
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json)
Hash identifier: eMV18nRBA+if2gt7XfajXOwZgwps5mNeNoBw/0xLI9Y=
Subject key identifier: 39:27:F8:7A:CE:F5:E4:81:5F:72:30:92:F8:EA:63:D8:6C:E4:51:AA
Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Certificate serial: 019872984A59895FD886477035F0E9D5F784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
Manifest number: 01E5
Signing time: Mon 04 Aug 2025 01:00:39 +0000
Manifest this update: Mon 04 Aug 2025 01:00:39 +0000
Manifest next update: Tue 05 Aug 2025 01:00:39 +0000
Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: e1cwpIdH5YxowU8tWWHqbqQDZyn7iZ1b37kuGPFaxbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:4a:59:89:5f:d8:86:47:70:35:f0:e9:d5:f7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Validity
Not Before: Aug 4 01:00:39 2025 GMT
Not After : Aug 5 01:00:39 2025 GMT
Subject: CN=3927f87acef5e4815f723092f8ea63d86ce451aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:5e:9d:39:eb:40:48:7c:83:70:20:1c:24:
f2:48:93:6a:06:00:37:51:d4:5f:7f:ff:d5:a5:d6:
cd:1c:4e:f9:bb:10:53:47:27:a4:be:e6:6a:de:f9:
5c:f3:08:26:f0:df:47:cf:18:7c:bf:fe:dc:34:c7:
b2:ae:a5:84:cf:bb:be:a7:d8:24:38:c3:50:a1:c6:
4f:42:43:b4:18:57:d1:5e:59:1e:91:54:32:b0:bc:
1e:16:fb:14:db:b7:20:88:03:30:ce:6f:23:eb:8d:
5e:72:c7:72:8e:da:49:32:e8:9b:12:24:61:09:6a:
c4:5d:d4:cb:7f:ba:96:5a:21:8e:21:d6:c1:05:7b:
8c:c5:a9:49:d5:12:5f:5e:20:f4:be:08:28:17:2a:
ad:e0:57:38:1c:de:28:7d:f7:e8:17:55:8a:03:aa:
1f:76:aa:28:fc:74:4b:c6:2f:10:75:4c:7d:d1:07:
aa:b0:c4:e8:e2:ce:ce:f2:5d:67:77:20:bf:72:ed:
08:31:94:09:61:7f:f4:f2:17:47:43:68:0b:b0:d9:
01:c0:5f:f2:9a:19:c1:50:70:7d:88:0e:3d:ed:fb:
d8:1f:05:ac:08:eb:17:f1:2f:d8:02:98:fd:44:27:
b7:3a:43:d3:e5:0c:62:ad:79:e0:db:53:85:66:d7:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:27:F8:7A:CE:F5:E4:81:5F:72:30:92:F8:EA:63:D8:6C:E4:51:AA
X509v3 Authority Key Identifier:
keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9f:1b:6b:ba:00:95:55:e6:5a:b0:79:fd:15:e6:01:4e:ff:
12:13:3c:b3:06:88:e9:5a:b8:36:c8:f9:da:17:41:a8:5e:e8:
28:63:9e:58:e1:11:8c:58:27:15:6e:aa:46:17:2e:01:04:eb:
a0:23:76:11:4f:c1:94:fa:df:13:d7:7c:55:f2:0d:18:36:ad:
2e:c2:67:f1:04:01:d9:d7:48:c9:7b:34:c0:a1:9c:2f:50:67:
e8:22:a6:a3:1c:05:5a:2c:31:c8:20:93:14:20:d6:ad:a0:43:
e5:13:84:6b:ea:28:56:0b:12:02:57:bc:d1:85:2c:84:35:a9:
64:bd:05:02:2b:4c:60:79:9b:21:43:2f:4c:50:9c:35:f6:db:
f3:7d:c1:3b:f2:43:8f:ec:37:58:d2:8c:41:ab:ae:8c:f0:36:
59:d4:6d:e5:ca:6d:d6:c1:0e:36:68:26:c4:bd:9b:32:69:18:
50:c6:60:7e:74:e8:8f:87:4b:70:26:25:3c:d0:34:a7:23:40:
d6:fe:18:51:8f:31:ce:6b:f1:01:6a:31:1e:4f:a6:3c:05:e1:
eb:db:88:ca:a2:96:ae:83:35:5e:7e:a0:ba:6d:f3:ad:41:43:
e9:e4:ba:79:25:47:5d:4b:75:02:d2:e7:1f:bd:50:17:27:46:
49:2a:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:50 2025 by rpki-client