Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json)
Hash identifier: 1+8EC0Bh8Fp4hKML+yVu77YKWRUVutj+aGGgTPMPaLg=
Subject key identifier: D1:81:81:C6:74:E0:65:1E:D4:B4:17:6D:D4:B4:5D:7A:23:6E:7A:D1
Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Certificate serial: 01992331086C1D74F41835D4415846800B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
Manifest number: 0102
Signing time: Sun 07 Sep 2025 08:00:39 +0000
Manifest this update: Sun 07 Sep 2025 08:00:39 +0000
Manifest next update: Mon 08 Sep 2025 08:00:39 +0000
Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: wTvUCP4dzH9qcZq+/GTjVQDrEPwiAD5ec06bhXrlORg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:08:6c:1d:74:f4:18:35:d4:41:58:46:80:0b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Validity
Not Before: Sep 7 08:00:39 2025 GMT
Not After : Sep 8 08:00:39 2025 GMT
Subject: CN=d18181c674e0651ed4b4176dd4b45d7a236e7ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:72:4f:27:0c:88:92:42:0a:dc:e4:a5:5e:
dc:89:6a:09:c5:e0:10:1d:ca:b3:c9:35:96:d0:6a:
24:f3:89:da:89:fc:25:e1:ec:3c:0d:33:8e:e0:3c:
62:36:f6:78:8a:c1:c3:06:5b:02:b4:8b:63:ba:78:
05:1f:8a:c4:3b:5a:cc:0a:ff:7f:65:78:42:33:e6:
e0:b5:a6:77:77:cd:7c:cb:e4:43:39:f5:ad:fe:74:
a5:2b:3f:f4:31:28:4a:2a:2f:a3:97:a4:77:d7:76:
f7:3b:a8:1e:e8:6b:1e:7c:de:fb:75:2a:84:63:c5:
59:aa:bd:0f:a1:df:6e:72:e7:e5:ed:6f:9f:4b:9e:
a9:dc:61:fb:82:1e:9c:33:64:4c:d2:57:81:a6:c7:
51:11:8f:52:b6:83:03:f6:d6:d6:c8:49:b7:3c:3a:
f3:60:fc:51:bd:36:69:c1:00:f8:e3:03:8a:31:52:
65:b9:b2:7b:70:3b:02:5f:b6:ba:58:7c:6e:66:db:
2c:27:31:c3:e0:77:24:bd:46:1f:14:78:28:ec:b7:
4e:6e:b6:47:2e:34:30:61:40:18:50:f4:38:c7:e4:
32:76:b7:14:8f:ae:18:59:6f:ba:68:65:56:46:33:
94:30:ab:21:45:b5:bc:0e:c6:95:f3:08:7e:a5:7b:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:81:C6:74:E0:65:1E:D4:B4:17:6D:D4:B4:5D:7A:23:6E:7A:D1
X509v3 Authority Key Identifier:
keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c4:69:dc:67:48:8c:69:fb:5d:4e:18:08:c7:c8:a4:c9:6c:
4b:b5:62:a3:c0:a5:87:b0:36:26:1e:94:87:e3:57:12:07:77:
6f:c9:1e:e7:4a:e9:54:bc:41:0d:ca:d9:68:40:c4:80:ca:f3:
67:3c:41:ef:1b:fa:f5:c2:9d:84:a1:2b:73:73:0f:a2:d8:bc:
ec:01:4a:bb:d5:98:4c:65:88:cd:90:02:d0:da:6f:5c:7a:0a:
e8:09:1f:af:04:5d:d9:e3:f7:3b:c9:e2:c8:3d:1f:69:fd:b1:
9d:25:28:16:d5:ca:4e:05:f7:3e:da:74:53:20:98:bd:ff:b0:
41:b4:97:9a:00:1d:b4:1a:af:a2:73:00:b7:53:9b:3a:5c:e1:
7c:02:37:66:82:91:17:a1:7e:5e:03:2d:d0:27:08:00:86:3d:
88:7c:12:63:64:2b:e1:c6:64:f8:36:94:d2:03:c4:43:9a:68:
a6:b7:5d:a3:6c:ed:13:25:31:ef:6f:be:c3:93:77:bc:14:7f:
3e:c2:87:41:7f:30:82:95:4a:de:72:bb:e6:61:53:ec:32:e1:
8e:9c:02:1f:6e:c6:ec:c2:09:71:0d:bf:48:bd:21:de:2d:54:
6e:ef:3c:d5:a0:87:0a:50:f2:dd:92:a9:6b:d7:aa:17:37:33:
52:e5:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:16 2025 by rpki-client