Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: JUKvFpS1kzvQOLkrE7URtL4Ua2Aeqz62jT6b7R9xlGU=
Subject key identifier: 9F:3C:E0:87:C3:2C:B7:D0:6A:8F:96:F9:35:8D:FB:62:7F:5D:B1:57
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 01984588C9C968A37D7A627174076242CA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:00:49 +0000
Manifest this update: Sat 26 Jul 2025 07:00:49 +0000
Manifest next update: Sun 27 Jul 2025 07:00:49 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: ghU8Y5aVLK2onRAzBlAJdpcehG606MFMki/eTyIu5uA=)
2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:c9:c9:68:a3:7d:7a:62:71:74:07:62:42:ca:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Jul 26 07:00:49 2025 GMT
Not After : Jul 27 07:00:49 2025 GMT
Subject: CN=9f3ce087c32cb7d06a8f96f9358dfb627f5db157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:e7:80:77:c3:6e:2f:b9:cf:ed:5e:b4:ec:
8d:b3:f4:1c:4e:cd:f5:32:5d:6a:aa:ca:1a:ce:dd:
d4:c3:d4:11:c6:78:78:66:3e:73:c0:18:2c:40:95:
02:15:3e:ef:17:c0:4d:6e:e4:79:ae:8d:2c:10:3b:
91:72:cc:b4:d0:ca:4b:19:e0:b3:ed:64:e9:06:74:
06:45:30:a1:58:8e:b7:c7:c3:43:22:1e:a5:7f:80:
8f:47:2d:36:7d:ad:eb:7b:06:ca:38:f8:d8:e7:25:
fe:b2:34:a7:a0:9b:b5:be:58:3d:35:fa:63:c7:6e:
19:8f:02:10:f9:b4:78:ac:6c:18:bf:cc:91:f4:4b:
2a:d2:de:25:51:11:e8:aa:9f:96:ad:d2:be:81:0e:
ff:ce:d0:46:99:25:1f:4b:38:88:c4:7f:39:99:9d:
e1:dd:1b:09:6f:f7:47:0f:3c:8e:78:72:6c:3a:20:
b6:f8:42:ce:8a:cf:02:ff:0d:ba:29:21:9b:4d:57:
0d:f0:47:18:b9:7f:dd:c2:70:80:88:b8:5e:8c:95:
ea:ce:c1:4d:21:23:1f:77:4d:1d:a9:d6:87:c5:18:
2f:51:0e:af:1f:e9:ae:3d:b6:f1:3a:a6:0a:f3:9d:
de:79:e1:a0:2f:b0:96:ff:5a:39:d1:89:91:26:60:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3C:E0:87:C3:2C:B7:D0:6A:8F:96:F9:35:8D:FB:62:7F:5D:B1:57
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:0a:84:19:c7:05:16:60:b9:16:2a:cb:91:46:b1:45:70:
6a:47:e9:74:56:a3:bd:59:dc:a9:34:f4:96:df:a1:52:43:78:
45:0b:2c:5f:f5:81:8a:be:b1:23:1d:e3:6b:66:09:01:57:1c:
a0:51:bd:af:38:10:ee:0f:fa:37:d6:d1:b1:f9:6d:d9:3c:f7:
8d:ab:bb:71:4e:ab:cf:81:c0:03:7a:fc:08:ad:d7:de:92:f3:
4e:8d:b3:8d:bf:e7:bd:cb:f5:d7:2d:e4:53:bf:9a:03:a5:b7:
ee:c8:fb:c3:0e:f6:96:d1:0d:e0:ac:1e:ef:14:77:fb:9b:34:
b7:14:8c:30:16:e1:1e:96:3f:f6:13:6a:e6:42:95:c1:d5:34:
b1:36:fe:89:87:14:34:e2:ac:18:15:75:b0:8c:68:c2:65:ea:
5e:58:ed:72:69:77:64:2c:4c:41:42:4d:39:14:48:a8:cc:84:
90:c5:2c:6f:38:f6:89:dd:5e:37:8a:6f:4e:70:d7:e5:a2:d2:
90:ad:70:8c:61:bf:61:04:4f:98:4d:1e:a1:e6:79:b9:49:cb:
7f:8b:89:10:19:86:36:1d:b8:e1:c1:62:48:2e:27:9e:a7:4d:
37:f5:7f:12:ec:5f:1a:93:7d:6a:07:9a:2f:c9:39:f5:f2:59:
24:90:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:30 2025 by rpki-client