Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: cZ1z8CYH8B10fEvDuSV0xQKHqCyYBtWiT/dglDEGVes=
Subject key identifier: DD:3E:73:0F:D4:AC:C0:69:0F:9A:F5:A2:21:73:7E:1D:99:83:FD:46
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 0198D5834BCC2DF9EC832A70F1201BA2C57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 0361
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: ZuYWXDaneTGTkqG+p2tXV2zY7PGkNxJHT0a9llANr8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4b:cc:2d:f9:ec:83:2a:70:f1:20:1b:a2:c5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=dd3e730fd4acc0690f9af5a221737e1d9983fd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:f5:4f:e1:c2:62:15:4a:db:78:d6:0e:fc:
0b:21:f9:76:11:bb:fc:04:ae:64:c7:7c:7c:5e:e5:
6a:98:b9:e0:82:28:84:36:da:06:7c:49:00:41:c0:
da:50:cc:c3:9b:72:48:f0:6f:09:b7:8a:9e:20:4d:
70:c7:91:eb:97:7d:dd:66:4c:6b:73:bb:ee:a3:74:
ee:10:11:86:6b:0c:02:da:7e:17:a1:2c:76:00:52:
71:05:81:51:1f:59:3e:51:01:7d:77:2a:36:e4:d4:
da:1b:fb:e9:6b:32:53:45:19:48:e7:51:72:ea:be:
3b:df:cf:6f:0e:91:1e:60:58:97:25:5c:2a:38:a0:
51:47:1d:45:04:fa:3d:20:3d:dd:17:4e:01:21:2d:
eb:54:f9:3f:f9:c2:07:52:87:de:77:29:94:73:a4:
20:40:24:71:8d:bd:ac:2a:08:c2:40:c9:e6:16:b8:
26:4c:53:f1:9a:23:2f:ba:85:c2:b7:d9:6d:43:a5:
f2:b6:1f:27:cd:f6:bd:9c:9a:0c:b4:c2:d2:77:28:
7b:11:14:45:2a:e5:8b:c8:d5:ae:ef:23:ae:4b:bf:
67:b1:4b:0a:f2:a0:94:7e:35:5a:ba:91:8d:36:28:
24:95:13:30:23:20:e1:86:f9:52:28:ae:df:42:6e:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3E:73:0F:D4:AC:C0:69:0F:9A:F5:A2:21:73:7E:1D:99:83:FD:46
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6f:1f:b6:36:dc:2a:23:7f:c5:69:62:90:9a:79:fb:9e:2d:
e8:b0:b1:70:98:3b:1e:63:0e:25:e9:c0:2e:d7:18:35:80:52:
38:ac:b8:39:ee:af:4e:95:05:a2:38:67:15:6c:43:c2:59:c2:
84:00:1c:a3:b1:13:b7:8c:42:4c:e2:40:d4:29:fc:80:8d:36:
5a:67:62:a6:94:1f:30:f4:75:b1:1e:78:f0:89:f2:82:b5:a5:
00:82:d3:0d:06:94:f3:8a:5e:c8:c0:ed:86:3a:9d:36:3f:af:
07:2e:8b:ec:60:85:2f:f9:92:23:2b:ab:c8:a1:95:a3:8b:4a:
e8:65:94:b7:4f:fc:23:75:40:f3:f2:79:a8:cc:7f:99:9a:09:
2f:78:2f:88:39:0e:98:9d:65:2e:55:85:dd:fc:4d:d3:ee:6e:
97:a0:fa:38:d4:ad:9f:ab:e2:6b:2d:98:96:16:5a:7c:a4:12:
1c:db:9e:2f:c2:84:71:30:c4:cd:8d:26:16:ca:f9:3a:78:bd:
44:31:16:1a:7f:77:d0:76:60:f2:d5:f9:6b:68:47:f7:54:f6:
34:03:92:b3:8e:eb:cc:2a:bc:ae:2e:5e:01:06:55:75:86:18:
82:d8:bc:9e:70:fe:82:ff:42:be:64:1e:fc:17:12:72:9d:34:
24:44:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:28 2025 by rpki-client