Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: YqQU5CWmR2qhE5PGcoxMkcYXgimRm/MO4KQE8BbYLY0=
Subject key identifier: 01:94:A9:B1:5C:87:0D:07:76:CE:9E:36:6D:62:07:B5:02:56:69:40
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 0198D5BBE1B2470831FE1A68BE0372683E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 1137
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: bbNs8nGu+cT435mRQttBtAYy1/8+CV58TlO863lDcng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e1:b2:47:08:31:fe:1a:68:be:03:72:68:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=0194a9b15c870d0776ce9e366d6207b502566940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:c6:70:6f:d9:4a:48:6c:7e:a8:cb:85:cc:
4d:9b:27:75:16:6c:53:a6:f0:08:38:fc:35:15:39:
87:c6:6a:80:4b:f0:bc:14:47:21:58:8f:2e:4f:74:
cc:a2:65:86:9d:a7:08:9d:6f:ab:ac:64:7d:2b:77:
3e:a8:98:a7:a0:97:23:d4:8e:5e:b9:84:7a:0a:bd:
64:35:ec:9a:6d:e2:fc:f0:d6:5f:09:74:c8:6f:7e:
8c:65:31:14:10:3f:8b:e6:e6:5f:9b:f8:9f:95:d8:
de:75:42:6a:44:1f:a3:df:0c:de:6e:5c:25:54:f4:
9f:63:8b:29:7a:ec:b1:57:6f:32:1b:b1:90:9e:52:
9d:6c:1a:92:53:50:b6:4b:91:3e:1c:3a:fa:bb:9e:
85:ba:93:e9:2c:39:0f:a4:66:37:91:69:38:9c:bb:
51:5d:86:75:ee:6b:a0:e0:b1:ec:ee:33:75:91:3e:
3b:37:d8:9b:5a:c1:2f:00:a5:15:e3:7b:f8:e0:6e:
76:30:c5:7c:98:f6:54:de:66:04:c5:48:c1:31:1a:
69:43:25:cf:cf:73:45:06:12:03:0b:4e:9d:d1:97:
89:96:c2:71:f5:40:be:11:03:fb:85:b3:d6:c8:57:
3d:88:28:67:90:fd:9c:94:4b:f2:6b:4e:6d:dc:6b:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:A9:B1:5C:87:0D:07:76:CE:9E:36:6D:62:07:B5:02:56:69:40
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:15:15:82:a4:9b:b0:9f:6e:e7:0b:13:61:a1:f9:3a:15:
2b:33:2e:54:f7:32:40:be:b8:dc:07:e6:e9:fc:e4:19:4f:ad:
b6:ed:fe:65:ce:f3:0e:d2:9b:c8:3a:59:87:16:dc:e4:f4:f5:
6f:d0:3a:23:64:6f:bd:6f:ca:55:3c:41:d4:63:cb:78:c5:4c:
77:46:94:50:bc:84:c8:22:09:37:cd:2b:88:b2:17:f6:93:09:
ee:23:25:64:3e:13:06:c1:41:82:8b:a8:f2:36:75:5e:ac:b1:
99:4f:b2:11:e8:c2:9d:a4:60:cd:0b:57:e8:58:ae:e2:b6:9a:
6d:b1:40:e4:59:7e:55:24:da:7f:04:64:41:6b:d9:a4:c3:e6:
f3:bf:ea:7b:7d:96:e6:e1:a3:bb:b7:1a:09:dc:42:80:2a:c1:
45:85:ae:6b:9c:dd:3c:d5:82:b9:f2:aa:bb:9f:8f:f2:5e:be:
d4:8f:cf:26:9d:0f:49:77:66:56:44:44:d2:89:65:02:cc:82:
89:3c:29:a3:d7:67:26:c5:c2:e8:1c:99:8c:31:3e:3a:34:37:
92:1f:30:60:0d:8b:f2:45:68:16:52:29:90:8f:0e:38:2e:e5:
c8:86:ed:8c:37:e6:5a:4c:b3:4e:27:0b:06:6b:57:53:bd:60:
45:e4:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:05 2025 by rpki-client