Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
File: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json)
Hash identifier: 8KbYrP1QF9EC/A3YMjcxGUKPeN1oYYosRRxb1c35Xoo=
Subject key identifier: 22:02:16:F4:20:36:A0:D3:4C:8B:5A:AF:5E:D9:CF:28:38:1A:27:2C
Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
Certificate issuer: /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Certificate serial: 0198D660B2463763AB99965F4D8ED225C4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
Manifest number: 0AA8
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: 5+chjLjx0dyc7T7THaBjxYK7Azb7yiuuMk95PErif8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b2:46:37:63:ab:99:96:5f:4d:8e:d2:25:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=220216f42036a0d34c8b5aaf5ed9cf28381a272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:60:85:95:42:66:6e:23:f1:ba:76:8c:9c:
56:03:d5:bd:ef:02:3f:1f:7b:21:ee:44:c6:21:78:
42:f7:1c:00:f7:bc:44:8e:6c:b0:c3:68:2a:0a:a2:
4e:e2:7f:8f:82:cf:36:50:19:1f:e6:99:a4:80:a5:
2f:77:23:f8:55:94:45:19:34:59:04:21:0e:2f:71:
7c:a6:6c:c7:32:ac:dc:73:97:df:5c:63:a0:9a:08:
48:68:40:e3:c5:a0:90:5f:5a:73:ef:6c:60:8c:30:
e4:4a:bf:8b:d2:dd:ec:e2:8c:8b:fb:49:3e:8d:31:
84:67:40:ae:3a:30:5f:27:d8:36:fe:e5:6e:d8:54:
1d:fb:74:fd:90:1d:fa:02:6d:c2:e1:0c:01:79:85:
90:54:a7:fa:09:69:87:81:bf:1e:f2:1d:e3:3d:d8:
21:58:6a:fb:c6:c3:78:4c:3d:5a:21:27:13:be:dc:
57:d4:ca:fd:80:59:6d:78:98:29:65:1e:64:3e:c5:
82:56:3e:95:b1:0e:eb:64:55:a4:f5:3b:7c:d0:c1:
df:46:57:7b:11:09:45:45:6f:4c:47:87:9a:17:6e:
59:d2:48:5b:44:c8:73:26:f0:91:22:6e:d9:85:71:
f3:8e:94:38:b0:19:22:48:31:27:42:04:0a:78:f1:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:16:F4:20:36:A0:D3:4C:8B:5A:AF:5E:D9:CF:28:38:1A:27:2C
X509v3 Authority Key Identifier:
keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:28:e8:d0:74:46:7d:68:d3:29:18:95:46:e2:3e:23:de:d2:
71:71:db:71:91:5b:2e:21:55:6e:84:91:2f:6f:06:0b:7a:5e:
d1:2d:5e:72:be:a8:7c:a3:82:e4:e3:b7:64:bf:dc:da:d6:84:
02:7c:ab:11:1f:00:07:b8:67:3e:71:fc:fd:61:42:2d:8c:b6:
16:9f:17:56:3f:cb:67:b5:b3:cf:c0:a6:9c:64:91:13:db:06:
62:65:0d:2e:bd:9d:31:31:a1:9f:73:65:59:cc:d0:b8:b4:c6:
4c:11:12:de:72:36:b5:ed:97:31:ee:e1:b9:d9:18:ca:2f:95:
60:b9:e8:9b:84:0b:10:51:b1:09:8a:a6:ee:4e:98:bc:dd:e1:
b4:2f:c3:fe:c8:da:02:6b:49:2e:a5:6c:36:fc:d8:0a:29:af:
50:86:c1:f3:e6:be:55:b5:73:4d:60:5f:59:b7:24:98:6f:cf:
27:49:c1:e1:9c:1a:21:5a:fb:0a:82:e8:c6:3a:d0:c8:17:fa:
04:11:35:61:2d:3f:21:b8:09:95:8a:51:0f:4c:a4:8a:d6:62:
55:c7:0e:b8:fa:2f:cd:44:bf:51:5c:19:f4:94:2a:be:8f:25:
6e:3e:16:9a:89:57:09:f4:39:20:27:10:00:6a:6d:35:01:c7:
19:83:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:05 2025 by rpki-client