Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier: DJV1bs+r21svmSVpwZWFtoI88Tvan61fwaZQFmdPoq4=
Subject key identifier: 0E:68:13:E0:DD:08:A9:80:35:00:7A:EE:28:68:2A:96:14:20:A0:A6
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial: 019747425882F1142A98FBB6919B99BB8ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number: 040A
Signing time: Fri 06 Jun 2025 22:00:19 +0000
Manifest this update: Fri 06 Jun 2025 22:00:19 +0000
Manifest next update: Sat 07 Jun 2025 22:00:19 +0000
Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: haHljo6+N7cVo9v1jeS/Kam2d5+ftukXStJ8KbTTNMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:58:82:f1:14:2a:98:fb:b6:91:9b:99:bb:8e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Validity
Not Before: Jun 6 22:00:19 2025 GMT
Not After : Jun 7 22:00:19 2025 GMT
Subject: CN=0e6813e0dd08a98035007aee28682a961420a0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:5b:4c:a8:da:d4:0d:df:f3:d3:cc:7b:1b:
8a:c7:62:59:bb:69:3f:75:53:1d:1c:d3:88:f9:65:
3d:85:ec:1c:47:3f:16:1d:9b:ff:81:20:2a:ae:a1:
08:f9:f4:d9:80:0e:39:2d:95:d5:c8:92:c3:a6:6b:
b1:8a:be:49:50:ca:ef:da:d5:06:97:dc:3b:fc:03:
26:4f:f0:f6:ea:13:0e:ae:9b:cb:0f:12:10:fd:59:
97:12:9e:e6:11:54:cc:ab:44:ae:69:d1:57:c0:b5:
87:5c:c6:73:8d:14:72:05:46:b4:eb:c6:79:f4:93:
53:18:42:1f:ba:be:6b:de:00:c6:86:9c:03:77:66:
45:00:9d:d2:de:f5:69:db:b6:10:37:0d:cc:af:00:
ed:21:06:48:91:d6:97:72:4c:2d:62:76:64:44:7e:
07:ec:3f:0d:89:75:44:1b:b9:18:d7:e9:93:6b:e8:
77:e3:5e:09:6f:79:51:4c:1c:4d:56:d1:89:1e:d8:
5c:b1:37:28:1b:f9:d2:ed:ab:a2:86:2d:19:d2:6d:
af:59:fc:75:03:28:f9:1d:e2:7f:1a:9b:e2:c1:92:
76:f0:d3:40:64:db:66:d5:ee:45:5e:30:0c:e0:2d:
62:1c:d2:1b:96:be:63:df:5b:ed:eb:18:01:0d:32:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:13:E0:DD:08:A9:80:35:00:7A:EE:28:68:2A:96:14:20:A0:A6
X509v3 Authority Key Identifier:
keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d7:56:eb:a1:32:6d:ad:01:21:12:1d:61:2e:32:51:c4:0a:
b7:22:b6:65:e8:4f:87:2c:28:25:47:33:d7:e3:36:d3:06:42:
aa:fc:40:a8:61:fa:38:e6:04:e5:af:c0:34:47:ff:b6:49:0f:
d9:f2:c9:28:5a:cc:29:6b:0c:75:9b:37:48:c7:cf:f8:ad:23:
ac:f7:ec:0f:7d:03:81:0e:90:3b:60:81:a9:c1:94:f9:99:54:
f6:61:0d:a7:7d:30:e3:6b:5c:ff:78:8f:15:6e:2d:b8:59:5e:
fa:c0:10:fd:16:3a:ce:4c:a9:85:67:11:49:df:4f:68:ba:9e:
a7:3c:51:e6:af:61:c0:57:18:6b:dd:b5:3a:66:dd:74:4b:b3:
40:e8:02:8c:be:8f:5a:a2:46:fa:fc:90:6b:7e:56:3f:3b:ca:
9f:2f:63:2b:ed:86:09:35:bc:06:7f:89:4a:ad:04:6d:10:22:
ae:82:9f:6b:d8:dd:5e:0f:21:75:51:ca:d9:99:5b:85:49:a3:
c2:35:66:4a:65:63:46:bd:26:cd:c5:ae:b2:bb:91:ef:2a:dd:
ba:d0:76:79:8b:ae:93:aa:ba:86:a4:d2:8b:ff:c6:c5:be:31:
7b:a0:04:2b:b5:4b:e0:f6:10:65:00:04:57:66:99:f0:a0:16:
d6:aa:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:03 2025 by rpki-client