Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
File: qwJca7PczxsWUUnChzwEsabH2no.mft (raw, json)
Hash identifier: ZCgyNyOPEuGRq3qWD3gW4zRHBsaczR+o/UOfqPZ1vLQ=
Subject key identifier: 0C:B8:88:93:69:6D:15:CF:E9:93:BF:21:5C:77:C8:2B:F7:5C:A3:12
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 0198D472BFD15A0AFD09C27A642715B58311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
Manifest number: 0B05
Signing time: Sat 23 Aug 2025 01:02:26 +0000
Manifest this update: Sat 23 Aug 2025 01:02:26 +0000
Manifest next update: Sun 24 Aug 2025 01:02:26 +0000
Files and hashes: 1: qwJca7PczxsWUUnChzwEsabH2no.crl (hash: oCWZedKNlOv4UHw7tkMUJIG8d1PzgeUl+rHqvlW90xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bf:d1:5a:0a:fd:09:c2:7a:64:27:15:b5:83:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Aug 23 01:02:26 2025 GMT
Not After : Aug 24 01:02:26 2025 GMT
Subject: CN=0cb88893696d15cfe993bf215c77c82bf75ca312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:84:59:08:8c:6e:af:46:5d:3a:1d:4c:d1:
4c:2e:99:76:6a:4f:bb:c4:13:2f:62:7d:01:3b:3e:
8a:bc:23:61:eb:0f:60:d2:b4:bc:cb:14:86:09:42:
e5:5b:f8:78:7e:ee:e1:b0:b8:e1:61:c9:2b:2f:60:
e4:48:3b:ea:56:aa:6f:95:d9:90:b6:84:be:13:11:
1a:9e:1d:20:85:84:b2:70:fe:1e:6a:c0:75:f2:bc:
7e:02:5f:cf:ae:c0:d0:02:44:0d:7d:e1:4c:f0:8a:
15:b4:2a:09:a1:4f:a9:98:47:8d:38:b7:9d:46:51:
6b:4b:13:ba:79:8f:fc:85:92:30:5b:51:a5:6f:85:
e3:cf:88:06:f5:41:d6:8e:eb:a7:16:43:e4:6c:4f:
da:7c:15:6c:cf:13:0b:03:6f:0e:b3:d2:62:24:b5:
92:c9:58:f1:eb:2d:38:b0:3c:c6:41:fc:d5:74:d5:
59:43:13:ff:b8:ef:48:93:2d:b9:2d:db:bd:5b:23:
36:0e:70:3e:a5:b1:15:6f:25:63:73:15:2c:2e:f4:
72:66:93:c2:cb:e9:c5:77:ad:ee:8e:a2:51:82:46:
f0:02:9e:70:29:9e:ea:d9:b4:a4:96:69:6d:ca:56:
22:32:02:1c:9e:5a:be:73:57:d4:7a:0c:50:b9:2b:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:88:93:69:6D:15:CF:E9:93:BF:21:5C:77:C8:2B:F7:5C:A3:12
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:46:70:81:2d:ae:62:72:89:6a:c4:fd:a3:cf:6d:4f:f9:ce:
b9:8e:17:54:46:f7:60:f7:be:0c:1e:6f:60:b8:c1:92:78:d5:
b7:84:d1:a6:45:e9:c7:74:d6:5e:cc:57:d1:39:3f:76:31:25:
8f:9d:a5:8a:60:31:c8:37:4e:31:95:32:1f:23:a3:c1:16:72:
1e:f6:35:19:6e:ab:dd:df:47:0d:8f:82:21:a4:ba:25:2f:02:
e9:22:f5:65:60:35:e5:c6:48:ef:39:2d:1b:ce:5a:fc:60:fd:
53:84:c5:5c:83:47:7a:dc:b2:ca:98:86:4a:2f:82:ee:66:64:
93:ac:be:28:b3:a1:78:18:df:e5:c9:c0:21:43:05:93:e6:44:
56:c4:65:46:c5:69:55:60:b8:ec:56:e8:07:c9:98:54:55:bc:
40:93:92:c0:4c:8a:5a:95:25:28:d0:3f:1b:56:89:3b:51:08:
60:50:44:91:db:27:c8:a4:0a:b9:c4:72:b6:a3:c5:09:ab:40:
08:d6:2e:ce:a1:d6:7b:0a:31:47:1e:76:9b:b1:4a:fa:74:1f:
73:f9:f8:6b:ee:6d:ea:42:47:a2:5b:68:23:7a:b0:3b:9e:c2:
c0:33:35:e5:62:e5:4e:2f:d7:08:3f:c2:fd:dd:51:ee:f2:3e:
e8:60:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:11 2025 by rpki-client