Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier: cfS67+O7+qTd70a+OFlTukqWlR24i12jUr05q/MFFvM=
Subject key identifier: F3:CC:83:46:65:E9:9E:F5:D7:77:FA:70:B5:AF:15:87:62:BE:2E:7A
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial: 0197B70F05F3A96BB18EE29606930DCFDB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number: 0CCD
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: LiRcLYRd/p0Z5qJYYj9Acq54YyCeotzNrMyKjNaPSQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:05:f3:a9:6b:b1:8e:e2:96:06:93:0d:cf:db:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=f3cc834665e99ef5d777fa70b5af158762be2e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:aa:11:21:97:73:57:bb:53:c1:7d:51:90:
76:97:4f:94:8c:7e:4f:3a:76:12:04:54:7f:5d:a0:
77:51:06:2c:60:ad:c7:2c:5b:cf:fc:c3:ff:ec:88:
ea:16:9c:b4:46:5f:7d:7e:20:cb:6d:17:e7:48:fb:
29:6c:a0:14:c2:80:52:54:30:05:80:b9:e3:b8:9b:
f1:78:78:ce:0c:e7:53:10:cc:88:a8:28:45:b7:26:
90:99:cb:b3:db:e7:b0:b9:ba:d5:17:a0:0f:b7:f9:
ef:2f:41:71:12:9a:68:bf:58:77:ac:fa:05:73:97:
84:98:60:49:df:dc:bf:72:9d:4b:81:95:75:b1:cd:
bb:89:a3:d6:8a:03:25:81:83:de:0f:5a:d4:21:a9:
5a:6d:63:29:28:45:ba:ff:f1:3f:47:c3:de:bf:c0:
9e:91:3d:d4:36:0e:eb:c0:d6:0e:df:9e:33:f2:be:
e6:12:72:a6:3a:12:73:37:a7:98:7e:5f:e5:7a:be:
9b:73:76:13:8b:99:bd:1a:df:7a:ea:9a:fb:d4:48:
60:c9:25:ea:6e:67:6d:e4:58:a8:5d:14:14:89:51:
cd:09:54:4e:e3:c2:26:f5:e2:db:32:1e:61:8a:74:
26:72:b4:e8:b1:6b:fa:38:0e:58:45:a8:56:66:85:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CC:83:46:65:E9:9E:F5:D7:77:FA:70:B5:AF:15:87:62:BE:2E:7A
X509v3 Authority Key Identifier:
keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:76:f7:93:31:04:9d:23:23:c9:1f:92:81:62:07:6c:bc:98:
9f:cc:fd:0b:2a:8a:64:5d:78:5d:fe:14:29:1f:8c:3e:d5:a6:
23:29:07:ca:f7:be:96:44:e6:cb:e6:83:11:e1:08:7b:ee:57:
97:a3:74:59:6c:c7:35:b6:f3:0a:9b:91:7d:3f:70:34:18:e1:
30:97:50:3e:ff:76:08:3f:6b:20:48:e0:13:44:fb:38:fd:1d:
e4:b6:9a:c1:79:4d:d2:76:20:f5:41:df:a3:37:41:a7:3d:af:
78:09:53:3a:24:41:d9:ee:17:ed:8b:4d:93:79:d7:38:dd:1b:
37:a2:06:82:d7:eb:b7:86:e9:5d:f5:d6:15:c8:66:2e:12:ad:
76:2f:d7:57:b0:c0:28:d6:8d:73:4d:e3:65:af:09:34:82:2b:
e5:87:99:75:c8:14:8d:af:d3:48:04:31:ea:7a:f0:3e:98:30:
aa:5e:b0:b1:cd:f1:d1:e6:d2:70:94:87:2d:df:12:f2:a4:30:
ff:21:77:d1:21:10:20:5c:85:66:73:bd:3f:e1:cd:d2:c7:3a:
64:a5:7e:98:35:b8:a6:50:55:4c:01:c1:77:e7:c1:6a:c7:c5:
91:2a:f2:ec:85:69:74:a9:88:81:2a:de:02:85:25:01:0f:4d:
fa:45:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:26 2025 by rpki-client