Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: Jh9cZ1dOYcBByseR6jx0UC85uWKf8G/N8Cd2QxX8AgE=
Subject key identifier: D1:FE:83:14:87:1C:D0:2E:57:FC:C0:56:54:E1:9E:28:43:46:E3:4F
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 019921B2266610842263FC74DD5246C237DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 090D
Signing time: Sun 07 Sep 2025 01:02:27 +0000
Manifest this update: Sun 07 Sep 2025 01:02:27 +0000
Manifest next update: Mon 08 Sep 2025 01:02:27 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: +48Roj8cKcnUF0GRYv7IeD8XKKRO0xiJ/5hSvNwvVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:26:66:10:84:22:63:fc:74:dd:52:46:c2:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Sep 7 01:02:27 2025 GMT
Not After : Sep 8 01:02:27 2025 GMT
Subject: CN=d1fe8314871cd02e57fcc05654e19e284346e34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:f3:99:3e:84:d6:a3:e6:e3:5d:ab:df:31:
9a:88:18:76:a5:d0:31:57:0f:a7:03:45:38:eb:7b:
fe:39:a7:8f:2e:42:1e:75:a3:20:2a:35:b8:8c:7e:
89:e6:df:f9:4e:e9:65:66:a2:d9:82:ca:e8:2f:1a:
4e:38:f1:47:3f:ac:af:31:85:56:2a:51:e7:6c:9d:
5d:88:ea:86:8a:32:a8:21:26:dd:29:54:3a:25:d6:
dc:ac:18:d8:22:14:e2:e9:fb:ba:ac:57:01:ac:58:
63:58:53:7c:6b:c8:8f:4b:c1:fc:cc:d9:48:03:8d:
f9:de:1a:a4:b7:d0:e3:4c:6c:a5:52:af:d2:a6:0e:
ec:55:49:36:1d:d0:e0:4c:23:99:8c:94:9c:ec:ea:
86:89:7e:de:0d:b6:b0:fd:9c:29:f6:e1:69:be:ec:
0c:c4:1a:17:77:f7:8d:49:50:d4:87:de:3a:96:ec:
e7:2d:8b:74:6d:34:ac:72:06:14:82:93:19:fb:97:
a4:74:25:ad:d5:8d:0a:01:02:ba:fb:11:81:72:f9:
a3:b2:2d:85:6c:37:14:de:0d:06:8e:fb:5d:26:b7:
27:49:56:07:fe:af:2f:54:78:fb:4f:d4:28:f4:9e:
6c:5a:21:8d:bc:b5:3f:db:6d:32:67:39:56:f2:46:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:83:14:87:1C:D0:2E:57:FC:C0:56:54:E1:9E:28:43:46:E3:4F
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3f:c3:62:25:9f:08:5f:a9:10:1d:99:3a:0a:2c:d9:bb:cd:
44:db:c0:45:98:4a:a4:22:c1:35:81:d2:2f:25:75:d6:af:cd:
30:9c:ac:e2:cd:e6:c2:00:20:4b:69:85:88:40:d4:1f:91:80:
27:8f:98:84:ac:7e:40:58:02:a2:ec:e2:c8:ab:0b:78:ca:ff:
6b:24:e8:cf:8d:8c:57:2a:21:1b:db:70:09:32:33:52:5c:74:
fc:1d:49:39:55:c9:a7:e9:02:71:54:76:e9:19:5a:97:02:a6:
41:19:48:e8:26:28:63:ab:e2:98:e5:86:2c:54:bd:26:66:12:
4e:94:22:74:92:89:53:ac:22:7c:b7:72:a4:38:30:1b:04:28:
9a:5a:b1:29:2b:7b:91:fa:65:cc:c4:60:47:a4:1c:a4:01:9d:
d6:e2:ea:55:a3:32:42:ce:74:f7:ec:0b:57:ce:7f:8f:f5:ae:
8a:aa:e9:ea:37:f6:3d:ad:db:d7:f5:b3:90:eb:89:c2:86:39:
c0:2a:ee:75:b1:49:46:66:bc:ec:23:1f:bb:da:53:2e:90:39:
3c:93:63:5f:5f:58:e8:d9:54:5b:09:97:67:0d:34:c8:44:d0:
e6:08:6e:23:29:3c:c2:59:ad:e3:bf:5d:4f:5d:97:fe:cd:3e:
ad:ff:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:33 2025 by rpki-client