Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: bStq3lLI3iLic/KbHio9bmFKseyGaK1IXW+LkdJZFRk=
Subject key identifier: 48:CD:F8:70:DA:FA:75:5D:AA:16:88:ED:43:9F:4C:B2:FC:EA:C9:F8
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 0199240CFE6F0EAF4E18EEFEDC41F7BF539F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 075B
Signing time: Sun 07 Sep 2025 12:00:55 +0000
Manifest this update: Sun 07 Sep 2025 12:00:55 +0000
Manifest next update: Mon 08 Sep 2025 12:00:55 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: jLmk9qiMTTAJCQyxAVyiFuv1n0S0IxKUcACFp5qtJlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:fe:6f:0e:af:4e:18:ee:fe:dc:41:f7:bf:53:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Sep 7 12:00:55 2025 GMT
Not After : Sep 8 12:00:55 2025 GMT
Subject: CN=48cdf870dafa755daa1688ed439f4cb2fceac9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:d1:90:71:95:c9:ac:88:f7:0a:fc:a2:c2:
cb:9c:5a:74:1e:28:da:79:1d:be:28:04:3c:16:4e:
ce:3b:09:21:84:ca:5f:00:05:4d:99:66:6e:43:17:
1f:84:c5:79:07:8d:c2:9e:56:12:69:bc:5e:96:7d:
e1:92:f7:79:0f:12:67:96:c1:62:ca:8c:45:0b:7a:
ca:a4:c0:6d:2b:d0:86:cc:be:cc:a5:c5:9b:52:31:
8c:9d:43:42:bf:2c:ce:8f:fe:cd:55:ed:97:14:fb:
dc:57:1f:6e:5b:3d:e7:ef:7b:30:7c:3b:33:f5:e5:
28:bc:d0:78:13:98:b5:6d:8b:55:f6:d4:6f:81:9f:
13:ca:b4:48:5f:2c:af:6b:d1:cd:52:91:03:73:a9:
4c:3f:16:e7:ca:03:7b:f7:d6:63:a6:d0:d4:60:a2:
47:6d:f1:2a:a6:61:13:d3:e1:18:7e:1a:dd:0f:00:
05:e8:88:a9:d7:78:33:c9:6a:f0:01:76:b9:86:91:
d5:5c:eb:ac:60:5d:ef:76:18:3e:7a:86:de:ba:e4:
08:92:7e:ec:95:0c:f6:7d:80:62:21:d9:96:91:a5:
e0:73:da:cc:39:7d:8e:80:38:e1:c1:b0:f7:e6:32:
a7:98:ac:3f:53:3d:fe:98:86:51:ee:d5:b3:ab:74:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:F8:70:DA:FA:75:5D:AA:16:88:ED:43:9F:4C:B2:FC:EA:C9:F8
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6c:ff:d0:48:c4:10:a5:82:6b:d9:92:33:a5:c4:ac:df:d5:
22:b5:1e:ab:e6:a2:d9:0f:a7:a1:c4:68:42:8e:36:2c:41:d5:
c0:fb:af:b7:b4:28:05:37:b2:f8:82:75:10:bc:c1:17:a8:5b:
14:7b:c4:60:65:1e:b3:7b:1a:66:4b:06:4d:0b:ce:ec:a9:be:
12:72:f6:ab:5e:c6:42:14:22:f0:99:fb:ed:42:27:b5:eb:ef:
f9:87:a8:22:58:44:6d:9b:56:a3:76:09:44:a6:15:a8:eb:e5:
a4:c5:7f:45:4c:6c:8f:46:f2:3c:07:60:9e:0f:2e:88:3a:03:
34:5c:1f:62:22:32:a8:0d:f8:87:83:1c:b0:01:55:3b:79:f7:
96:f5:1e:0b:20:1d:96:4b:84:34:db:48:b5:16:7e:51:cb:43:
ff:13:ad:8b:00:a8:ff:0f:13:6a:9a:e9:fc:b5:41:0d:9b:2d:
12:a6:ca:17:c0:87:87:aa:d2:77:24:e3:ca:e4:53:e9:a2:82:
be:7e:f1:ae:ac:08:9b:c2:c2:e4:47:18:ad:41:2f:f8:cc:5b:
86:10:b8:e7:ab:8f:6b:a9:6a:61:8c:e7:0a:44:c3:32:54:8f:
f1:c6:b2:c0:bd:42:68:2a:d7:45:22:fc:e5:06:21:c5:9c:9e:
66:7f:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:41 2025 by rpki-client