Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: JYZdScJOFNNmBUpY4WpZSptHvJdny7Zs32TjTOR95YQ=
Subject key identifier: FF:DC:65:99:6B:85:04:DE:59:57:2F:D1:23:21:9C:10:55:69:B9:16
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 01984A77BDFC6A91EB2F80C86C5331E890DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 1154
Signing time: Sun 27 Jul 2025 06:00:18 +0000
Manifest this update: Sun 27 Jul 2025 06:00:18 +0000
Manifest next update: Mon 28 Jul 2025 06:00:18 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: eiytksIfUCUNPR+U/+mkf/UYjkdwMUhcmTucZiwVcDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bd:fc:6a:91:eb:2f:80:c8:6c:53:31:e8:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Jul 27 06:00:18 2025 GMT
Not After : Jul 28 06:00:18 2025 GMT
Subject: CN=ffdc65996b8504de59572fd123219c105569b916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:4d:98:05:52:80:f1:e3:7b:8f:f1:6b:54:
65:83:44:f6:32:db:c4:7e:9b:a5:93:34:30:8e:fa:
0e:13:6c:3b:03:58:c0:27:fb:ff:9b:e1:80:0f:30:
eb:75:d8:d1:cc:b8:a2:5c:07:ca:30:6a:2a:47:1b:
60:98:1a:df:8a:cf:13:78:8e:6b:b1:76:46:73:ba:
72:f8:fe:bb:62:70:a6:0e:61:ad:e4:a5:e2:03:b8:
b1:61:49:01:3d:c6:ad:16:0f:ca:af:29:b1:36:34:
95:30:34:18:bb:37:32:85:13:4f:f9:e9:c7:c8:93:
43:d3:f6:24:12:fb:5d:70:f6:21:29:10:b3:4f:25:
4a:93:a6:c0:fd:be:c8:24:57:c3:6c:a3:2b:9b:51:
d9:e1:96:e4:79:72:34:8e:2b:b5:8c:64:2e:6a:c0:
93:f3:cd:f3:9a:e1:e4:88:e5:03:dc:5c:ee:ee:ea:
5d:87:bd:0f:30:b7:8a:6e:f1:73:78:ea:70:84:83:
6f:38:68:9c:41:14:dc:11:89:bc:65:1c:d4:16:c1:
82:02:19:5d:01:b5:ff:5f:5a:f8:99:ee:58:35:cd:
6c:9f:32:4c:ce:bc:19:e4:44:3d:81:4c:02:0f:0b:
78:c6:f4:72:a9:6c:45:39:02:2b:f8:79:b5:96:3d:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DC:65:99:6B:85:04:DE:59:57:2F:D1:23:21:9C:10:55:69:B9:16
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:70:37:a6:9d:ea:15:24:b1:3e:1b:fd:2f:85:27:20:69:3a:
74:3f:14:b3:09:e0:03:6a:93:eb:da:fa:de:14:6e:f0:cb:7f:
2c:ca:26:00:ce:d3:45:02:ab:17:28:cf:f1:79:8e:42:07:6d:
c6:71:f9:3b:aa:fa:7a:67:1a:45:3f:68:89:05:f9:12:d6:1a:
75:8e:18:56:81:c4:e3:45:ca:ad:a1:89:68:c1:0d:fb:0f:30:
77:93:9e:53:2b:f2:7b:47:90:da:47:28:e8:da:72:88:39:fe:
82:65:5c:6d:06:76:2a:1d:f1:06:c2:de:d6:2a:6f:0a:25:02:
6a:ca:66:d0:4c:bf:fc:89:8b:8a:ef:d5:b5:76:b7:dd:27:51:
91:ca:f4:5d:4d:96:e2:ec:d9:2b:57:86:7e:e1:63:60:29:ee:
bb:53:96:d5:70:5a:eb:0c:c4:0a:25:c4:00:00:27:9d:d5:ee:
5c:cf:97:0b:8d:49:8d:96:6e:0f:d9:81:26:67:15:81:43:50:
0b:8d:5b:9e:74:c6:4b:81:af:1a:80:5a:e8:ce:ce:8a:14:08:
b0:88:f3:8d:bd:e9:6b:6e:eb:b6:77:82:e4:38:fd:19:b2:ef:
d3:9a:a8:01:13:e7:4e:bf:c9:da:c7:7c:c2:65:af:79:91:97:
67:0a:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:16 2025 by rpki-client