Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier: gs3mA1M9JiSI7nc+C16Io9gDYohirU4CmkjCOlYUoKo=
Subject key identifier: 24:DA:0D:8C:F1:0E:AA:43:B5:53:A6:15:6B:65:3C:4A:AE:63:B0:33
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer: /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial: 0198D69863E03C3A68F97366BB6EF66BA0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number: 0DE8
Signing time: Sat 23 Aug 2025 11:02:47 +0000
Manifest this update: Sat 23 Aug 2025 11:02:47 +0000
Manifest next update: Sun 24 Aug 2025 11:02:47 +0000
Files and hashes: 1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: zTSfC56BF/IfuAyZO9GI5yaHfhNxBqHPFlrY5HN4quo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:63:e0:3c:3a:68:f9:73:66:bb:6e:f6:6b:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
Validity
Not Before: Aug 23 11:02:47 2025 GMT
Not After : Aug 24 11:02:47 2025 GMT
Subject: CN=24da0d8cf10eaa43b553a6156b653c4aae63b033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:0f:74:32:a8:79:1e:21:bb:b8:ee:cb:37:
79:49:02:e3:bd:6f:37:db:ec:e8:31:bb:11:4f:82:
af:77:dd:3f:c8:42:b9:09:55:8d:b5:98:37:ea:75:
10:bb:2f:28:41:c7:6c:74:73:16:4a:31:11:63:84:
ae:89:65:e2:63:58:54:15:66:95:c2:1b:21:48:7e:
79:01:7e:2f:4f:f6:b1:b5:5f:83:2c:96:58:15:14:
f2:7e:dd:01:ea:77:83:3e:10:50:64:bd:09:b3:cf:
42:b6:cc:40:cb:5a:03:ca:4a:42:9d:72:30:f5:3a:
f3:b2:42:e8:31:1d:d7:f0:03:ec:b6:95:53:5b:05:
1a:97:a1:de:e7:91:95:55:ac:bc:dd:3a:e2:27:61:
af:c4:8a:d0:2b:69:d6:76:1d:09:0b:72:62:16:56:
ac:b3:e7:a6:02:8b:8e:e0:4b:b8:bf:ad:bb:d0:9c:
1e:86:06:43:e0:47:f4:b9:80:20:9e:69:2e:7e:02:
a5:58:15:ca:eb:f6:a7:b9:f3:32:da:10:6c:ca:51:
f0:e4:9a:92:fa:73:e8:3e:d3:60:72:51:a8:b4:a6:
8d:a4:10:c7:c8:9e:62:c1:08:53:6d:b2:fb:d2:68:
c2:1c:b7:bf:a7:35:80:b8:7c:88:14:0f:2f:79:a3:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:0D:8C:F1:0E:AA:43:B5:53:A6:15:6B:65:3C:4A:AE:63:B0:33
X509v3 Authority Key Identifier:
keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:22:d1:71:d3:4d:c3:56:17:68:fb:fa:37:f1:ed:7e:61:
08:4f:e1:14:61:36:33:59:f7:54:ce:7e:ee:9a:52:66:97:25:
92:ea:ea:f4:60:39:42:bf:da:3b:59:46:8a:c1:8b:03:84:36:
3d:b2:35:87:58:6d:16:8b:5f:18:ff:2a:3a:66:91:46:0a:4d:
21:27:36:5c:cc:9f:f6:76:ba:ab:a1:df:a0:db:a0:e8:a0:e0:
35:9a:6c:1e:14:fd:ea:76:d4:a0:1c:ce:62:ce:7e:85:d3:d0:
a0:ff:aa:26:dc:f0:24:bb:2a:48:80:97:7e:b4:3c:d8:91:b6:
19:d1:ca:23:75:3f:bd:13:c5:b0:d8:c5:50:38:e7:61:ba:24:
25:fa:a4:51:82:0e:3e:e9:ed:d5:ab:88:62:f3:c2:57:1e:6f:
23:3b:26:74:9d:82:fd:ef:94:d1:79:b5:eb:ae:09:53:03:0d:
a6:9d:b2:02:49:17:d1:de:41:ce:ed:80:53:e6:e9:f8:e3:10:
a9:db:bd:52:44:6d:99:19:0e:f5:b3:1b:3d:11:58:c2:8c:7d:
d7:a1:ab:b4:66:18:13:b9:7a:d7:5e:f4:ad:d5:74:90:66:b6:
5f:b3:7b:e4:99:bf:a4:8f:8a:04:63:4f:52:2d:60:5c:47:bd:
72:03:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:14 2025 by rpki-client