Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: K01lP40fh+nERPWlkrXK+SVbri+PirFZt/eW8x1k/hw=
Subject key identifier: 7E:E2:7F:DA:F0:AB:3A:12:C5:4B:9C:9B:1E:0F:3B:1B:0A:ED:97:7A
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 0198D660EF60CF5CB2343D540C0A263159BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 1583
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: wq3i9YxrsTbzangoPWzk0pxxOBfGM8M4Lpt5rGtmogE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ef:60:cf:5c:b2:34:3d:54:0c:0a:26:31:59:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=7ee27fdaf0ab3a12c54b9c9b1e0f3b1b0aed977a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:16:8c:04:80:db:8f:11:4c:fd:b7:26:77:
91:17:c6:a9:a8:28:80:62:7a:c8:2a:e9:8f:f5:b8:
7b:33:56:88:7a:05:45:04:8c:1c:0a:34:d8:10:6e:
d9:ad:f6:e9:03:c4:a9:5d:d7:de:e1:4a:cd:df:81:
85:b5:20:c6:9c:4c:2c:aa:fb:8e:3a:5c:de:f0:5b:
9a:41:cb:ac:7c:79:36:9a:a7:c8:b8:3b:85:fc:c5:
96:0b:de:f5:3f:2a:63:75:9d:db:a2:59:9a:cb:d2:
c0:c9:fa:f2:59:81:a5:e3:39:ff:03:5f:9d:19:e3:
16:c4:a1:07:a3:28:e9:4b:02:49:e3:f9:27:47:9a:
70:71:64:c1:bf:3d:da:71:bb:10:47:1b:12:19:93:
a6:74:e0:bd:e9:6e:a9:32:5f:73:7e:74:19:1c:26:
fe:f1:74:fb:f8:ec:9e:70:f5:a4:c6:a5:33:fa:e7:
f0:76:2f:b6:6a:bf:97:d1:a2:84:54:6b:e9:bb:59:
74:bf:11:96:e8:7e:22:bd:7b:5c:08:d7:8e:42:39:
b9:96:d4:bc:ab:e3:68:b4:f0:84:6e:f6:7c:62:48:
73:4d:2d:df:8a:d7:ad:22:77:68:bd:d5:e8:dc:2b:
31:c4:7f:41:fd:82:0b:32:9a:6d:c5:57:57:30:89:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:7F:DA:F0:AB:3A:12:C5:4B:9C:9B:1E:0F:3B:1B:0A:ED:97:7A
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ea:a6:04:4a:84:7e:74:a1:75:43:f1:77:b2:d2:2f:5a:35:
b5:b9:f2:b0:70:26:30:93:2e:d9:98:09:51:23:97:37:17:ee:
d4:7c:8a:08:9c:ef:16:0b:d3:37:90:75:f7:2b:9a:5c:8c:b0:
e3:e6:c1:20:19:93:2b:63:12:6e:5b:9f:97:52:9b:2f:0b:12:
ba:9c:c9:ab:ad:41:e5:59:3b:14:cc:0e:fc:c6:96:7f:87:92:
3c:bb:03:6d:6c:57:bb:06:95:e3:cc:13:71:02:fb:46:6c:61:
ec:29:48:94:90:84:4b:2d:8b:ac:28:71:77:a4:a6:a3:b8:bf:
d3:12:2c:ba:ec:de:ed:f3:da:3c:f1:55:46:fb:c2:dd:86:9c:
83:41:04:35:94:02:0c:5c:22:12:05:dc:90:d8:6b:7d:85:86:
bf:e0:02:10:24:5c:9a:77:52:be:60:2b:86:4b:c0:3f:16:b2:
96:d4:29:57:d1:ff:92:00:75:c0:b1:59:08:6a:3a:15:53:1b:
87:98:b9:c8:c3:46:e4:0d:71:ca:7f:b3:b3:4c:76:b6:5d:f8:
23:0c:e5:31:0b:f8:c8:2d:6b:3c:42:d5:c5:a5:dd:c4:7a:98:
54:c6:05:b9:43:3d:61:a3:91:ed:b0:fc:e5:85:5b:e1:02:1d:
1c:ce:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:24 2025 by rpki-client