Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: P5qrN04Ms6seNMml6tbMYEJiICmmOW/JL3whSwQd6Tg=
Subject key identifier: C5:3E:89:90:47:25:BA:C1:60:C8:75:D1:6B:1E:22:3E:54:5C:D9:BB
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019921B1CD29FB4DC0B9F63EA068323388D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 03A0
Signing time: Sun 07 Sep 2025 01:02:04 +0000
Manifest this update: Sun 07 Sep 2025 01:02:04 +0000
Manifest next update: Mon 08 Sep 2025 01:02:04 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: bwdVKGMQrulOcnVR3BXcgzTNKFeDByQXU3oJJyNp4OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:cd:29:fb:4d:c0:b9:f6:3e:a0:68:32:33:88:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Sep 7 01:02:04 2025 GMT
Not After : Sep 8 01:02:04 2025 GMT
Subject: CN=c53e89904725bac160c875d16b1e223e545cd9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:44:cc:35:47:44:c4:f3:69:3d:65:e4:46:
ce:2f:e6:2d:c6:7d:bf:14:d4:50:22:06:92:f5:10:
83:70:09:6c:83:29:13:34:21:9f:c8:2f:8c:41:b3:
e6:17:ef:3a:4b:8b:51:71:b9:79:4e:5b:ae:b9:a6:
98:4c:c2:eb:71:2d:a2:54:e8:af:c8:aa:d3:fa:31:
ee:d7:71:61:b2:26:10:9b:83:a3:5b:89:87:e6:a1:
17:d2:cb:11:0d:c9:1c:2e:12:96:19:96:36:cf:d4:
91:cd:35:f4:22:e5:29:fc:7f:b5:7d:7c:fc:70:df:
1c:94:fa:69:7d:6c:66:f9:e0:53:21:7f:97:b7:16:
54:13:0d:33:d6:93:b8:c9:e5:92:87:0c:bb:f7:d1:
bc:33:6e:23:09:da:a6:28:51:73:62:87:ab:05:5f:
d6:f4:64:d4:11:3c:e1:2c:b9:65:c7:7f:9d:0f:19:
3d:f7:d2:1f:a6:93:cf:e8:06:85:8f:89:9b:ad:aa:
e2:55:de:96:73:0d:26:14:4a:bc:0e:84:b3:8c:ec:
8a:8f:27:15:12:30:96:19:0c:d2:41:d3:3e:98:36:
bd:f6:91:9f:9a:79:72:56:26:3d:97:6a:a0:11:00:
34:d5:b6:e3:bd:63:4b:cf:d3:68:96:17:2c:2b:f1:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:89:90:47:25:BA:C1:60:C8:75:D1:6B:1E:22:3E:54:5C:D9:BB
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:3f:58:fe:46:9c:24:22:5a:25:23:ec:52:a7:32:51:42:
e0:6d:e9:ca:87:9c:0d:24:18:2a:a3:36:b8:f8:8a:a8:0e:76:
77:11:f4:e9:f8:7d:dc:ba:12:95:c0:5d:13:ab:8c:d6:4c:80:
e2:d2:de:41:d9:ab:06:04:58:72:fa:ad:c2:0c:11:e5:bd:d0:
cc:5d:5e:7f:92:b5:a4:58:78:b1:de:e3:43:07:21:65:96:0c:
cf:79:22:37:91:2d:2c:80:f8:6f:3b:e3:2e:84:5d:60:5a:b5:
47:15:d9:fe:4e:47:85:7c:40:88:44:8f:9c:f6:9a:d8:62:f9:
d9:32:94:c1:7b:e0:6b:1b:19:1b:d1:5d:38:00:1c:eb:dd:21:
4f:28:6f:7c:ce:99:1a:da:31:8b:f9:e4:47:a7:12:c6:02:ce:
e0:12:93:35:10:1f:7c:bb:44:71:d5:a0:d7:e2:c1:ef:8f:32:
8a:94:12:09:1f:b9:e9:a4:a5:fe:40:4e:b8:d5:8a:7d:0e:6a:
5a:96:14:02:19:1b:f3:17:5b:e3:98:09:04:2c:58:ae:5e:76:
cb:4a:55:fa:bd:e1:c9:6d:04:6a:90:79:0c:9b:c6:bb:a8:3c:
b4:51:3e:73:11:92:f1:52:d6:79:bf:9c:88:d8:80:ee:6f:33:
8c:ae:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:38 2025 by rpki-client