Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: 0O8flX0eFuN/pnVY1ZZtjPz6WPg/XkPJvj1jEUdtQ/c=
Subject key identifier: CE:FB:B9:D6:18:E6:0B:3E:CF:43:79:B1:71:B2:CA:12:63:82:19:BF
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 0198D54E3C0CBF4745409A2C060902F231E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0A56
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: 9kgWzxfM+rjWBkEpwNvSjCB6i3eP6wBsF2y4sQZgzgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3c:0c:bf:47:45:40:9a:2c:06:09:02:f2:31:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=cefbb9d618e60b3ecf4379b171b2ca12638219bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:8e:fd:5e:7c:ed:61:74:54:1c:4a:60:a0:
38:ab:ed:31:8b:68:cd:b6:7d:27:4e:ae:c2:1d:b2:
8a:bd:b8:64:ed:2a:fa:5f:9b:51:72:3d:93:49:c4:
57:b1:64:1d:77:3d:e6:37:d2:82:55:c7:95:9d:9e:
57:7a:cf:e2:0e:c2:af:df:7b:26:38:e6:72:b9:b7:
7a:ab:a8:d0:ec:d1:aa:9b:fe:11:a5:83:c2:85:c3:
b5:b3:62:0c:d3:20:51:48:15:cd:31:a4:5c:60:c7:
af:8e:53:b5:8a:cb:c6:f8:15:6f:8e:97:6a:22:a4:
95:3f:51:cc:e9:bf:9e:7c:3a:9d:10:61:7a:75:89:
52:74:36:c7:45:dc:81:09:95:2e:32:d2:e8:61:4a:
cc:92:72:2f:51:4e:2f:c3:32:50:52:a9:5a:22:63:
2f:08:74:d7:43:e4:7b:49:ab:9b:c5:af:df:f9:eb:
8a:44:2a:ca:db:f1:96:be:ae:b3:4c:ee:06:83:e2:
5e:36:15:d5:21:3c:46:0b:f9:28:b7:b5:5a:a5:29:
da:09:8b:48:17:c9:5a:57:6b:1d:8b:0a:bb:4b:f5:
28:1b:2b:aa:3d:38:9e:4b:b6:2f:49:c9:97:0f:b5:
0a:2f:d9:0a:07:e5:7b:97:0d:6a:04:68:71:87:23:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FB:B9:D6:18:E6:0B:3E:CF:43:79:B1:71:B2:CA:12:63:82:19:BF
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:96:25:67:80:51:a1:eb:36:90:87:e7:5c:c3:f5:c0:be:
cf:a7:aa:2f:ce:20:22:66:63:58:a8:a7:cc:09:0c:a0:ed:6e:
6c:0c:0c:6e:af:85:c0:8f:f3:34:61:1e:4d:ec:9b:63:37:0e:
b3:13:01:2f:3b:1f:fc:7c:52:df:67:37:fb:37:c6:f4:ff:67:
42:68:d9:65:ea:62:76:37:fc:90:19:36:96:20:c7:81:80:dd:
cf:47:6c:71:03:9a:7c:5b:8a:34:ca:8d:4f:4a:2e:a5:15:03:
39:8f:b9:13:65:66:b4:26:13:82:33:0a:e9:a5:3f:42:53:12:
b1:1a:ab:c5:5a:8f:a8:55:cf:73:bd:4e:5b:8c:f4:bf:b1:12:
d6:ca:38:a1:04:75:3b:7f:a3:97:5f:26:df:e1:a2:2b:06:8c:
aa:48:e9:75:70:c1:55:98:79:0e:d6:4c:1b:28:6a:ad:33:e6:
8d:0c:dd:7e:01:55:d2:53:bc:71:87:90:ef:78:2b:dd:44:4f:
71:52:59:ca:ec:56:48:01:bc:eb:3a:01:d7:f1:44:0c:f0:b7:
c1:4d:f4:e2:c5:e9:ed:4d:22:35:a2:7e:9a:0a:17:8e:45:c9:
f3:25:44:12:38:73:1e:68:fc:5b:27:4d:d4:b8:45:05:ac:e3:
f3:12:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:24 2025 by rpki-client