:50:75:65:a5:71:09:02:22:be:04:40:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:D1:29:D9:8C:B4:88:0F:B8:60:02:14:F7:77:BE:03:4A:7B:3A
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:5e:55:84:12:04:ab:83:f5:5f:24:38:d8:d5:44:13:b1:
26:1c:60:49:e0:3e:e3:00:ce:13:5a:f1:4e:5f:9a:48:a5:e4:
bc:9b:e2:fd:c1:13:25:0a:37:a5:59:05:f9:73:5b:45:41:37:
4e:67:6c:a0:08:cb:6e:45:16:1a:9b:a1:a1:8d:33:8c:3b:a2:
44:30:7f:c6:44:cb:d4:ec:6b:6d:d4:ec:ab:02:e5:d6:ad:b3:
b8:1e:20:b6:67:2e:e3:35:e5:44:11:f1:38:48:98:b2:4a:91:
cf:c2:80:84:84:c2:90:08:4d:59:dd:c7:d9:7e:f4:3e:96:9d:
dc:97:f4:f7:96:e9:46:23:5c:70:1f:54:e3:35:46:49:f9:ad:
34:b5:b5:b5:50:9e:bc:34:97:d9:67:ec:85:ff:04:2c:4c:b5:
37:17:f0:f9:ef:4f:cb:57:9b:ba:f8:25:72:fe:6d:8d:4b:31:
a7:8c:f8:82:ff:d6:dd:57:2b:2d:21:c1:95:c8:d8:4a:b2:5a:
19:ab:24:ae:9b:24:4f:60:6f:69:94:44:ec:9c:df:52:32:67:
86:f5:a4:5b:a4:53:78:10:70:f0:7c:fd:7f:59:da:69:1d:a4:
c9:88:a6:9e:8b:e4:1a:3c:cb:24:a1:10:be:15:7f:bf:10:94:
71:4c:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:30 2025 by rpki-client