Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier: nBdSs8qcTidUzywVIynfBz1Be2LZ+AtCLHGfyg1HPw4=
Subject key identifier: F2:9B:CE:6C:35:B6:C7:05:5D:37:2D:10:1F:19:10:66:22:B0:64:FA
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 01974A7AC42F4C219007EA70A18E874C4AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number: 058E
Signing time: Sat 07 Jun 2025 13:00:48 +0000
Manifest this update: Sat 07 Jun 2025 13:00:48 +0000
Manifest next update: Sun 08 Jun 2025 13:00:48 +0000
Files and hashes: 1: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: OjJi6nhmvXqFwclrIoY0zw7xTE65xXHtt+riXD9Da7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:c4:2f:4c:21:90:07:ea:70:a1:8e:87:4c:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: Jun 7 13:00:48 2025 GMT
Not After : Jun 8 13:00:48 2025 GMT
Subject: CN=f29bce6c35b6c7055d372d101f19106622b064fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:e9:b5:6e:ca:f8:83:5c:ce:a5:7c:ce:11:
26:51:3b:d6:81:6a:19:35:a1:d8:e0:db:9c:b2:ad:
3f:54:1d:9b:7d:2e:a7:7e:91:ca:97:1d:59:b0:6b:
76:5a:96:2f:83:b1:9c:de:92:e5:6b:56:80:ed:8b:
10:8d:9a:26:28:90:00:f0:6d:a1:fd:7c:4d:7e:c3:
f3:31:5a:ee:16:6c:a1:41:2b:dc:98:6f:19:2c:f0:
a6:65:55:82:d4:5e:1b:04:48:55:40:fe:82:12:64:
8a:67:77:6b:d2:da:0d:5d:f3:ec:18:f4:c9:72:e1:
11:af:f3:35:13:8e:66:d4:da:8e:44:71:98:14:d8:
c0:c9:8c:8b:62:8f:31:f1:4b:47:15:d9:24:54:60:
0b:f1:17:78:0e:c9:42:a2:fd:e6:21:5a:d8:44:f0:
1d:2d:db:81:29:e6:59:ef:a1:68:b3:42:9b:c0:98:
01:3f:61:98:c7:93:54:1c:fa:0c:77:02:19:66:96:
82:a9:24:41:38:67:bc:90:5f:7e:34:22:18:9a:37:
f8:ed:53:fb:48:30:9c:c9:73:33:af:ab:49:99:c7:
b8:b9:7b:5d:68:25:11:a5:e4:4a:1f:fe:c9:74:f5:
09:b7:ee:9a:4e:7d:cc:7e:15:32:85:0f:56:c4:1f:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:CE:6C:35:B6:C7:05:5D:37:2D:10:1F:19:10:66:22:B0:64:FA
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:17:6e:58:2a:4e:88:8c:9f:d6:45:b7:43:9c:34:e9:96:71:
c5:78:6e:d6:dd:51:22:33:e5:f2:08:47:c3:26:50:a2:bf:b7:
cc:bf:bb:b4:65:1c:98:ba:71:81:ff:e4:48:18:dc:62:c4:db:
1f:d8:ad:17:2d:d1:ef:2d:a0:48:70:dc:95:41:ec:8d:a3:23:
da:14:3b:c2:21:02:21:ad:42:93:17:32:67:1a:4d:a1:5b:21:
22:bf:7b:e4:c7:60:74:35:7b:80:ba:51:51:a9:88:d4:8f:70:
01:cd:6f:a0:90:3d:12:72:a3:d6:74:84:82:66:22:42:c7:fe:
ca:1f:81:96:14:b4:19:aa:7b:2f:77:ee:d6:8a:39:6e:f8:e7:
24:5e:d9:ec:ba:05:01:ea:3e:08:a3:21:9b:04:17:c4:6e:0e:
9c:e5:4a:ec:5c:75:20:72:3f:8a:d3:ab:11:70:bb:b4:d3:91:
32:eb:c7:54:f1:58:c4:93:60:d0:a5:fb:2a:ad:e1:1d:3b:03:
6b:82:7a:8e:5e:66:9d:fa:fe:dc:8d:33:3e:54:e5:06:b5:d1:
c7:4c:db:08:03:e5:19:a9:88:07:16:66:93:24:b5:a6:d0:5d:
11:3f:93:a9:25:27:a3:3b:0d:8f:80:70:60:f6:55:f0:3e:ed:
ae:8d:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:36 2025 by rpki-client