
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: ROKP1ckZiio+OOMf0gF+jALPdzgBC0Ub4KZZeZAiR4k=
Subject key identifier: C7:0A:53:3D:B0:11:06:1D:0D:33:4C:66:8F:B7:8F:08:FD:D9:A7:A4
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 01992255F1B2EA6A6DA38FA9D373DB86AE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 06A4
Signing time: Sun 07 Sep 2025 04:01:21 +0000
Manifest this update: Sun 07 Sep 2025 04:01:21 +0000
Manifest next update: Mon 08 Sep 2025 04:01:21 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: XH1z2MU2AkDwn4bvpPBYE7E/q4/QhKVlmX0/Y0zKDN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:f1:b2:ea:6a:6d:a3:8f:a9:d3:73:db:86:ae:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Sep 7 04:01:21 2025 GMT
Not After : Sep 8 04:01:21 2025 GMT
Subject: CN=c70a533db011061d0d334c668fb78f08fdd9a7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:fb:fd:49:ba:30:a4:38:78:a7:b5:c4:96:
5d:5d:01:36:b9:39:78:1f:81:61:53:b5:02:4b:39:
d7:02:70:36:8b:0f:1c:16:08:30:95:56:d4:5e:03:
cb:73:95:44:25:48:e4:72:20:a6:04:4b:b8:89:2a:
1f:0a:8b:6b:75:29:f8:bb:e8:d7:e4:4c:92:11:94:
76:13:f7:dc:75:00:19:cd:41:ca:eb:a3:db:05:88:
10:31:4e:3f:cb:de:0d:5f:0b:18:a8:40:21:c3:ba:
6b:ff:ca:5f:ae:f7:96:ce:56:4f:76:4b:ab:db:11:
d8:e2:7a:95:05:d3:d9:c2:29:f9:1e:a5:da:fa:85:
09:da:84:ab:ff:ae:94:68:38:4a:54:06:9e:cc:79:
9c:c3:0f:b4:35:e3:5c:ed:d5:a9:d7:f8:67:8e:3d:
70:1f:46:93:63:c7:1c:85:8f:18:a0:29:71:c9:c2:
6d:1f:09:f0:e8:14:cd:90:d5:86:49:a1:af:3d:ea:
78:60:e2:ae:6c:71:40:b8:8f:ea:8c:cb:e3:9f:e6:
0f:81:f3:55:32:99:db:b2:ad:35:40:88:e5:e8:14:
18:73:bc:24:f5:79:cd:7d:70:1a:5e:04:d3:3a:ae:
56:cb:ef:19:a5:97:69:36:77:07:36:c5:a4:92:61:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0A:53:3D:B0:11:06:1D:0D:33:4C:66:8F:B7:8F:08:FD:D9:A7:A4
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cc:06:37:c8:74:6b:f1:dc:b6:90:a8:bc:59:07:e6:d6:fa:
ac:5c:39:02:e3:8f:1e:48:f4:fe:dc:fc:bb:80:64:7f:a9:b5:
59:ac:fe:5d:6e:b8:62:46:6d:d4:1c:aa:9e:36:4f:2b:39:44:
dc:52:aa:ee:69:d1:47:e7:13:80:69:aa:3a:3c:0c:5f:e5:61:
2b:d3:84:a3:73:89:b3:c6:65:86:31:67:34:42:39:28:9d:08:
57:73:7a:3f:73:e3:b2:ea:8e:9a:9a:a5:9c:d8:9a:26:28:b5:
ce:06:0e:cb:c4:f3:1d:28:6b:0c:45:80:5f:8b:f0:b8:a0:e8:
1d:0f:29:17:6e:37:0f:06:f2:2f:ce:c2:57:a0:1e:67:1c:b8:
ea:44:f5:df:28:d8:fd:33:63:5f:24:cc:31:8a:84:bf:b8:36:
18:f3:03:d6:7b:96:8c:78:dd:b9:fd:ff:02:cc:75:7b:d2:88:
81:a3:7d:65:bd:ab:6c:dd:bc:52:e7:c2:55:42:e1:83:61:bd:
3c:cd:bf:62:03:fe:f5:bb:42:b8:91:25:da:4f:e2:32:94:19:
a7:05:b3:3e:c6:3c:ca:41:5f:7f:95:50:d9:ba:b4:df:30:ab:
69:16:2e:24:6f:4e:93:97:e8:7b:83:57:c6:02:b1:71:a9:5e:
54:8e:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:04 2025 by rpki-client