Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: xAsQuL4kip0jJL8t+HcOZF4aDnax8o35CfwwiASxfL4=
Subject key identifier: 64:0C:8E:DF:86:B4:5A:4E:5E:A0:C0:02:2D:68:BC:4F:CC:17:C4:CB
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 019921B13EBCE4E01C08BAAC69B343CFE43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 0910
Signing time: Sun 07 Sep 2025 01:01:27 +0000
Manifest this update: Sun 07 Sep 2025 01:01:27 +0000
Manifest next update: Mon 08 Sep 2025 01:01:27 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: RIVoofeeoVomC9jmEbz3uyEjuwPZ/wADJfvFUjKWf04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:3e:bc:e4:e0:1c:08:ba:ac:69:b3:43:cf:e4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Sep 7 01:01:27 2025 GMT
Not After : Sep 8 01:01:27 2025 GMT
Subject: CN=640c8edf86b45a4e5ea0c0022d68bc4fcc17c4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:22:92:78:f0:58:0c:45:f2:a0:7c:0b:ea:
0d:d9:25:13:d1:84:3c:77:bc:c5:7d:fe:4d:89:e9:
67:5d:c7:09:7f:12:6b:e5:ac:a6:3c:fc:c5:96:d4:
15:fb:1b:6b:a4:a4:8d:b1:49:8f:a0:5f:b9:51:16:
af:fa:b1:8e:8f:29:9c:74:f1:38:ea:0c:e7:50:8b:
78:08:04:b0:64:80:58:2a:18:01:ce:da:b0:8e:a5:
d6:e9:f8:43:42:a8:14:6b:81:de:5d:70:4c:03:cc:
2a:46:cd:5f:d0:6c:5c:dc:35:c8:df:13:ca:a0:46:
c2:fe:26:15:af:1a:b2:c3:09:84:7f:44:df:6c:57:
64:d8:e3:43:ad:f0:58:14:e7:b3:1a:dd:c3:cd:f3:
76:af:75:6a:85:b1:55:23:69:6d:9c:05:62:ee:89:
94:ac:ce:5a:4a:07:76:e4:3b:71:01:37:5b:dc:c2:
cc:30:ae:f8:01:a6:ba:c2:e8:cb:31:76:97:cb:6c:
76:56:45:cb:44:f7:0c:df:b4:10:19:50:20:ed:1e:
66:42:d7:df:af:82:6d:25:24:6e:6d:59:bc:a6:61:
3b:07:40:69:e3:03:f6:62:fd:cb:60:85:4f:d8:29:
ef:0f:8f:fc:60:16:98:c6:4e:13:c5:71:4d:91:a4:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:8E:DF:86:B4:5A:4E:5E:A0:C0:02:2D:68:BC:4F:CC:17:C4:CB
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cf:17:24:17:d6:81:e5:01:62:09:12:67:fd:cc:0c:1d:bd:
cf:23:20:11:04:85:10:5a:16:dd:f5:02:96:01:28:28:8a:64:
d3:5a:f7:56:af:fe:13:d4:b1:16:4c:80:5c:5e:e9:2c:6f:83:
50:9b:33:09:2b:54:1b:aa:2f:26:1f:6b:d3:14:e9:0d:49:5e:
4b:2a:46:37:67:6f:95:f4:25:0a:86:9e:2c:66:87:cc:11:50:
fa:4e:2c:6c:cd:4d:fb:31:21:f0:aa:95:7a:9c:7c:b6:d3:a3:
24:32:a7:65:6c:65:9f:64:ee:63:e9:55:b6:da:36:70:51:84:
24:cf:9b:c4:1c:02:ae:c2:55:3c:5e:be:63:2b:19:f6:10:ae:
61:2d:22:8c:7f:f4:35:c0:8b:4b:11:f4:5d:5e:ff:a8:88:9b:
c3:3b:41:10:4c:59:f9:cf:06:6e:f0:bf:73:5e:1e:a7:d0:c3:
fa:24:52:af:8b:c9:8d:eb:02:55:2e:c7:15:94:9d:b3:c0:31:
78:b0:22:c9:a8:e3:e6:95:72:6e:f5:39:be:2b:db:24:79:c4:
82:fa:7e:e2:4b:0d:3d:47:e3:70:67:42:76:e0:b6:2c:c1:ce:
ef:a6:59:f1:ea:ca:85:d0:1d:31:33:ed:8c:34:d0:9b:df:64:
2a:b8:70:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsT685OAcCLqsabNDz+Q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTdjMWEyNTM3ZmQwMzU0MDg3NTk5Nzg3Y2FhODQyZmVk
NjBiN2YwHhcNMjUwOTA3MDEwMTI3WhcNMjUwOTA4MDEwMTI3WjAzMTEwLwYDVQQD
Eyg2NDBjOGVkZjg2YjQ1YTRlNWVhMGMwMDIyZDY4YmM0ZmNjMTdjNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMciknjwWAxF8qB8C+oN2SUT0YQ8
d7zFff5NielnXccJfxJr5aymPPzFltQV+xtrpKSNsUmPoF+5URav+rGOjymcdPE4
6gznUIt4CASwZIBYKhgBztqwjqXW6fhDQqgUa4HeXXBMA8wqRs1f0Gxc3DXI3xPK
oEbC/iYVrxqywwmEf0TfbFdk2ONDrfBYFOezGt3DzfN2r3VqhbFVI2ltnAVi7omU
rM5aSgd25DtxATdb3MLMMK74Aaa6wujLMXaXy2x2VkXLRPcM37QQGVAg7R5mQtff
r4JtJSRubVm8pmE7B0Bp4wP2Yv3LYIVP2CnvD4/8YBaYxk4TxXFNkaRrOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQMjt+GtFpOXqDAAi1ovE/MF8TLMB8GA1UdIwQY
MBaAFKmnwaJTf9A1QIdZl4fKqEL+1gt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEt
NDhmMWU1MTA5MDQ3LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEtNDhmMWU1MTA5MDQ3
LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm88XJBfW
geUBYgkSZ/3MDB29zyMgEQSFEFoW3fUClgEoKIpk01r3Vq/+E9SxFkyAXF7pLG+D
UJszCStUG6ovJh9r0xTpDUleSypGN2dvlfQlCoaeLGaHzBFQ+k4sbM1N+zEh8KqV
epx8ttOjJDKnZWxln2TuY+lVtto2cFGEJM+bxBwCrsJVPF6+YysZ9hCuYS0ijH/0
NcCLSxH0XV7/qIibwztBEExZ+c8GbvC/c14ep9DD+iRSr4vJjesCVS7HFZSds8Ax
eLAiyajj5pVybvU5vivbJHnEgvp+4ksNPUfjcGdCduC2LMHO76ZZ8erKhdAdMTPt
jDTQm99kKrhwcA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:12 2025 by rpki-client