
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: Vjbdykgr+zIHRgnFME/wb4sxRe43fqxYyZesoqczn1s=
Subject key identifier: 9A:BD:12:27:0E:EA:37:2F:08:77:2B:D5:E7:27:B8:E1:AA:CB:5F:89
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 0198733CF80F023B71494AD5D672E3B4B5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 0303
Signing time: Mon 04 Aug 2025 04:00:32 +0000
Manifest this update: Mon 04 Aug 2025 04:00:32 +0000
Manifest next update: Tue 05 Aug 2025 04:00:32 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: GNWEoZbxddIl8j9m8pys7BmKKemuj5eEUxgTDUJi0rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f8:0f:02:3b:71:49:4a:d5:d6:72:e3:b4:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Aug 4 04:00:32 2025 GMT
Not After : Aug 5 04:00:32 2025 GMT
Subject: CN=9abd12270eea372f08772bd5e727b8e1aacb5f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:b3:0c:c0:10:fc:e2:dd:a6:1d:c4:ac:57:
ec:77:ab:45:f9:5d:78:1b:e8:7b:ae:b9:eb:15:99:
e6:79:6a:c8:2d:c6:46:28:4f:70:3c:d8:85:76:f7:
42:2a:33:db:66:b5:b9:42:62:4f:57:eb:f6:d8:e0:
68:e7:90:ae:0e:29:cb:f8:72:12:ea:f0:13:63:9e:
23:36:3c:99:40:2a:6e:8c:6b:cf:59:69:73:08:75:
84:9d:39:e0:62:f9:87:78:fa:4f:8b:ff:a0:92:ef:
96:85:86:7d:1a:11:99:92:ae:a8:b2:07:32:fd:d2:
c2:d6:e3:4d:99:c3:f6:d8:63:79:90:44:5c:91:29:
57:b0:54:3e:80:6b:0e:cc:ed:d8:3f:9b:3e:87:5f:
57:bd:ac:f9:fa:08:5d:98:3c:83:a8:62:31:68:cc:
58:b3:88:79:19:39:d9:48:3b:fc:07:f4:50:b7:b5:
bc:8a:97:8b:5d:b2:0a:3e:00:cc:f7:14:ad:ee:a1:
e6:bb:72:97:22:3b:26:fe:c2:0e:d3:44:73:96:22:
b6:70:08:96:09:8d:47:cf:4d:2c:78:8e:51:b1:ee:
73:39:c1:d7:bf:8a:bc:cc:41:40:db:2f:94:66:f3:
79:4f:17:00:ca:6a:29:86:f2:da:c9:b3:58:5d:66:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:12:27:0E:EA:37:2F:08:77:2B:D5:E7:27:B8:E1:AA:CB:5F:89
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:05:b5:23:34:4b:5c:45:36:e9:d6:69:d5:4c:bf:4b:aa:
55:dd:51:04:c8:fe:3f:c6:7e:bb:ce:5d:f3:93:f1:17:ef:97:
46:ba:78:e2:34:34:a5:3a:c7:7b:a0:36:f8:c7:2a:5c:fc:40:
f5:88:63:85:f3:36:d7:41:05:78:05:55:55:66:17:a4:1a:79:
a7:8f:3a:d7:d0:cb:1e:53:33:7e:95:e2:4d:48:74:21:70:bd:
fd:89:9e:08:28:4c:56:a8:e2:ba:5b:e4:3e:e9:62:55:21:9d:
bd:42:36:76:b8:90:51:2d:95:f2:85:c4:11:36:92:97:08:51:
88:62:08:8a:78:45:1c:ba:8e:06:d2:20:1e:32:8d:30:36:4e:
6a:96:3b:10:1f:13:10:b3:41:30:f1:af:65:83:ed:06:6b:13:
6e:a8:30:7f:92:d1:29:4b:15:d4:25:9a:c6:c9:8a:97:f2:c6:
90:b8:f5:d3:68:1f:06:45:9f:c6:bd:30:7a:57:d6:95:94:ca:
c6:48:6a:60:ce:a3:cb:38:cc:ba:30:48:28:92:0c:d9:04:6d:
37:8e:a8:d6:cb:df:03:0c:d9:c6:62:73:44:c4:8b:b5:90:c2:
a5:a2:47:80:1a:6a:a2:45:a1:d3:cf:bd:9c:2b:58:1d:0e:05:
4c:0d:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:02 2025 by rpki-client