Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
File: QnbajwSHyFCAm0qYcoysIXKycD0.mft (raw, json)
Hash identifier: Zo9hQKe6Q+UMEMVNSoQzwgqJEkbXNHn98tcPTUsltTQ=
Subject key identifier: 45:86:68:93:06:43:8B:BA:70:DD:D3:E8:DB:56:EE:C9:56:DA:57:08
Authority key identifier: 42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
Certificate issuer: /CN=4276da8f0487c850809b4a98728cac2172b2703d
Certificate serial: 0198A04D56B7121DBC2474A658179F51B63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 22:01:19 +0000
Manifest this update: Tue 12 Aug 2025 22:01:19 +0000
Manifest next update: Wed 13 Aug 2025 22:01:19 +0000
Files and hashes: 1: QnbajwSHyFCAm0qYcoysIXKycD0.crl (hash: B3sSIcxRxjy/aCw0CHLXZp2+3bHc8Uf33E21YMcSsUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:56:b7:12:1d:bc:24:74:a6:58:17:9f:51:b6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4276da8f0487c850809b4a98728cac2172b2703d
Validity
Not Before: Aug 12 22:01:19 2025 GMT
Not After : Aug 13 22:01:19 2025 GMT
Subject: CN=4586689306438bba70ddd3e8db56eec956da5708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:db:bf:f6:29:8b:d9:8f:67:5e:cc:26:74:
10:92:d2:40:a7:2c:25:87:bc:6f:33:54:5b:6f:5b:
03:be:fe:75:23:72:48:b8:b9:b0:28:89:ae:a0:f3:
08:2e:7f:55:0c:df:0f:1f:14:bc:67:29:7d:f1:13:
3b:32:83:a4:6f:9a:82:bd:37:84:8a:36:b1:e5:eb:
a2:07:0e:ca:e4:32:18:ee:3e:2e:4f:b9:21:fe:83:
d2:d7:ac:68:8a:a7:4f:c0:ee:95:ee:6a:78:d8:ce:
dc:0c:63:c7:85:9b:3e:66:6f:6e:59:5b:70:8a:ce:
6e:ee:3f:cb:d6:54:63:76:1d:29:a1:71:c6:45:52:
d5:8a:ba:d9:29:a0:b3:2f:7d:df:72:d4:2e:78:a8:
28:52:51:ac:dd:52:a0:d2:a2:dc:2c:27:97:1f:87:
8f:47:38:da:bb:c5:60:63:52:e6:53:7e:64:76:28:
99:86:30:72:89:f6:7d:93:7b:ab:01:2a:cd:5a:29:
67:75:aa:93:9a:ff:42:0a:65:ab:b5:34:bb:58:40:
b0:81:f4:84:94:82:b4:b7:ac:e0:3e:0a:4e:d7:5e:
e9:66:86:d2:44:dd:04:cf:24:c1:de:6d:4f:0c:9f:
2b:1a:5c:e3:9a:c3:8c:3c:0a:3b:9b:f9:af:8e:cd:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:68:93:06:43:8B:BA:70:DD:D3:E8:DB:56:EE:C9:56:DA:57:08
X509v3 Authority Key Identifier:
keyid:42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:89:7c:09:56:a0:73:49:34:ff:ca:db:c5:bf:3f:b5:24:
5e:51:09:b9:b1:25:42:8d:e1:16:62:32:2e:a2:c1:7a:17:e3:
cc:19:aa:7a:22:98:a9:88:c3:1c:14:d8:0d:9b:d1:4f:18:58:
70:dd:c0:54:44:72:fb:ce:24:8f:bb:10:dd:83:ae:3a:cd:40:
48:33:c8:8a:f2:88:0f:2f:e8:6f:4d:52:f3:87:6a:f9:32:9c:
2b:69:58:c6:4f:88:7c:92:cd:31:0d:1d:c8:31:c4:03:06:5f:
4b:af:fb:e1:ef:1b:45:73:f4:1b:3c:b9:99:c0:c7:49:af:6a:
94:4e:22:0d:6e:d2:7e:ae:21:0b:08:02:ea:71:1c:fe:b5:4c:
32:9a:c1:aa:a3:30:5f:2e:c5:ee:4b:25:fe:50:b0:f3:e9:6f:
23:72:40:30:23:65:66:2b:09:f1:b2:81:f3:f3:7c:a4:f9:ea:
ea:be:c7:a1:7b:73:f3:0f:8b:d7:35:d9:99:22:5b:1a:ab:20:
38:29:a2:72:e2:92:e0:88:17:d9:de:c5:a2:96:cb:41:76:64:
e2:7a:84:c7:1c:33:d9:19:45:cb:96:cd:38:a5:63:54:95:3c:
95:48:a3:88:5d:0d:f6:f8:c5:4c:75:9e:2c:c4:be:27:a3:55:
8b:7a:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:13 2025 by rpki-client