Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: J3SufWZFThQMmG0DBnA6Sqlxem2cHADisV7ceHvNTSs=
Subject key identifier: 37:EC:5B:1C:9A:F1:56:88:E8:1F:94:B2:22:DA:68:92:68:16:7A:EF
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 01984AAF39C8182714953819E20159D725DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0AE3
Signing time: Sun 27 Jul 2025 07:00:54 +0000
Manifest this update: Sun 27 Jul 2025 07:00:54 +0000
Manifest next update: Mon 28 Jul 2025 07:00:54 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: nJXhBCQ9Uhwc5xgjpIv1TlGjgVj3kZA3TtywKvhEZoc=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:39:c8:18:27:14:95:38:19:e2:01:59:d7:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jul 27 07:00:54 2025 GMT
Not After : Jul 28 07:00:54 2025 GMT
Subject: CN=37ec5b1c9af15688e81f94b222da689268167aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:35:eb:23:3a:18:b0:de:21:91:fc:7f:82:
52:a3:b3:ef:f7:1e:2c:c1:b4:5f:4a:05:86:2c:58:
d6:50:b4:92:96:f4:85:30:4c:25:35:c6:0f:c9:71:
97:7e:9f:67:02:63:47:6e:0e:4e:99:1c:e4:72:76:
ab:e0:e3:eb:8b:9c:4e:a1:d0:48:16:9c:c2:62:28:
dd:36:f3:30:8e:08:5c:fe:10:df:ad:1a:b5:7f:1b:
74:14:41:6e:47:b5:2b:e0:9f:5d:5c:39:98:b5:68:
9e:43:98:ae:67:8c:20:48:62:c7:d2:61:07:e1:ef:
62:26:13:c4:4a:d0:67:e2:40:5f:ee:e8:e4:df:0f:
83:43:30:ec:56:4a:14:bd:99:81:83:23:aa:84:4b:
fc:87:10:0f:c8:ad:e0:26:ac:b7:a6:5d:db:03:8f:
a0:3e:7e:32:76:06:48:48:47:7a:cb:9d:8c:4c:81:
e6:5d:c3:c6:6f:63:57:56:a6:fa:4b:3d:23:1a:e3:
47:80:5b:32:a5:c8:e7:8a:26:13:83:66:d7:e0:1b:
a5:41:cf:ec:1b:85:a9:4b:de:ad:c3:dc:f0:b7:4a:
8c:25:61:02:e4:d5:68:f2:86:9c:9f:f5:40:72:28:
2c:8a:14:20:11:de:ce:fd:e2:f9:84:2e:61:1e:5d:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:5B:1C:9A:F1:56:88:E8:1F:94:B2:22:DA:68:92:68:16:7A:EF
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b4:5a:0d:9d:88:70:b3:24:6b:b9:7f:2c:96:9e:15:b8:db:
50:c0:59:93:39:22:dc:63:35:79:87:a1:d2:cc:2f:10:47:af:
f8:8d:65:90:49:26:66:34:8e:05:3c:e4:0a:75:cb:aa:e8:88:
cb:22:f0:f8:f6:17:b5:8e:28:16:01:e9:7b:79:3e:00:25:16:
10:6d:c5:c7:e1:b2:68:62:96:22:31:b2:04:ef:4e:13:d4:c0:
9f:66:5e:d7:f9:aa:2d:84:c2:87:01:c9:f9:3e:fb:5a:a9:80:
77:f8:25:c0:1f:e1:a3:87:6e:f3:49:9f:1b:9a:23:54:07:e0:
7c:cd:90:53:0b:5c:5b:43:8c:88:ac:c3:c2:30:5d:7f:88:91:
6b:8c:34:ac:45:0e:41:f8:c3:f4:00:28:19:79:70:60:18:de:
17:7d:a0:8d:d5:50:a7:4a:c7:63:8c:40:cd:de:34:ac:b0:cd:
ba:5a:f5:ed:14:83:a2:bb:9b:bc:0c:9d:ee:d2:e2:eb:cb:9b:
da:9f:71:1c:8d:a0:ab:82:69:0c:c9:be:86:c3:49:19:96:31:
54:d9:7c:38:79:5c:8f:ed:63:48:90:1a:ef:83:f0:84:c8:f9:
e2:7d:c2:b3:80:50:d3:e8:cb:fa:ee:39:70:90:ad:fc:5d:8a:
60:54:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:00 2025 by rpki-client