Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: lTXBlpHnTJZyuH6y1sOd/T5Hk79P0r4btGbkS09gPYk=
Subject key identifier: 99:7A:78:9C:BF:19:34:A8:DD:44:EC:5B:25:DF:37:65:A2:F4:0E:A9
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 0198D84FEC185B6F4CE19162A3C2A25EE217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0A37
Signing time: Sat 23 Aug 2025 19:02:53 +0000
Manifest this update: Sat 23 Aug 2025 19:02:53 +0000
Manifest next update: Sun 24 Aug 2025 19:02:53 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: aqluLJxrLtBq0+ubl2ui7sacZwOYHnjS5cOOP2ogCTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:ec:18:5b:6f:4c:e1:91:62:a3:c2:a2:5e:e2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Aug 23 19:02:53 2025 GMT
Not After : Aug 24 19:02:53 2025 GMT
Subject: CN=997a789cbf1934a8dd44ec5b25df3765a2f40ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:6a:45:b4:39:c0:be:44:5f:d6:6e:42:d1:
63:1b:65:04:9d:98:8f:7b:32:c2:bd:2f:89:f6:75:
7c:c3:c3:83:1d:35:db:b9:77:15:48:40:dd:42:16:
84:15:53:ee:ec:b1:55:8f:e9:51:54:81:f1:67:15:
4e:6b:68:12:86:c8:37:a7:22:59:d6:cf:22:c4:59:
6f:6f:12:3e:fe:59:71:38:6c:16:e5:b5:aa:2d:5c:
11:88:65:3e:a6:93:36:c5:1c:d3:72:3b:21:85:95:
63:49:d9:e5:98:1e:9b:ba:d2:1c:d2:cd:20:fe:b0:
fe:01:b9:77:c9:45:24:03:4d:83:39:9e:05:64:45:
f9:2a:2a:83:3f:48:33:de:b2:49:f3:43:fd:24:c0:
0a:fa:b0:85:bc:c3:5a:c3:8a:92:78:16:8f:9b:08:
ce:81:7c:74:8d:a3:bf:ca:9c:29:ea:a4:19:48:05:
6b:41:7b:2f:5e:81:fa:f4:7f:e3:e7:89:7d:13:d3:
ae:cf:36:4b:aa:79:aa:2f:d0:f9:95:87:46:b9:ef:
2b:20:94:64:2c:9a:e3:09:2d:43:47:c6:06:bf:e4:
a0:5e:15:83:a6:a8:52:02:f9:4b:19:04:f2:26:71:
7c:13:dd:54:3f:87:40:d4:9d:1c:96:48:4e:13:a3:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:78:9C:BF:19:34:A8:DD:44:EC:5B:25:DF:37:65:A2:F4:0E:A9
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:05:95:ae:98:d4:8a:11:e3:82:29:dd:0a:01:2c:46:de:ef:
37:38:66:e7:b9:d0:a4:9c:a2:16:45:72:87:77:7a:17:5d:80:
16:7e:9b:1e:5f:6d:91:4e:2b:f9:c9:72:48:0a:0e:0a:5c:80:
dc:ac:58:4d:df:fc:e5:28:0a:08:6b:98:f0:6c:a8:81:87:00:
8e:8e:e8:6c:8b:b6:dd:29:54:89:03:45:d4:03:5a:d1:c0:b3:
62:49:70:c5:eb:63:05:25:b6:7d:08:aa:44:88:ef:01:ab:14:
eb:83:5d:78:92:ff:2b:09:5f:39:79:a5:37:31:5c:47:7c:25:
e3:01:c1:1f:90:b2:21:d9:64:44:15:c0:34:37:da:bb:6c:69:
f3:5b:80:60:6c:86:82:e8:2d:97:04:6c:c3:b9:2a:2a:8b:ee:
7e:43:23:a2:76:44:6c:a6:5d:33:10:f7:0d:c6:b6:09:4e:0a:
1f:dd:62:b6:e9:fc:62:0a:41:32:8d:4d:6f:07:3a:3c:64:4e:
32:a7:6e:b4:7e:01:7d:d4:ec:7f:32:75:8a:1d:71:74:77:bb:
7a:ef:8c:24:aa:2e:07:56:71:4e:eb:7c:b0:02:c3:43:b2:6a:
0d:12:3c:e9:ba:a0:46:93:1a:10:96:52:5c:e9:05:0c:10:af:
0f:b6:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:48:04 2025 by rpki-client