Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: Jbh1b7QP8n0gXim5ewS/lbMmF3OUdYnmsH9viArDndo=
Subject key identifier: 7D:40:ED:12:7E:90:03:79:B6:F3:B6:6F:94:BF:70:BD:D4:3C:07:0B
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 01984A40BFFB8B6587201C464D4F9032A39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 029B
Signing time: Sun 27 Jul 2025 05:00:14 +0000
Manifest this update: Sun 27 Jul 2025 05:00:14 +0000
Manifest next update: Mon 28 Jul 2025 05:00:14 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: fd2gtOeidwnw2PyZfcBpBIARvcnXV18jjs2KSSl4Dhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:bf:fb:8b:65:87:20:1c:46:4d:4f:90:32:a3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Jul 27 05:00:14 2025 GMT
Not After : Jul 28 05:00:14 2025 GMT
Subject: CN=7d40ed127e900379b6f3b66f94bf70bdd43c070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:1f:19:e0:e7:cb:f5:5c:13:6a:c7:66:f2:
0d:72:05:fd:56:31:2f:49:44:01:bc:38:ac:ad:9b:
4d:d1:b4:73:cc:df:67:01:50:03:83:02:79:5e:cd:
f2:a2:14:23:d1:73:f0:f1:07:d5:d2:3e:e2:1c:4c:
e0:7a:66:6a:77:6a:d7:8f:27:1c:fe:38:0a:e3:70:
68:19:ed:ac:5d:b5:81:ee:c8:58:38:5a:6e:3f:0b:
12:87:ed:23:1d:4d:39:db:cd:77:6e:c5:95:0d:a0:
72:53:66:8f:a6:25:aa:ee:60:91:55:9c:b8:72:46:
64:03:bb:f3:f1:62:27:95:bf:9c:b6:85:a9:f8:ad:
ae:d0:da:3c:6a:8c:a8:e4:00:4f:ca:06:f0:98:12:
30:90:f4:c7:d0:2b:9b:09:bc:7f:ee:1f:85:9a:0e:
97:97:99:d3:88:2d:96:67:49:d0:9c:a0:43:70:05:
38:48:c9:7b:9f:2b:fc:9d:dd:09:1f:e6:ef:8a:b4:
a0:9e:7f:76:0e:b6:81:ca:8a:ec:ad:43:4b:ab:2a:
58:3e:1f:d6:12:52:4a:c3:1b:64:19:9c:e5:ce:89:
83:03:60:af:a3:ae:5e:d2:24:8d:43:35:62:81:99:
df:03:5a:19:bf:82:3d:a2:6b:33:b0:a9:00:39:1d:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:40:ED:12:7E:90:03:79:B6:F3:B6:6F:94:BF:70:BD:D4:3C:07:0B
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:06:dd:5f:3e:23:69:b0:2c:f1:df:d8:05:0a:7a:ed:c9:
da:1f:45:34:65:5a:c3:e3:13:7e:fb:9d:92:31:7d:65:b8:b2:
27:6a:95:af:04:63:5c:ce:22:dc:0f:9e:e0:e4:b5:fb:0f:73:
b2:d2:34:bc:48:56:d7:5a:d3:38:37:0a:c0:d4:83:e2:c1:51:
2e:cc:bb:f7:8e:3a:5e:f4:09:a9:da:a7:f3:e7:bc:2b:4a:e8:
2a:c5:ad:74:f7:bd:e0:8b:3f:2d:9d:3d:e8:ec:b8:71:c6:e1:
b4:01:f7:c1:6e:df:0f:66:1e:d2:25:48:05:68:78:d9:94:5e:
7a:66:5a:14:b0:19:ab:47:a2:d1:90:e0:71:3b:f9:f4:ad:e7:
d8:03:25:67:d7:0b:a7:4b:19:8e:90:99:a7:53:84:1a:08:f3:
47:67:07:62:e4:cc:9e:ea:f4:5f:79:85:54:ac:16:12:d8:97:
53:c1:c9:53:b0:ed:a8:5d:98:ae:9e:f3:fd:b0:ee:30:cb:61:
4b:d1:36:9e:fb:70:60:65:f8:7c:c4:73:d9:9d:4e:aa:31:72:
da:1a:d3:12:e3:3e:f6:3a:71:58:23:86:2b:9c:8c:47:eb:b7:
0b:5a:05:a2:79:98:d3:46:a6:75:1e:45:25:21:9a:26:db:ef:
07:b8:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:33 2025 by rpki-client