Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: PX+O0+dW+xuC37+DW6GgPCJZ7j+/juTQzb73MtWzMLE=
Subject key identifier: 43:C2:34:57:50:81:A2:97:A9:D1:7B:5F:B8:A6:2C:F4:FB:0A:4B:A6
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 01984AAEFDD9AC7E5F355F69EAC981A3AA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 05F0
Signing time: Sun 27 Jul 2025 07:00:38 +0000
Manifest this update: Sun 27 Jul 2025 07:00:38 +0000
Manifest next update: Mon 28 Jul 2025 07:00:38 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: gniD1gA5fLKfGHugaiApNMvNeSt3GpBXCVsw+sLxoyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:fd:d9:ac:7e:5f:35:5f:69:ea:c9:81:a3:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Jul 27 07:00:38 2025 GMT
Not After : Jul 28 07:00:38 2025 GMT
Subject: CN=43c234575081a297a9d17b5fb8a62cf4fb0a4ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fa:d4:bf:b4:e4:1d:73:5f:08:49:83:83:60:
e9:76:8b:d5:87:d0:d7:0b:2b:a7:3a:70:68:b9:ce:
6f:f7:ff:7e:3f:b9:b9:fd:43:2a:82:04:ac:c6:a5:
16:43:9b:54:d5:56:c4:80:65:c7:32:3f:23:e4:0a:
3e:57:9b:80:8d:b4:9d:b8:fc:1f:8d:ef:22:9b:81:
50:e0:10:71:21:a5:84:c3:51:a6:44:93:27:45:1e:
33:84:82:03:83:4f:c7:d0:3e:30:8c:8b:9a:ca:66:
59:72:3c:18:4e:26:96:ea:c6:b1:99:9d:04:49:90:
20:6a:fd:81:11:49:0e:6a:c7:e9:c1:ac:8f:d6:ca:
4e:23:f4:17:44:2e:f9:bf:b7:ac:ad:45:09:a0:74:
00:e3:32:29:8a:77:c3:65:c0:ae:2b:04:b3:b1:20:
62:34:0b:d4:6d:0f:1b:46:be:d7:10:4c:0b:de:a7:
ad:04:3d:13:7f:22:a2:13:8d:58:88:e9:24:6b:87:
84:83:20:47:07:21:0d:15:44:a8:a7:34:54:96:77:
87:2a:2a:96:21:19:30:4c:e4:0e:19:e1:8c:89:a1:
b3:4d:c8:28:4e:64:7a:37:36:d9:cf:f6:f2:66:03:
3d:d5:82:f2:9d:cd:8d:c9:32:7e:b5:d8:9d:f6:d4:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:34:57:50:81:A2:97:A9:D1:7B:5F:B8:A6:2C:F4:FB:0A:4B:A6
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:eb:7f:19:65:c0:13:44:88:8b:3a:69:23:cf:e0:73:de:7d:
9b:7a:67:fa:17:55:34:ee:c7:81:48:6e:86:e8:fd:3c:11:9d:
41:31:74:62:ba:f5:14:4e:3b:fe:5a:e7:14:63:1a:ae:eb:42:
11:5c:e9:5e:1f:d4:9a:ad:c1:25:a9:84:c1:61:5c:bc:72:9a:
f7:88:cd:a7:98:87:56:e9:c9:49:11:3b:30:87:cb:5d:32:5b:
92:48:32:dd:af:ab:5a:ea:65:4c:0b:2d:49:51:96:5f:50:2a:
dc:c9:12:ae:a4:e1:fe:a0:10:ce:09:8d:bb:3e:83:e6:cd:0a:
e3:46:3f:1b:06:31:6c:3d:70:11:2d:aa:50:28:06:37:01:23:
b3:17:c5:43:45:bf:d8:e5:7e:0f:60:e0:38:2a:23:fa:d0:c9:
8c:22:a8:ec:ea:3f:58:68:fa:64:97:60:9f:68:86:98:9a:0f:
92:c4:df:b3:ec:40:6c:99:98:cc:99:02:25:6b:39:31:47:d2:
e9:73:fc:d7:70:25:4f:13:8a:68:89:dc:d3:31:0b:42:39:f5:
83:aa:ba:8e:ac:c6:f6:42:39:59:ad:40:e8:70:80:d3:5c:5f:
70:60:62:44:33:f1:74:e8:78:9d:4d:a0:e7:c9:bf:80:fc:1f:
20:f3:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:07 2025 by rpki-client