
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier: McTpROMBCMJGVhG1HxpHUitqO3Bm93ttZ4LstXJlcro=
Subject key identifier: CE:AC:98:82:46:89:5D:C8:17:9E:5E:9F:7D:BB:85:CC:05:6A:40:02
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial: 01974B1F548E2F6CFBD596414EC9F92E38C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number: 14ED
Signing time: Sat 07 Jun 2025 16:00:33 +0000
Manifest this update: Sat 07 Jun 2025 16:00:33 +0000
Manifest next update: Sun 08 Jun 2025 16:00:33 +0000
Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: l7270aFpZcCWOssHPCWaBS3KYjakskq06xmcBjTsjlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:54:8e:2f:6c:fb:d5:96:41:4e:c9:f9:2e:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Validity
Not Before: Jun 7 16:00:33 2025 GMT
Not After : Jun 8 16:00:33 2025 GMT
Subject: CN=ceac988246895dc8179e5e9f7dbb85cc056a4002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:ff:0d:b8:cb:ec:52:36:ff:8f:a9:14:c5:
dd:2b:66:6e:c0:9a:a3:98:2c:8d:29:f7:48:65:12:
7d:85:7b:fd:ee:ad:d0:61:35:83:61:b1:50:7b:16:
98:1b:b6:db:10:a3:32:52:11:b0:0e:8c:5b:55:a1:
f5:ae:90:b1:d2:52:08:1b:ac:ee:e5:8e:65:e5:0e:
7e:3f:4a:9e:ad:ff:f1:76:b6:48:f8:43:4b:24:93:
89:67:0c:9e:71:02:83:cf:cb:94:e3:33:1d:d6:c9:
41:ee:80:4a:d0:22:0f:54:4f:21:62:f9:a2:fb:81:
b9:d3:5f:31:a6:dc:70:92:48:c7:72:44:6e:88:c1:
08:44:33:96:73:ef:1d:8b:94:3d:60:b9:cd:9b:4f:
2c:b3:f3:99:a9:5b:f0:b7:82:65:d5:bf:21:24:c6:
ed:76:a8:c7:38:af:e6:ea:1a:43:53:d9:bb:08:50:
da:53:b8:17:9d:34:c3:fc:35:7e:0d:f8:9f:cb:a0:
ac:fe:12:6b:79:bd:ec:6d:fa:6b:fa:b2:a3:8f:f3:
fc:54:ff:0b:bb:d4:9c:80:d6:82:bd:4a:c2:4a:e8:
52:44:1d:00:e5:4c:49:36:59:55:a8:4c:fd:0b:72:
97:aa:34:ed:a8:71:cc:a8:98:aa:55:88:9b:a4:5f:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:98:82:46:89:5D:C8:17:9E:5E:9F:7D:BB:85:CC:05:6A:40:02
X509v3 Authority Key Identifier:
keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:19:1d:2a:68:35:46:60:73:16:5b:62:5e:cb:45:0a:df:e7:
c3:6d:e2:6d:ab:16:22:46:e4:16:2d:44:3f:14:f9:e0:eb:a5:
8b:49:a8:49:de:57:d0:94:22:5e:c5:53:72:38:60:9e:1a:11:
bb:b5:de:72:c4:89:27:a0:f5:67:76:41:f8:ac:af:0d:d3:aa:
3b:cb:ef:8d:65:1d:84:6f:07:8e:37:2e:3c:60:05:2c:f8:64:
30:ec:cd:f8:0a:1b:c9:3e:6b:e8:d3:71:d2:02:bd:17:a4:86:
c0:ad:3f:6b:85:46:f5:ea:66:22:08:bd:6c:51:4d:ee:98:86:
e6:40:f9:ad:f0:fa:00:e6:9c:1f:24:91:b7:ad:52:ee:09:53:
2b:d3:0a:7b:bc:ae:00:6d:2a:f5:1d:27:a0:07:44:8f:13:37:
d5:0c:a0:95:d6:45:39:2c:45:82:27:3f:0f:7e:d2:17:6e:e8:
d3:c3:34:85:86:ef:56:15:93:8f:f1:54:78:bb:51:11:46:44:
bd:f4:30:f7:ad:af:c4:4a:8c:76:a2:a9:cd:b8:a8:e7:8e:3a:
05:37:86:cf:f6:c5:d3:62:c4:fb:14:c6:4d:3e:ad:e2:b4:d0:
cb:06:ab:ea:7b:7a:1a:57:18:b2:8c:a5:2c:91:54:f1:8d:e6:
6c:08:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:25:55 2025 by rpki-client