Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: zcGdsqgWBQadm38vBRZZlJvkcrYbXimGhHD5jbrt5WE=
Subject key identifier: F0:C8:B3:BA:28:BA:2C:02:14:E8:FA:1C:AC:F5:27:88:BB:A1:8C:B5
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 0198D6CD12E1297A2106435829BCA231C095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 12:00:20 +0000
Manifest this update: Sat 23 Aug 2025 12:00:20 +0000
Manifest next update: Sun 24 Aug 2025 12:00:20 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: KryycF2cDV4z5eu9BjL73QPnZlmxFom6b1oA14TTSOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:12:e1:29:7a:21:06:43:58:29:bc:a2:31:c0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Aug 23 12:00:20 2025 GMT
Not After : Aug 24 12:00:20 2025 GMT
Subject: CN=f0c8b3ba28ba2c0214e8fa1cacf52788bba18cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:37:dc:f3:fe:74:23:03:2c:8c:d2:53:da:cd:
0e:27:60:5d:f9:7f:6a:49:e8:ac:30:02:ab:e2:cb:
c6:e4:da:cc:e7:3e:89:49:ab:06:9b:af:ab:8b:70:
5d:ac:cc:f6:a1:36:51:ed:38:70:42:07:c5:c5:48:
43:92:99:71:73:b6:3d:c0:42:92:41:64:f0:21:15:
1b:81:ae:07:bc:cc:90:b4:75:53:09:d2:6a:6d:1b:
87:f2:34:40:43:47:24:fa:c2:0c:a9:33:fe:7a:f1:
5d:a5:0a:da:6a:91:90:a1:c7:3a:68:df:07:94:e3:
6b:cf:f2:2c:ef:e0:c6:9b:b2:9f:17:73:c1:9f:0f:
7d:63:40:38:82:50:fb:f0:9c:8b:22:39:bd:c0:58:
14:47:50:05:7a:72:4a:ba:30:b3:c9:7b:4f:dc:fb:
0a:ec:99:6a:7c:7e:56:ce:f3:4f:71:e3:cd:74:ac:
3b:cb:f7:10:06:19:93:f1:00:ea:74:43:1a:88:c3:
5a:38:13:22:7a:48:74:70:51:98:7d:7d:c1:33:ef:
38:b7:c0:59:ad:48:08:aa:5f:67:32:7e:06:f6:c2:
fe:9a:44:0b:3a:40:4e:46:54:7c:de:a9:50:4a:d2:
e2:6f:4b:45:03:09:38:98:7e:cd:58:f7:7c:43:47:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:B3:BA:28:BA:2C:02:14:E8:FA:1C:AC:F5:27:88:BB:A1:8C:B5
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:30:a1:89:ef:d7:c5:88:60:34:26:ff:cd:4c:fb:21:02:93:
b5:72:40:0b:13:ab:4a:29:98:89:a7:b1:20:48:62:f6:51:37:
da:e5:f8:ca:ca:40:9c:2b:f0:61:86:69:0b:09:ab:f8:54:9e:
2f:26:e0:ed:3c:c7:2a:a2:c4:2e:89:ea:92:00:52:7f:c0:6f:
c1:ec:bf:9a:de:43:df:06:15:fb:c7:f3:21:cc:7b:9c:28:82:
52:35:fb:61:fa:d2:0a:80:d2:a1:1b:4d:62:d8:6a:24:57:0a:
1a:7f:7c:ae:77:4c:67:35:ae:7b:ae:3e:a2:fe:f4:27:f5:88:
4e:e2:87:55:22:15:ae:18:28:8d:f0:95:7e:78:5d:1f:2e:fc:
65:8d:4a:19:15:4c:45:df:19:5a:19:ac:14:7f:16:eb:df:5d:
4f:35:e8:cc:e4:18:d6:89:46:c2:c1:50:48:df:a8:f6:b2:0e:
77:f0:05:1e:fb:bf:56:dc:5f:b8:83:be:9a:cd:7b:03:e2:58:
0a:8f:41:fa:5d:3e:43:1b:fa:92:40:fb:f8:c3:2d:79:5c:c0:
f8:69:c9:9e:5a:b1:f7:e4:8d:7c:25:38:5d:41:f7:2d:8f:c5:
76:9a:03:61:e9:a2:d2:85:a7:b9:8e:18:16:5c:c1:9b:b6:27:
0d:99:0d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:57 2025 by rpki-client