Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: AjJ/5mwZtsvLbg6pxD5RqYf4Qob1dvtd2o06CYyc9u0=
Subject key identifier: 28:91:07:FB:08:D2:46:1C:A5:79:82:BF:90:BA:83:19:9A:0A:06:40
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 0199FFC7427E55E8AE30883DD983AFE509DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:01:12 +0000
Manifest this update: Mon 20 Oct 2025 04:01:12 +0000
Manifest next update: Tue 21 Oct 2025 04:01:12 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: 1bjfS2bUltnashuQvktHT1J9hxeMdxK/KKCdO8B8sys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:42:7e:55:e8:ae:30:88:3d:d9:83:af:e5:09:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Oct 20 04:01:12 2025 GMT
Not After : Oct 21 04:01:12 2025 GMT
Subject: CN=289107fb08d2461ca57982bf90ba83199a0a0640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:e1:ca:bd:d9:5d:92:05:de:97:d4:12:ea:
11:c4:98:32:74:1b:e9:c6:8c:de:70:d3:e1:25:3a:
75:e3:c7:94:c8:6f:26:bb:7e:49:7e:5d:bb:6e:a7:
77:3a:43:aa:94:3c:58:3e:ce:5e:b5:06:10:c8:83:
d1:af:ed:48:6a:f7:a8:8f:d5:84:94:2d:32:81:ee:
56:02:74:f8:bd:1b:b4:af:31:0d:a7:a3:50:83:6b:
9e:2e:3a:bc:da:3b:ec:2b:7b:73:80:7a:2c:3a:0f:
b7:f3:ba:65:93:e5:37:0b:07:3f:74:a4:69:3f:bf:
f8:d4:1f:ef:4f:c7:6d:b1:4b:6c:a0:8c:5b:d5:54:
5c:1a:23:f6:84:c6:0e:60:53:68:df:a5:e5:55:92:
53:da:6b:db:3b:96:8c:cf:d1:af:ab:1f:44:9a:cf:
d5:f5:3f:96:a8:f2:96:7e:9f:65:4b:8e:5a:5e:bb:
1a:d9:73:90:2c:54:c4:3b:fe:53:d1:bf:07:da:75:
0e:7f:c5:80:4f:5c:fb:08:3d:5d:a9:ac:7f:7f:2b:
b4:a9:80:49:31:fd:63:76:31:5a:ac:c7:98:24:c6:
4a:d9:e5:a6:7b:8e:7b:db:7e:06:0f:2a:21:f1:70:
68:82:57:f5:d3:12:ff:83:d4:49:6f:16:44:2b:39:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:07:FB:08:D2:46:1C:A5:79:82:BF:90:BA:83:19:9A:0A:06:40
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bd:79:53:2a:bd:66:0e:0b:3c:d8:5a:5d:d6:29:8d:5d:18:
7d:71:75:8f:f6:92:7a:27:34:f9:b6:4d:2e:e7:5a:16:58:6c:
97:95:bf:7f:4c:28:a5:2d:dc:81:52:3c:a6:b5:90:c4:01:2c:
5a:01:99:19:09:58:d1:b2:80:66:6b:6b:7c:70:92:61:3c:ce:
ce:db:00:a5:8f:f7:9e:05:c2:fb:03:15:42:5b:c8:94:75:25:
72:8f:05:72:7f:d0:dd:f1:ba:24:6f:ad:96:08:08:bf:35:f0:
40:35:b0:35:0f:a0:62:b0:be:96:d1:d8:60:f1:b3:e9:4e:fc:
18:5d:bc:0f:8a:93:8d:ad:e6:86:ad:e5:1f:4d:3d:aa:e2:f4:
67:46:50:7d:d8:6f:a3:55:7c:0f:a5:66:dd:1e:a6:76:c2:c2:
8d:6c:63:a7:a7:76:4a:24:83:75:f8:54:51:bf:a2:65:3e:ae:
fc:b1:96:e8:b6:7a:54:c4:0a:e0:ce:c3:5f:81:f7:d1:62:3b:
0b:18:6e:17:7e:f0:fd:74:11:5b:64:6a:53:22:cc:58:86:09:
b6:65:6f:37:20:46:32:8d:d7:08:a1:3e:e8:42:3f:f6:21:0d:
8a:5c:04:3d:60:97:d7:0b:08:30:fc:0c:0e:53:22:01:ff:b3:
05:03:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:01 2025 by rpki-client