Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: 7RLwKUjweDONgMIPeKWIjgQd2wxfJwzvA1xz7ac2psY=
Subject key identifier: 30:95:C8:C2:9D:33:1E:14:2F:D4:6F:92:C4:8A:F5:9E:4C:36:D1:7A
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 0198D4E05ABEB8CF9AF53EC476A0351FD6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 0598
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: mDI6no60tK6Ha4GQelks39/0ZL/Vaplc+W0Gp7oWcMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5a:be:b8:cf:9a:f5:3e:c4:76:a0:35:1f:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=3095c8c29d331e142fd46f92c48af59e4c36d17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:5e:ae:62:03:d3:7a:35:0c:a7:5d:6f:e1:
0a:e9:6d:6b:18:57:10:2f:11:80:5d:18:63:17:3e:
df:5d:91:d0:34:f0:74:67:fa:92:e4:07:61:c4:f4:
ec:7b:df:8b:43:57:dd:6e:a2:91:1f:9c:ef:fc:74:
51:52:6e:aa:9c:91:6d:b8:d9:5e:a3:aa:0a:fc:9f:
7d:56:04:66:c7:59:ca:17:29:59:27:8b:f0:06:f3:
a7:05:82:9c:2a:37:5b:dc:b0:6b:b1:b0:fe:01:99:
4a:27:5d:a6:de:24:05:1e:b6:cf:0d:64:03:b4:f5:
72:bc:50:bd:10:f1:76:47:19:2b:38:ec:85:65:7f:
8a:26:cf:0c:e7:b9:8c:29:b7:5f:68:06:79:6f:1c:
c3:97:fe:f1:e1:a1:02:fb:19:f8:25:a1:32:01:d2:
d4:b4:92:b5:ec:a4:78:1b:b5:91:69:5d:54:d7:85:
18:32:52:3a:da:ce:1b:19:97:ca:2a:04:b7:e4:8d:
58:f1:99:9e:1b:32:b7:f0:de:3d:a8:c3:76:93:d8:
ef:36:82:d8:49:e0:a6:68:6c:ae:bf:92:b7:0f:f4:
f6:91:7a:20:83:d9:e0:79:60:92:9a:52:9d:2e:9f:
7f:a9:e7:09:4d:55:15:45:04:4c:e4:3a:a6:e1:00:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:C8:C2:9D:33:1E:14:2F:D4:6F:92:C4:8A:F5:9E:4C:36:D1:7A
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:3d:04:b7:99:1d:e7:c2:5e:d8:bb:66:5e:8d:78:a8:5a:
2e:10:66:0e:7f:df:14:25:95:24:7e:f8:07:bd:b0:c1:0f:3a:
64:91:97:33:db:97:b1:7c:fe:cf:93:9c:3b:6a:c6:92:a6:84:
2c:d7:fe:ea:9d:fe:91:44:16:4a:ff:61:b6:ad:35:3c:46:9a:
51:60:65:42:0b:5c:d9:4e:c5:50:0e:c2:f2:99:5c:30:96:b8:
8f:a0:16:6d:02:65:ee:c1:f8:e1:63:4c:4a:8f:97:39:27:42:
cf:e6:5c:75:0f:5b:90:e9:2a:58:9f:60:be:cf:e7:c1:c5:dd:
02:2d:c2:c5:6b:41:e4:09:fb:ee:02:30:a5:e1:d7:7d:21:b6:
6d:93:8b:39:f5:00:fa:3e:de:ae:2c:ee:e0:78:33:6b:7f:43:
f5:1f:74:85:76:43:a1:7c:0d:19:c1:91:25:b7:2c:ce:ed:fb:
71:52:55:c1:17:4e:82:4e:58:00:b0:da:98:59:92:e8:93:d8:
be:ca:a9:c9:01:d4:87:3e:00:59:47:b0:04:0f:f8:56:8e:48:
4a:70:d7:b2:9d:97:0e:dc:2f:d7:c2:14:a4:73:bf:1d:69:83:
08:26:95:b3:92:2b:eb:a0:88:49:31:14:87:a9:ca:ad:ce:ef:
2b:27:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:49 2025 by rpki-client