Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: t8qv7zvFJa1QRUyfm0aQd2duYvUVD27gVEoCQ9BQIms=
Subject key identifier: C4:4E:62:57:65:08:09:81:06:0D:35:1B:54:AC:6A:D0:76:48:7F:0F
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 0198D4742EC7AEB3B4C0415E3B6B290BB4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:04:00 +0000
Manifest this update: Sat 23 Aug 2025 01:04:00 +0000
Manifest next update: Sun 24 Aug 2025 01:04:00 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: BdnKKCJo9fq4+UbMMMzvqffAcbWzrkMIe9MKlLq/mC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2e:c7:ae:b3:b4:c0:41:5e:3b:6b:29:0b:b4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Aug 23 01:04:00 2025 GMT
Not After : Aug 24 01:04:00 2025 GMT
Subject: CN=c44e625765080981060d351b54ac6ad076487f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:1a:7c:06:4e:44:cb:bd:a4:93:79:41:72:
66:58:51:57:3c:69:a4:b9:0e:58:5b:a5:43:a3:4c:
25:c0:e0:17:24:41:f1:79:14:82:d6:f4:ce:ad:7a:
e9:ce:7c:4a:02:ce:11:58:81:9c:93:2e:47:74:1e:
89:1b:ab:8f:16:55:e5:44:e8:95:5c:ed:63:75:41:
1a:d9:e3:0e:37:f7:4e:22:11:da:a0:0a:d3:43:5a:
5d:c1:99:5a:e5:03:b1:af:d8:ac:69:b5:70:3a:a9:
1a:8f:b8:cb:98:a4:55:42:fd:7d:06:99:a9:18:b6:
c6:ad:c0:c1:45:d1:d1:5a:dc:cc:26:25:a8:22:32:
32:78:d0:47:09:23:f7:de:3e:8a:77:12:bc:02:b3:
dd:01:6d:f6:45:09:2a:af:88:73:9b:56:03:b6:bf:
4a:ac:66:ae:22:7e:eb:6f:26:df:52:4f:b3:8a:27:
a4:d6:42:17:4d:4f:c1:cf:27:38:5e:c0:ed:99:40:
dc:e1:ec:1a:30:ea:55:ec:5c:c9:ec:ff:6a:45:7f:
16:b2:cc:c5:29:aa:29:90:7c:6a:f1:8d:6e:bf:d0:
dd:ea:99:c4:a0:9f:ce:2b:3d:4e:56:23:30:ff:7d:
95:a9:5a:54:f6:ff:cb:8c:81:a6:be:f7:b6:05:df:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:62:57:65:08:09:81:06:0D:35:1B:54:AC:6A:D0:76:48:7F:0F
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6a:f2:d7:6c:40:ae:30:c5:14:35:57:d5:bd:5d:b7:00:96:
3c:a9:21:55:59:10:f2:7d:e5:42:a0:1a:1f:d0:87:37:b9:5d:
2e:92:a0:5a:d9:18:01:ad:15:6e:b9:d1:15:54:41:b7:f1:bb:
f0:c7:f0:b5:7d:73:42:94:8c:0f:3f:0c:bb:a5:f8:71:eb:31:
3b:a1:09:08:ae:26:dc:34:95:5e:24:eb:11:95:c7:95:bb:11:
65:97:40:99:28:74:9f:12:3c:1c:46:c7:39:08:00:b7:06:de:
e5:3c:ce:fe:9c:c9:f3:19:4c:53:15:41:c0:cb:d2:b2:80:19:
73:91:38:58:4f:70:0f:f3:5d:a2:68:e0:5f:2d:79:90:cb:2d:
66:cf:e4:76:c6:37:d1:a8:ff:09:25:82:f6:ab:db:42:8b:42:
a6:57:8e:bc:e0:7b:aa:6e:d3:54:55:4d:f6:83:07:14:10:f8:
56:33:84:f9:35:77:f9:e7:3b:fb:87:0f:b0:fa:0f:25:3c:47:
20:ff:01:6b:5f:58:5d:af:87:59:60:1f:ca:a6:45:6c:77:41:
e8:5f:42:9d:fe:38:ce:be:40:e9:4c:f7:7b:80:53:db:17:22:
56:55:d0:9e:4b:71:b6:c5:af:bc:95:04:8d:6b:00:52:9d:79:
77:51:98:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:34 2025 by rpki-client