Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: N7MOvX2VcPmFhIHfqbYRJHdhf9TiAZmnCgOSZr5Vxk8=
Subject key identifier: 71:AB:F2:B6:A6:09:E1:DC:88:EE:B0:91:6D:54:81:E2:09:8C:16:A1
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 01987450ECD961CE2055D8747A1E4209984C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 0700
Signing time: Mon 04 Aug 2025 09:01:57 +0000
Manifest this update: Mon 04 Aug 2025 09:01:57 +0000
Manifest next update: Tue 05 Aug 2025 09:01:57 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: RfmAH7YvMnHV8gOfM1dFyhUDSTYs3+KsLkOHLoPd2JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:ec:d9:61:ce:20:55:d8:74:7a:1e:42:09:98:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Aug 4 09:01:57 2025 GMT
Not After : Aug 5 09:01:57 2025 GMT
Subject: CN=71abf2b6a609e1dc88eeb0916d5481e2098c16a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:3d:51:5f:d0:56:49:c3:af:5b:6c:82:ae:
8b:2a:45:98:c2:6c:f5:7a:cb:89:f4:46:97:0f:60:
81:9d:17:12:dc:44:c9:36:3d:8c:6a:94:71:7a:9f:
1a:b5:75:7a:4a:d5:19:b7:15:51:7b:df:f9:f3:1f:
73:05:84:d3:b9:07:54:63:99:e4:c2:bc:44:93:93:
a3:61:d9:2c:77:07:6c:78:ca:51:80:05:37:47:8d:
58:b1:6f:0c:35:1f:ec:f7:b7:ea:65:5e:57:a0:d8:
6a:49:28:2d:4f:c2:ce:26:7d:21:6b:14:c7:8c:39:
81:85:42:e1:67:10:57:03:8b:e8:d5:d2:eb:f0:01:
3a:1d:47:bc:33:eb:62:00:b7:b2:99:b0:c5:c0:97:
47:e1:bb:0b:85:a5:be:b8:17:03:c3:0f:91:47:6e:
da:bf:f0:a3:b4:61:f8:42:1a:78:97:3a:1a:49:27:
88:d1:c3:6f:0d:6e:b5:a8:de:22:f4:63:0a:2f:10:
6e:0b:08:d0:c3:7a:99:c3:fa:4c:69:57:05:b3:f5:
85:fd:ff:df:f5:cf:14:76:93:16:8a:f3:ae:ca:20:
24:ee:1b:6a:aa:1b:0e:59:c5:ab:4e:5d:7e:00:88:
52:24:17:ed:5c:55:f7:41:bb:79:0a:e2:ec:1e:67:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:F2:B6:A6:09:E1:DC:88:EE:B0:91:6D:54:81:E2:09:8C:16:A1
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9d:05:ef:aa:e9:26:ae:bc:ee:b6:56:20:30:71:ea:fa:1a:
55:7c:87:78:e8:99:3f:49:53:90:5c:cb:b7:35:0a:41:8d:ee:
97:f4:9c:8d:53:77:b2:28:42:4c:70:6d:0c:a3:2e:b9:1d:c4:
48:6c:a6:ba:10:e5:45:b0:4c:f7:2c:63:e7:ce:7b:b0:8a:b8:
58:5e:dc:4f:27:ea:2c:56:cc:a0:84:bf:b9:56:1a:d0:42:54:
67:61:72:c4:33:4d:34:ab:68:f6:be:14:81:d1:5c:c4:ab:90:
b8:3c:ba:4c:92:a2:65:f2:fa:0f:be:3a:a7:dd:a5:43:a5:b5:
5e:e8:6a:e5:a6:3a:64:fd:48:5d:1d:cb:ff:65:d2:d7:80:d5:
82:0a:a7:32:6c:b0:ab:50:02:a7:59:3b:f8:0c:36:a0:3d:cc:
01:47:41:62:73:9f:9c:ef:57:88:27:a8:ef:70:1c:0b:fb:8b:
c2:83:76:a9:85:39:82:4f:8b:92:61:21:05:89:bb:2d:73:86:
cd:27:93:54:85:02:91:f2:ef:ac:4d:e2:e8:9a:ec:4d:a3:75:
ce:fd:9f:0f:aa:86:00:6b:73:e6:0a:a4:8a:01:60:4f:ed:74:
54:91:81:28:99:79:5b:fd:c9:19:da:51:cf:c2:a9:ed:11:9c:
bd:cb:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:24 2025 by rpki-client