Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: QitcgGb0tdirXOJ1p7eti5xD5brOfi/weuJv2e7F9L8=
Subject key identifier: 2F:85:F9:98:84:7E:AD:1B:78:02:A3:8F:7B:57:63:CD:6C:32:AB:A5
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 0198D54E2028A298050BCDD789688A5B9EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 10E0
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: /pzt0hLfQSPi6mnEG9/PDbfCtbaX+IRY+2/xjYN0O5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:20:28:a2:98:05:0b:cd:d7:89:68:8a:5b:9e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=2f85f998847ead1b7802a38f7b5763cd6c32aba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:7b:57:0b:e0:69:e9:7a:e2:45:68:5a:63:
d1:5a:82:9b:23:ed:6a:a1:ed:4f:77:7d:d9:97:45:
89:06:7c:95:26:80:7a:3b:6b:3e:2f:12:e1:7a:aa:
23:c2:79:d2:0e:30:f2:6e:a9:77:84:7f:bf:70:52:
5e:fb:4b:b7:c1:fa:b4:8c:37:e5:df:bb:de:fb:de:
04:d3:b8:b0:cb:83:64:92:5f:b2:e6:18:ea:f1:8e:
4b:14:0c:cc:c7:08:cd:be:e5:49:73:b2:16:94:8f:
98:ab:f3:02:1a:04:97:9d:ff:c3:20:57:03:80:f1:
c3:5a:3b:2e:64:75:16:64:02:fb:38:73:c8:e5:0e:
8f:96:eb:fc:3a:36:fe:b7:02:88:ec:5e:25:69:4c:
fc:6c:bc:d5:51:5b:fb:cb:4c:a7:bf:a7:58:e8:69:
53:bd:17:74:11:47:7c:dc:d2:75:25:84:00:36:08:
0b:51:fd:eb:56:61:51:b3:66:c5:d4:4e:1d:ea:1d:
ff:dd:90:11:fb:b3:c6:96:cd:77:2e:2d:bd:33:a4:
32:b5:e3:38:86:1d:6e:4a:e7:c6:82:f8:5f:71:1e:
5e:2a:db:18:e0:8e:6e:b2:b5:5f:75:16:64:c5:72:
48:fc:ee:ab:c3:d8:87:c9:fb:10:bd:e9:00:e2:b1:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:F9:98:84:7E:AD:1B:78:02:A3:8F:7B:57:63:CD:6C:32:AB:A5
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:07:2b:bf:4e:59:b3:f7:93:3a:a6:04:fc:5a:a2:56:f7:71:
0d:e7:1b:79:75:09:b7:5f:97:29:47:71:69:b9:a7:84:31:6f:
9a:07:b4:86:43:70:be:52:c0:6f:a9:4f:81:b7:ed:fd:49:2a:
6a:d8:5c:fd:7a:e6:15:53:05:02:1b:46:d6:a1:d2:93:97:9c:
cc:d0:6f:82:32:09:df:bf:05:0d:6a:cd:88:fc:e4:ee:9e:e6:
6d:40:25:ea:0c:b4:7f:8e:55:29:f5:7e:e5:71:88:ba:c0:f3:
72:45:d6:b4:b2:4f:93:cc:58:88:f8:b1:37:5e:65:92:8c:62:
13:54:06:26:69:79:bd:f5:cb:e2:f1:ad:02:cf:a1:3c:b6:10:
f3:cd:84:09:ce:47:df:bc:3a:d8:c3:68:45:01:60:c7:33:6a:
31:1e:15:a6:2a:29:f5:df:0e:40:82:b1:50:ce:0e:1b:68:1c:
97:74:17:b6:96:c9:3c:b3:ef:72:81:1a:b8:4c:92:86:1e:bd:
f6:35:f4:c4:67:31:03:04:ec:4f:c8:cd:3a:05:43:05:0d:b8:
32:0d:ec:7e:f8:47:e6:61:5c:ed:f9:b7:8f:00:fd:2f:68:77:
04:0f:6b:fb:44:e0:a0:6d:aa:b6:22:c9:d2:9f:b3:d0:be:cc:
d5:62:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:25 2025 by rpki-client