Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier: 6By/7B/cV16txKhXZhf/C9RMbQ3dbg2Sz6A/fjsB2EA=
Subject key identifier: 03:31:58:D8:F8:3D:62:FC:20:4A:E3:9A:29:A1:B1:36:ED:BD:23:2D
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial: 0197B745412AD128693F745800126C6D661B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number: 1525
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: vHAMzS3xoQnWjkSyMWeZlYLjkkDfSdi5DMDF/6jgrso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:41:2a:d1:28:69:3f:74:58:00:12:6c:6d:66:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=033158d8f83d62fc204ae39a29a1b136edbd232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:6c:be:28:79:d1:35:93:ad:b0:3a:73:92:
ac:03:60:16:3c:16:31:bc:dd:85:57:da:0e:aa:04:
87:80:5d:17:ac:16:14:09:d4:e1:58:2a:04:b6:d7:
f3:36:0f:b9:27:e0:3f:fc:f5:48:7b:d0:84:44:25:
ce:6d:bc:29:c1:49:43:09:17:c4:f5:86:b4:bf:0f:
04:e1:62:fe:58:d5:ca:1e:07:2b:38:e4:7a:c0:01:
a5:ad:43:f8:15:c4:77:bc:0b:0d:54:47:33:d2:d6:
43:e9:d5:17:15:5d:5e:7a:30:48:cf:f4:55:cd:1c:
8b:92:d2:bf:be:d4:bc:b8:c5:7a:b0:73:f4:cb:71:
c5:f3:82:5c:04:58:a6:c8:6e:b4:42:3f:16:84:a4:
97:1c:0a:96:9e:26:ab:65:93:94:54:29:60:6c:81:
df:11:10:c0:1e:88:9d:31:bb:ae:86:88:06:0f:80:
61:ea:89:1d:6e:88:cd:69:0f:3a:3c:84:61:f8:3f:
11:ad:64:7c:05:36:3b:35:9a:aa:bd:a2:81:b2:f6:
5b:5b:48:58:5f:17:5c:f1:fe:26:3e:53:81:97:f8:
8b:35:61:b7:3b:0e:15:74:19:4d:c7:bc:df:09:46:
d4:c1:cf:7e:fe:b8:9a:d2:a9:9f:6c:6a:66:d9:ae:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:31:58:D8:F8:3D:62:FC:20:4A:E3:9A:29:A1:B1:36:ED:BD:23:2D
X509v3 Authority Key Identifier:
keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2a:74:c2:5e:1b:18:c5:53:1b:f7:de:50:c6:a7:71:68:e9:
0e:ab:de:c9:1f:c0:4c:94:1c:00:73:74:ca:c9:d0:71:e5:2d:
4a:1b:fd:25:34:f9:2a:e5:b4:c1:fe:a6:e1:85:9e:d8:57:b6:
7f:ee:12:ba:e7:aa:9b:fe:ea:23:68:3e:2c:42:c8:da:27:5d:
48:be:eb:47:48:ba:9b:d7:6d:cb:78:b9:cb:d4:f0:3e:a5:45:
49:2b:fe:67:62:0c:f0:7c:b6:ab:3a:45:53:06:a4:8f:39:4a:
67:00:db:96:45:2f:6b:de:15:e2:33:9f:46:ab:14:c8:0e:7a:
ed:63:0e:c8:a8:72:07:04:98:8f:0e:c3:5b:6c:52:1f:23:e9:
4d:06:1a:e5:df:e6:a4:89:9f:ce:a6:0b:b2:af:98:04:f8:e4:
ce:e0:0e:48:93:6d:0e:a9:c8:d3:d7:27:c6:e5:bd:13:8d:59:
1a:56:40:e7:1f:16:02:ac:57:74:52:9d:59:ef:75:0f:c2:88:
3a:d8:31:73:47:ad:f0:ec:6e:26:7d:e0:5a:a5:8f:75:f0:02:
8a:8f:1d:b8:4d:4a:40:be:70:e1:c1:a1:46:7d:39:44:69:f1:
5c:e3:05:49:16:1c:9e:a9:ec:a6:e0:78:3a:da:a0:bb:27:3a:
de:36:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:48 2025 by rpki-client