Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: 35MBZ8TiDjmEMWG6AjfZ6XkS7GpzIUKgv7Lccz03PtQ=
Subject key identifier: 63:FC:E1:3A:7F:E0:C3:8E:8C:5F:F0:A1:1B:92:C1:BA:2D:C4:9F:6F
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 0198D54E1A9CFC2894DA2A33039A40F57C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 08EF
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: DW0pCUHfmdUyc4ZqSgz08aKe3Y2OhWFLU6CUAFJ5g9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1a:9c:fc:28:94:da:2a:33:03:9a:40:f5:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=63fce13a7fe0c38e8c5ff0a11b92c1ba2dc49f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:80:6e:d5:67:a2:38:22:93:9c:f4:41:8d:
1d:d4:d0:27:9b:ca:e9:d7:bd:52:24:2d:a2:c2:e3:
91:47:3c:62:ad:d3:1e:5e:39:c1:67:5d:64:76:71:
b3:49:8d:76:ba:b2:5c:5b:0b:87:85:e5:cd:6e:8a:
31:34:06:9f:72:21:e2:c9:a5:78:a0:45:a5:d1:1e:
c1:0e:77:75:81:1c:0f:58:93:b2:a9:b0:f2:7b:09:
d1:f3:5b:58:49:82:56:fb:6b:03:6d:11:77:30:99:
bb:1e:9a:1d:71:9f:d0:c9:53:40:6d:aa:01:95:93:
35:7d:d8:33:b5:2c:62:d2:5c:a0:dd:c1:11:80:1d:
86:72:d7:d6:ea:c3:70:fe:70:2e:73:cb:4e:f7:71:
58:89:a4:63:6a:80:e2:24:c3:19:31:ff:e8:03:37:
fc:72:cc:c1:69:2b:4e:d9:d1:c4:49:7e:9e:c2:68:
d7:a2:c2:9f:d1:12:b6:00:07:2a:25:82:72:ee:17:
bd:d8:cf:68:fe:54:0e:7e:1c:3a:b6:3c:3b:ec:3f:
3b:e9:7f:b3:d7:9a:37:84:4e:a6:34:6c:e5:60:23:
69:6d:85:34:21:21:06:c4:ab:b9:b8:0d:8d:cc:85:
00:6f:c6:c9:0a:e5:39:fe:92:c5:df:ad:d6:bd:2f:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:E1:3A:7F:E0:C3:8E:8C:5F:F0:A1:1B:92:C1:BA:2D:C4:9F:6F
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b5:ef:31:d2:43:99:a6:ad:cc:8f:36:e6:53:bf:d8:d5:e0:
d2:9e:b0:24:d7:85:7b:24:8f:0b:a4:ec:e1:62:08:b7:30:e6:
13:96:9c:a0:4f:73:bd:6b:0a:46:01:e8:12:1c:49:51:66:4e:
bc:34:df:14:d8:28:8f:5f:10:ea:ec:15:e9:dc:c8:c5:5a:0d:
81:60:61:64:fa:99:f2:7a:a9:4c:84:fc:f4:f7:8e:d1:ed:b1:
8e:58:74:c5:50:32:d1:7f:51:5c:3a:27:a3:7e:da:5a:14:cc:
8d:93:0e:8e:6f:9b:22:eb:10:aa:82:36:3c:81:53:dc:b2:6f:
fc:9e:07:10:c6:d2:95:90:a6:5e:4c:0c:9d:f5:fb:b4:7e:be:
51:a0:75:40:04:04:cb:c4:19:e1:92:28:96:8f:94:03:cc:a9:
60:97:cb:80:e7:59:37:22:89:86:69:72:2c:be:4c:98:4c:a7:
94:97:94:cb:a8:a2:3c:12:68:3e:e3:a6:07:01:ef:be:51:89:
8f:2b:2e:88:9d:73:f2:43:e4:df:87:f9:f2:28:0f:c4:57:3c:
7a:f1:13:5e:0b:71:47:ef:d0:53:1a:bd:70:4d:ab:af:af:96:
34:c8:cb:ce:a9:aa:e9:a1:a7:2e:43:18:c5:06:92:51:5f:65:
c0:40:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:48 2025 by rpki-client