Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: h5D6nyZHmH9tpEOHT3BiS/al2bjUpa3dia2nMuhMHlY=
Subject key identifier: A1:A0:7E:9D:1F:45:86:7F:54:C3:EF:9A:07:BD:5E:74:43:22:CA:8A
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 0198D54E726178ABAB7FE19FDBE45C8F811E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 03D4
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: yApNU81BBjA1HKf1xO5g9IGR2OVb/lG53CXPkW4Ane4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:72:61:78:ab:ab:7f:e1:9f:db:e4:5c:8f:81:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=a1a07e9d1f45867f54c3ef9a07bd5e744322ca8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:1e:9b:51:1a:10:03:cf:73:81:89:d4:f5:
13:7f:dc:fb:29:55:ab:fd:af:cf:13:6d:d5:0f:08:
19:a2:7d:35:de:b4:9e:94:33:09:3e:2a:2f:82:f0:
cb:64:dc:52:00:6c:0f:57:bb:15:a4:a2:15:f7:2f:
9e:71:10:d3:1f:cd:46:96:f5:66:de:c9:a3:15:29:
ce:92:3e:13:da:44:bf:af:d5:43:21:96:e4:93:63:
57:84:06:25:02:30:e1:e7:6e:4d:d8:fa:3f:d6:0d:
67:6e:25:b1:7e:ae:79:12:c0:1f:6c:ed:3c:92:9d:
7b:32:ac:d0:45:b5:b3:e5:18:ba:6c:6b:f2:1a:56:
d1:ce:39:4c:3e:49:1b:46:12:9e:55:bd:3d:97:5b:
a1:bd:00:0e:96:31:a4:b3:b8:9f:98:2c:e7:ab:5d:
73:2d:8d:f6:00:20:67:e7:b7:6c:0b:93:6b:b8:22:
3e:34:01:47:b7:39:2a:aa:71:4a:a0:56:8b:57:45:
10:cc:c6:99:09:a0:ce:92:ae:18:2a:cf:73:c3:ad:
64:45:32:e8:43:62:0b:05:0c:b2:33:18:e1:34:8b:
9d:84:20:c7:dd:88:8b:26:97:fb:00:a3:a5:a6:0e:
18:84:bc:63:ee:92:12:c1:0f:cc:7d:7a:3b:13:8c:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:7E:9D:1F:45:86:7F:54:C3:EF:9A:07:BD:5E:74:43:22:CA:8A
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:88:9e:e4:66:21:88:39:19:d0:eb:cb:4a:83:11:c7:64:c2:
d5:aa:e2:79:63:b3:68:49:63:ca:90:8c:df:54:68:83:eb:27:
16:b4:09:45:46:81:a0:0b:33:22:61:1e:a3:f1:c3:a1:0d:8a:
37:ee:20:b2:36:04:77:d3:ac:e2:aa:0b:aa:5a:ce:d3:23:b4:
f8:5e:5c:5a:af:40:11:9c:d8:43:93:8a:0e:ec:2d:7d:43:45:
fc:6e:56:b5:90:9c:5a:c7:9b:c3:01:9c:12:d7:78:c2:99:60:
59:18:cd:c7:91:79:7f:63:84:5a:c5:16:1d:a0:b7:1b:a8:9c:
d4:33:7e:54:92:00:b6:eb:85:1d:56:d3:ae:ec:95:3a:a6:ba:
8f:d6:eb:a3:25:d8:51:ea:82:ca:cb:6b:50:50:ab:57:6d:dc:
85:d0:c8:1e:f0:13:bd:3d:ca:26:f5:ba:5c:b7:5e:ad:fe:8e:
c2:75:93:2a:e8:2c:ea:cf:7f:3a:0d:a0:b6:96:9e:aa:31:ba:
03:e3:c3:78:38:4b:42:00:61:d9:d2:52:16:00:25:5f:0b:84:
13:51:54:45:27:2f:66:ef:a6:2b:66:dc:9f:db:a6:59:0e:a4:
bd:a7:7d:75:33:1c:88:4d:5e:85:07:de:39:cb:8e:48:2d:d5:
16:a3:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:54 2025 by rpki-client