Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier: 0Tlm6K2cFOSWi+uIVpSgHdvOu40D/5LWZ3i9w9ccOx8=
Subject key identifier: C8:52:79:70:A7:A1:55:F3:4C:EB:AE:26:03:CB:B0:10:0E:D5:95:30
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial: 019923A08BAFAF2B9BF05FC82D0F013E4196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number: 0F59
Signing time: Sun 07 Sep 2025 10:02:27 +0000
Manifest this update: Sun 07 Sep 2025 10:02:27 +0000
Manifest next update: Mon 08 Sep 2025 10:02:27 +0000
Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: Acxqzhn71Cj1rQLOhTp9RyvUO96ld5NjILRpHrzsA00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:8b:af:af:2b:9b:f0:5f:c8:2d:0f:01:3e:41:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Validity
Not Before: Sep 7 10:02:27 2025 GMT
Not After : Sep 8 10:02:27 2025 GMT
Subject: CN=c8527970a7a155f34cebae2603cbb0100ed59530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:e6:76:db:ee:53:87:40:b5:4b:76:1c:0c:
22:9f:b3:bd:ec:6f:c0:53:a2:2e:d5:42:0d:2a:aa:
f0:6c:89:a7:1e:42:f5:21:3a:85:61:8b:19:8f:71:
b6:8c:f3:4c:c5:11:34:0d:ff:0c:0c:4a:d9:6f:f3:
28:9d:56:8a:6f:c2:c7:7a:58:a1:ad:50:88:c0:b7:
ad:54:e1:7f:9b:62:b1:9e:bc:a0:97:03:2e:a7:73:
6c:b2:54:5b:29:e3:25:6f:b9:66:3a:e6:00:cc:c5:
35:b9:ba:0f:a8:e0:c2:f7:59:26:da:30:26:8a:89:
37:ba:60:ad:5a:a3:fe:86:5c:d4:83:b3:cf:0d:a8:
51:e5:99:38:c7:68:ba:2f:c2:cc:56:62:44:cc:6f:
a3:8c:4b:d6:93:4d:40:10:cf:eb:a5:5f:f2:28:b9:
c4:19:b2:db:23:54:09:47:bb:c4:a3:94:96:f7:1b:
d6:98:a7:4e:7a:7b:d1:3b:7e:30:f8:45:87:6c:23:
b2:bc:f5:45:9d:6f:eb:74:da:48:5a:92:fe:fe:80:
a3:a2:70:49:86:dc:39:24:00:37:14:3e:d9:09:a9:
1d:18:49:94:96:e0:39:f7:64:5b:ea:bb:29:43:4f:
38:3b:38:9e:34:65:2c:71:fa:22:3b:03:dd:6d:88:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:79:70:A7:A1:55:F3:4C:EB:AE:26:03:CB:B0:10:0E:D5:95:30
X509v3 Authority Key Identifier:
keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:99:1a:a4:bd:76:c3:02:33:13:3f:31:e0:57:df:10:b1:78:
f1:e7:52:ad:db:cf:8f:7d:c7:91:f6:d6:68:a1:67:f1:8b:24:
75:fb:4b:35:4d:df:87:f9:bf:4a:0d:5c:d7:a6:61:94:ef:ef:
46:e9:3b:bb:4f:be:44:49:5b:85:62:f4:8e:3d:5b:bd:9c:36:
36:89:7c:bb:65:39:43:05:37:36:9d:c9:3d:8b:7c:e6:50:56:
a4:73:17:24:66:ac:16:e9:3c:c8:ee:9c:99:9f:b1:f0:ae:ae:
67:6c:ca:4b:59:b5:e6:86:bb:89:1d:0e:df:10:63:c8:ec:ee:
d4:ce:43:59:7b:62:2f:37:14:6a:a5:11:07:35:8d:85:99:53:
22:59:28:26:0a:77:7c:87:4c:89:d0:18:ea:b6:f6:ff:cc:e1:
ab:36:9d:cb:5c:45:0b:af:10:91:60:82:fe:dd:98:38:c0:80:
31:85:e8:44:e1:b3:32:d0:a1:1c:a2:8e:95:84:15:70:8f:75:
34:4d:b5:b7:82:e8:86:67:12:9d:de:e8:ed:84:16:34:b1:33:
82:b8:7c:dd:ce:c8:49:fc:a5:9b:8e:f9:1e:c7:af:13:d8:7a:
a0:6a:04:af:d3:bc:9d:15:8a:8f:90:1a:9b:5c:14:04:3b:b5:
52:4f:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:03 2025 by rpki-client