Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json)
Hash identifier: waW819DDMcOfD0gfFCr9w+gfK25aMh7nmFTr4B7GsGw=
Subject key identifier: 84:8A:3F:04:E4:01:8E:4B:21:11:11:46:7E:F7:0A:32:29:FF:D2:70
Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Certificate serial: 0198D5F19C71F0D027C8B237751249E559D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
Manifest number: DA
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: 7nqDnvV9g8GnkChaWQOxuJpqNvu6D7P7irRZ3olDHSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9c:71:f0:d0:27:c8:b2:37:75:12:49:e5:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=848a3f04e4018e4b211111467ef70a3229ffd270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:aa:64:37:10:01:5f:d3:b4:72:0e:b5:2d:
0b:41:15:50:b9:11:3c:48:8c:72:6d:0f:7a:97:57:
15:8c:6b:81:91:c2:0e:70:2d:4f:e2:b5:ce:da:f9:
b8:74:0e:02:78:58:07:03:c2:b9:44:82:48:3a:9a:
d8:c2:6f:10:a5:47:9f:66:ee:70:d0:bf:1e:70:e8:
61:ac:a2:a2:a5:c7:c2:f9:45:4b:1d:d7:d0:88:f1:
d3:ce:c3:f6:64:aa:32:a7:a5:3b:03:e5:9d:5d:0e:
1d:c2:75:22:20:c4:bf:63:a5:7e:d3:93:c7:fd:d0:
b7:9f:93:02:a4:0f:fe:a9:3d:8f:51:64:f2:27:23:
7c:96:be:c6:0d:3e:0c:21:29:05:2e:aa:42:de:b1:
44:8f:90:73:e0:05:54:65:59:ee:4a:0c:06:45:d5:
76:46:01:45:3d:21:53:e6:14:a1:e8:e1:50:50:e9:
09:61:2f:78:c7:72:35:1f:4b:7a:ae:c1:2d:3b:ce:
ba:47:db:9c:be:05:cc:99:07:97:3c:1a:d9:f0:18:
56:91:28:57:5c:20:fe:a0:f3:c1:c6:63:11:bc:50:
8b:05:98:54:3f:ea:a2:8d:ac:1f:9b:f9:c1:fa:d9:
20:23:2d:70:03:12:92:4e:73:31:10:39:17:c4:f8:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:3F:04:E4:01:8E:4B:21:11:11:46:7E:F7:0A:32:29:FF:D2:70
X509v3 Authority Key Identifier:
keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:63:26:44:7d:83:d8:33:d0:dd:de:09:10:e9:09:15:f1:74:
c9:05:16:13:0f:3d:dc:1a:ca:3d:d5:af:6e:d6:77:e3:f5:ad:
44:a0:24:ba:3f:6f:e6:5c:97:9f:eb:ab:ac:53:1b:97:9e:d6:
59:b3:fb:05:ef:c5:2d:79:20:f6:ac:dc:04:c3:c3:e4:14:ef:
7b:6f:f0:82:c8:bc:d5:f4:5f:9e:20:22:ac:c5:f6:7e:cf:b8:
f3:01:6c:17:50:96:0d:df:ee:43:87:1b:d0:ed:c6:a7:d7:a2:
ae:ee:b7:d7:59:6c:58:0f:d7:ed:aa:c2:32:e9:66:eb:45:e2:
0f:78:34:c5:8d:e4:de:73:ef:fd:ec:7e:d4:80:2b:16:91:e3:
34:97:57:0a:1b:da:a4:e8:1e:d3:70:f2:3e:bd:5d:bb:3a:f2:
d4:66:2f:d4:e0:27:31:6d:39:b1:b2:ef:13:dd:2c:7b:52:86:
24:04:1f:e0:16:1d:32:5b:9f:53:44:d8:96:53:fa:2f:d2:d2:
50:7e:99:91:64:0d:26:e3:ad:20:33:67:f7:27:e1:e4:19:11:
5a:fc:68:98:b2:f9:d0:6b:56:57:f0:27:ef:e4:f7:24:8a:2b:
b4:0c:e8:5b:d5:da:09:de:e3:2d:2b:49:64:0d:0a:2e:cd:6d:
8a:0d:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:59 2025 by rpki-client