Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: KAc5MVaivU5Db/jVD3zT3Pj2eTlmYL7xkTnXH9FzT5k=
Subject key identifier: 37:B0:30:5B:A3:7F:87:CE:82:92:F5:B4:93:A9:5B:D0:08:4C:F2:73
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 0197B70EF7B93EEBC20C8BA7CA1EAC41281A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 064E
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: NQvpDnUVbrtsdSn4HWB/NSUmoWGYDdB0x3otBLklqEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f7:b9:3e:eb:c2:0c:8b:a7:ca:1e:ac:41:28:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=37b0305ba37f87ce8292f5b493a95bd0084cf273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:45:71:8f:21:6c:b8:0e:4d:6b:53:13:10:
1c:b0:62:dd:27:77:9b:fe:a8:1b:f2:3d:ee:6f:d0:
ed:ea:c9:dd:cb:a8:af:13:13:db:72:98:17:91:ce:
27:d9:b3:5b:58:4b:67:93:c3:f5:3a:42:7f:2a:cd:
f5:71:e3:17:f6:a4:83:05:ea:b3:9b:f4:e7:de:54:
c9:f8:5b:0d:96:5e:e9:0e:0b:49:43:59:c2:02:f5:
bc:bd:6d:70:6d:77:d0:5d:c9:40:07:da:2d:3d:5d:
ff:84:69:37:bb:ce:a0:15:b1:12:7d:3b:05:95:de:
1a:9b:e7:03:57:cb:75:f5:d0:7d:b7:43:f1:c3:ab:
85:d8:9a:8b:45:23:62:86:80:96:06:5a:f4:c2:41:
9a:b7:14:ae:15:92:ce:bb:77:52:dc:cd:3a:d3:09:
e3:e6:54:83:56:6d:56:24:e3:e6:c5:98:dc:5c:6a:
d7:0c:f0:7b:f7:5d:8d:06:2c:13:95:f4:b0:7b:0e:
5c:9d:0a:b7:be:81:a2:59:04:8e:89:0c:2a:53:42:
6b:f1:c7:19:a4:9f:e5:3f:fc:d6:0e:0a:5c:1f:e0:
19:f4:ff:96:a1:d6:8a:23:23:de:d3:cf:fb:34:10:
c0:84:76:cc:2e:4d:4c:af:5e:19:76:0e:ff:9b:7f:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:30:5B:A3:7F:87:CE:82:92:F5:B4:93:A9:5B:D0:08:4C:F2:73
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:51:57:67:72:8a:43:7b:cd:2c:94:b7:17:32:b2:d1:af:
05:ff:1c:1c:50:0b:f3:b0:b4:ec:c0:e2:be:4a:b2:84:50:18:
d7:f5:c5:24:ea:9b:9a:5c:3d:cc:64:f0:60:7c:2c:7d:b9:0b:
d2:20:67:e8:c5:66:4c:43:3f:9a:bf:9f:3d:c4:8b:db:ce:f1:
a4:a3:60:e6:c8:67:bb:ec:0a:01:c1:66:f0:f0:d2:4d:86:a8:
9f:83:2b:57:6b:38:27:ef:99:99:da:7e:8a:76:d2:30:57:36:
18:90:3f:03:16:a3:a2:a4:f5:b4:eb:a9:7d:b4:a1:7b:ac:fa:
8b:cf:cf:de:50:5c:89:df:1a:1c:ab:fd:2b:50:c9:21:b8:43:
52:9d:3a:ba:fc:7b:37:eb:64:cb:cf:d6:d8:a0:fe:21:0f:86:
3d:d8:55:ab:41:fb:36:37:05:70:63:5c:35:db:b4:84:b5:2e:
ee:60:9f:b6:35:81:ef:c5:d0:f3:4b:67:4e:32:3b:2a:1e:26:
eb:4a:4f:a2:b0:e1:eb:89:79:b0:59:65:5d:0b:37:38:74:6b:
15:72:ac:2f:cd:4e:15:b1:5e:77:8d:40:3c:15:c4:e2:e2:e0:
f8:59:60:1c:a6:2f:10:98:f4:20:d3:49:68:26:ef:29:0e:97:
a4:cb:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:11 2025 by rpki-client