Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: 1fseYAEgx/TEB1uALh9J562TrAXteKniJzYiXb9ejN0=
Subject key identifier: 97:F8:A4:86:B2:B2:73:EE:61:65:98:92:0F:B0:A7:67:B0:1B:8B:82
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 0198D65FFF9A766C0A48A0F806F4406A35C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: pgi+RQRY2yxhl0bHz2aZqH0y1OHRUEMBlUveTQCXo5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ff:9a:76:6c:0a:48:a0:f8:06:f4:40:6a:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=97f8a486b2b273ee616598920fb0a767b01b8b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:11:a0:72:2d:a0:e8:1a:3f:b3:2e:f3:6e:
0b:fa:87:87:e1:c5:c7:da:7c:a5:49:e3:e3:2c:76:
d9:71:f0:0f:9b:e5:32:bf:73:e1:80:b2:65:d2:6c:
09:06:9e:76:3e:05:bd:d8:f2:55:1f:9e:c8:e0:16:
38:f8:78:10:a9:5b:6f:bd:79:46:be:a8:d8:eb:bb:
c0:78:08:ac:d6:99:1d:f8:31:7f:a5:28:00:d7:44:
6a:73:00:a8:a4:92:c6:f2:bf:74:ad:83:f7:ac:11:
32:02:ed:e2:68:bb:81:a3:95:bd:4d:f7:53:d7:c1:
6b:2b:a8:cc:f1:69:3f:a9:23:3c:3c:3e:03:41:b2:
14:a0:11:f7:e6:32:97:5c:8b:87:61:8d:1a:e4:da:
2f:df:8c:29:c2:fd:57:c6:91:0f:16:26:54:c6:c3:
fd:cd:48:75:39:be:2a:7c:f8:bd:81:a3:92:a4:4e:
f9:02:35:2f:02:fa:a4:14:93:62:36:76:04:14:56:
e2:8a:62:d0:62:c3:88:ed:f9:3e:0b:82:09:5b:16:
64:24:e4:a1:41:74:7d:30:ae:98:df:21:df:4a:db:
88:7c:bf:28:d7:20:f5:fc:18:2b:63:dc:12:fc:28:
b5:39:e0:0c:cd:37:de:f6:85:18:71:b8:06:04:99:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:A4:86:B2:B2:73:EE:61:65:98:92:0F:B0:A7:67:B0:1B:8B:82
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:37:36:50:21:1f:d5:d5:e1:1f:94:35:4e:16:d4:07:c5:
1d:fc:bd:06:27:7b:3b:01:ac:3a:c6:ed:2a:ad:d1:09:24:f8:
39:17:79:5b:d8:c0:10:26:57:e1:91:34:2a:d6:b8:fc:10:ab:
a5:2a:40:16:f1:73:37:b1:6e:21:2d:84:2c:e5:30:a3:7a:7e:
b5:99:70:ec:6e:63:ef:c9:18:1e:b6:b7:f7:cd:72:97:b7:d8:
9f:7e:e1:bc:38:2c:60:2b:a9:a5:5a:1f:eb:df:e1:bc:c1:a3:
ef:bc:87:15:e3:ef:df:42:24:ae:d7:2b:4a:cb:61:c1:ed:c0:
d3:e3:84:bb:3b:34:0c:66:31:d5:86:f2:d0:d7:96:b7:e9:f7:
05:ef:dd:36:40:e8:29:c0:21:54:95:16:15:f4:b8:d6:59:f2:
a7:f2:29:6d:df:67:94:dd:1b:77:43:db:f2:77:87:07:9f:67:
3e:11:53:1d:d8:e1:f4:b9:59:8a:8b:93:d0:f7:5f:87:3a:25:
52:c0:ee:44:66:35:8c:b3:e0:5f:98:8a:c4:04:b6:bc:86:b0:
6d:30:ed:c7:de:78:b2:e8:91:bb:b9:6e:4c:1b:3f:0a:07:f9:
3b:e1:7d:f2:6e:b7:1e:4e:fa:e3:3e:38:bc:47:f8:59:e8:37:
c7:06:d5:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/+admwKSKD4BvRAajXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNThhZjkzZTQxMzljZjM5ZTliNGE3MGUxNGE1YTliMmE4
ZWI2MWUwHhcNMjUwODIzMTAwMTEyWhcNMjUwODI0MTAwMTEyWjAzMTEwLwYDVQQD
Eyg5N2Y4YTQ4NmIyYjI3M2VlNjE2NTk4OTIwZmIwYTc2N2IwMWI4YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08gRoHItoOgaP7Mu824L+oeH4cXH
2nylSePjLHbZcfAPm+Uyv3PhgLJl0mwJBp52PgW92PJVH57I4BY4+HgQqVtvvXlG
vqjY67vAeAis1pkd+DF/pSgA10RqcwCopJLG8r90rYP3rBEyAu3iaLuBo5W9TfdT
18FrK6jM8Wk/qSM8PD4DQbIUoBH35jKXXIuHYY0a5Nov34wpwv1XxpEPFiZUxsP9
zUh1Ob4qfPi9gaOSpE75AjUvAvqkFJNiNnYEFFbiimLQYsOI7fk+C4IJWxZkJOSh
QXR9MK6Y3yHfStuIfL8o1yD1/BgrY9wS/Ci1OeAMzTfe9oUYcbgGBJkqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf4pIaysnPuYWWYkg+wp2ewG4uCMB8GA1UdIwQY
MBaAFEJYr5PkE5zznptKcOFKWpsqjrYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYt
YWUxZjNlNDkwYzY5LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYtYWUxZjNlNDkwYzY5
LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfY3NlAh
H9XV4R+UNU4W1AfFHfy9Bid7OwGsOsbtKq3RCST4ORd5W9jAECZX4ZE0Kta4/BCr
pSpAFvFzN7FuIS2ELOUwo3p+tZlw7G5j78kYHra3981yl7fYn37hvDgsYCuppVof
69/hvMGj77yHFePv30IkrtcrSsthwe3A0+OEuzs0DGYx1Yby0NeWt+n3Be/dNkDo
KcAhVJUWFfS41lnyp/Ipbd9nlN0bd0Pb8neHB59nPhFTHdjh9LlZiouT0Pdfhzol
UsDuRGY1jLPgX5iKxAS2vIawbTDtx954suiRu7luTBs/Cgf5O+F98m63Hk764z44
vEf4Weg3xwbVfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:01 2025 by rpki-client