Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: mSWbqQaChoFrApKJf+jE0hxMn3fjNM9YzZZeV/glR9U=
Subject key identifier: 08:B4:C2:A2:E9:BA:56:A2:19:BB:C6:D6:7D:82:72:65:5A:79:F8:0A
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 01989E5EBB54D417858A8178C8503C6704C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 13:01:05 +0000
Manifest this update: Tue 12 Aug 2025 13:01:05 +0000
Manifest next update: Wed 13 Aug 2025 13:01:05 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: ocfAksUstqflYmEmPljSyMva7sJqY8gkDL0p2BFI+LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:bb:54:d4:17:85:8a:81:78:c8:50:3c:67:04:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Aug 12 13:01:05 2025 GMT
Not After : Aug 13 13:01:05 2025 GMT
Subject: CN=08b4c2a2e9ba56a219bbc6d67d8272655a79f80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:65:ca:09:87:17:b8:ef:93:d5:ee:80:b2:
97:61:b8:a2:cb:26:a0:03:7d:4d:18:b7:72:5c:34:
a9:71:89:33:da:e6:99:76:9c:9f:45:1c:7c:bc:a5:
9a:c2:02:12:c2:61:98:81:da:b9:c8:71:25:ba:81:
33:62:42:65:f9:9c:ea:5b:44:95:6d:70:da:57:85:
b0:7f:8b:ff:0e:a8:39:cf:c1:1b:a5:9a:1a:a6:33:
da:ab:bc:5a:64:3a:5b:70:9d:95:26:4d:c8:ee:55:
79:3e:83:e3:fb:38:11:5c:5a:24:75:a9:d9:e4:8f:
a3:d0:4b:26:bc:e8:dc:25:0f:24:00:89:1d:d5:5c:
2f:c1:71:e9:f9:ab:35:11:03:75:12:f9:01:e3:d8:
64:bb:49:15:37:cb:2a:66:44:79:76:a6:a0:57:de:
2f:35:a6:19:b6:c8:ff:5c:2e:3e:14:02:da:46:0c:
1e:d8:0f:b3:7f:33:42:a9:dd:f3:fe:c1:0f:f5:0e:
05:69:69:73:0f:74:02:c1:d5:74:83:91:65:69:a5:
89:ae:c1:ad:e0:ed:99:a2:af:96:94:d2:7f:3c:7a:
b8:59:07:e0:74:a6:f9:09:59:4d:4b:12:54:56:5a:
63:62:d7:b4:ba:ab:11:38:a6:d5:c9:3c:96:ed:16:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:C2:A2:E9:BA:56:A2:19:BB:C6:D6:7D:82:72:65:5A:79:F8:0A
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:19:8e:60:cf:89:e7:d2:87:a2:ef:f6:7e:e3:0f:d7:f4:3a:
42:0e:82:cd:bf:90:e0:9d:81:11:4e:a4:ef:9f:b6:a2:1a:56:
7e:c3:c0:28:19:da:5d:95:25:1a:cf:6f:54:bb:76:39:5e:b2:
c0:a7:d4:d3:ee:c2:2d:74:58:7e:af:03:fc:c3:cb:39:5f:4f:
2e:77:ac:23:b3:3f:29:fc:70:12:dd:ba:9d:b3:27:0b:a0:55:
5b:20:ce:07:79:4e:a5:73:23:f8:a6:1f:c3:7a:7a:aa:86:d4:
e0:9a:ef:69:57:b3:6d:56:ef:96:c1:90:a7:63:dc:c4:e3:3a:
7a:37:77:3f:13:f2:75:de:54:d4:ad:fa:c9:d6:9b:a4:44:47:
6f:6b:7c:43:bd:b3:23:1f:27:de:3b:43:26:16:13:d9:ff:fb:
69:5e:dd:bd:33:d0:0a:da:4e:ee:7d:a0:5c:f6:95:e9:47:a4:
c7:b4:93:1a:52:30:4c:27:59:db:02:3f:9d:25:36:98:fa:97:
00:6e:de:88:bc:61:8d:e1:cc:7e:86:9e:2d:54:14:4a:80:97:
20:c3:79:b4:52:37:99:c9:61:b5:22:d0:76:c8:5d:09:9d:49:
b2:06:7d:3d:b0:98:1e:88:8b:fa:67:6c:0a:67:d1:ba:fd:f0:
ea:1e:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:02 2025 by rpki-client