Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File: Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier: GMVL3/DluxriOZ5AMnxuHBssucpEG0cIQ5wcTIzLo1w=
Subject key identifier: CA:89:D4:49:78:66:68:82:D6:48:52:57:FB:D3:B3:7B:54:5E:2F:79
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer: /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial: 0198D54E79E1BEB7444BA79A8419AD8D78A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: zImRNMKJhWoW2tGEN/WVhMEmfSTZ+McvlKw0CXIgceI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:79:e1:be:b7:44:4b:a7:9a:84:19:ad:8d:78:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=ca89d44978666882d6485257fbd3b37b545e2f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:bd:76:7f:25:4b:6d:20:fc:21:c3:b4:12:
a5:68:00:74:24:42:c8:f9:1a:54:01:21:be:b3:2d:
d3:c1:b1:dd:c0:f2:7b:95:be:3d:b1:34:a1:b7:30:
12:fe:76:9a:48:e5:b9:30:08:6f:86:d8:f4:b7:85:
13:9e:81:55:b7:78:33:fe:f9:56:7e:cb:9e:63:3d:
8e:e6:ba:4b:c8:47:5f:a5:3a:e6:d2:3f:38:14:93:
a3:c1:93:ca:89:d6:c8:5f:a5:5a:a5:ff:a6:09:c1:
bd:12:08:38:58:c5:2f:1e:35:e3:d0:23:4f:d5:fa:
dc:58:b6:fb:18:25:02:97:f2:48:d3:ce:83:38:2f:
3e:b8:20:e9:65:d7:c3:30:6c:63:72:1b:44:cd:ff:
c9:a8:d3:f6:c8:da:49:a4:9d:b9:de:7f:a5:7b:52:
74:03:b4:21:5b:43:5d:e0:0f:73:17:03:b1:e5:d2:
2e:20:69:6b:5f:91:8f:e5:33:e5:0e:f6:5c:6d:2c:
f3:82:b1:bf:97:45:10:27:d8:ff:9b:67:0a:63:de:
e7:c2:41:2b:a6:95:a4:b3:0b:09:8c:81:78:cb:82:
3e:89:59:5b:de:74:3c:ec:ff:7f:fe:00:d7:9d:d1:
fd:47:03:fa:83:c0:7a:91:6f:7f:ea:75:fb:9a:af:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:89:D4:49:78:66:68:82:D6:48:52:57:FB:D3:B3:7B:54:5E:2F:79
X509v3 Authority Key Identifier:
keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:37:75:f4:29:80:ee:45:a6:24:96:53:42:34:2b:55:83:04:
f8:a4:df:df:2c:3f:8f:b7:81:d7:2c:80:92:79:3f:68:62:c4:
f8:87:1a:2e:7e:3e:21:22:0f:6e:3c:2b:b2:cb:f7:79:d4:dd:
3b:58:b1:aa:88:38:3f:67:63:97:d9:2c:69:42:45:de:5f:db:
d4:a5:f1:84:38:91:c2:20:41:7e:c4:fe:21:52:37:18:2e:49:
73:38:0d:85:32:bb:86:f0:79:96:41:38:43:71:e9:8a:bd:68:
f9:c9:09:9f:67:d3:92:a9:9d:b5:3d:4f:55:a3:82:95:74:72:
e5:cf:d5:5a:ac:f3:39:4e:a8:17:9a:8b:11:6a:48:c0:a8:f0:
30:b3:f0:56:02:9c:14:8a:eb:0b:a2:fb:b7:6e:8b:d5:92:26:
22:61:ef:ea:b3:01:8c:0e:6a:59:8d:49:b1:f9:cf:ba:74:05:
19:52:4d:83:b5:af:c4:07:82:61:4a:97:75:47:14:d7:0c:53:
ed:24:77:bb:3b:7e:2e:02:4c:22:69:bd:52:ad:7c:73:d3:b1:
fd:6a:fe:ee:9e:a0:fa:63:ca:65:76:b6:aa:26:e5:35:4d:55:
4e:c5:8d:80:e8:a7:08:e7:73:d2:d0:ff:eb:61:65:e8:55:2f:
eb:b4:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:10 2025 by rpki-client