Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: WpX+QOk6Rc6vBO5T1fjnfOSTt4tbhlyC++8OSSDSiSw=
Subject key identifier: 3B:06:9E:00:56:31:CD:A1:D7:9C:36:8C:4C:BA:1D:2F:1A:7C:FD:B1
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 0198805488A753561F4FC4F022BF798D5166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 1333
Signing time: Wed 06 Aug 2025 17:01:20 +0000
Manifest this update: Wed 06 Aug 2025 17:01:20 +0000
Manifest next update: Thu 07 Aug 2025 17:01:20 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: TNIgxfEngh5cz0/n7e4YtyckvM9F/4/yP2T4F9eWPfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:88:a7:53:56:1f:4f:c4:f0:22:bf:79:8d:51:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Aug 6 17:01:20 2025 GMT
Not After : Aug 7 17:01:20 2025 GMT
Subject: CN=3b069e005631cda1d79c368c4cba1d2f1a7cfdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:98:3c:94:df:4c:25:57:53:31:83:46:a1:
c3:23:f0:32:33:cc:be:f3:2f:ff:a6:7c:f1:6b:a8:
38:8d:47:0b:ab:50:c9:56:2d:5b:0c:89:a7:7f:1f:
82:cc:6f:09:1d:c7:57:65:0d:99:8c:6e:4a:71:63:
d9:4e:ee:a1:2a:64:4a:1d:6d:fe:2d:f6:e6:4a:7e:
d5:43:8c:ba:dc:16:d0:d5:b2:0c:91:b9:bd:42:9e:
20:03:9b:97:80:26:e5:14:b4:42:a5:b0:4c:2d:5d:
9b:b9:48:78:a2:cd:11:62:92:84:e9:89:46:50:47:
f4:98:7c:57:51:7f:2a:57:6c:2e:a1:9e:e0:95:a7:
b7:83:a4:b2:53:a4:e9:e6:cb:02:38:19:bf:d2:8b:
df:d2:80:2b:55:d8:23:2b:a7:91:31:bb:06:bd:cb:
36:3f:e2:ee:8c:97:a9:97:b9:1b:3a:44:2c:05:25:
b0:67:f9:b4:15:09:15:97:c9:19:99:d6:d1:56:ea:
7f:2a:e5:da:ea:46:26:80:4a:22:03:ad:d2:80:a0:
ba:8b:a0:b2:9f:0e:33:31:d2:85:e8:c4:08:db:53:
04:bc:51:07:aa:21:ea:29:5f:b5:ef:a8:3b:a9:84:
c5:21:90:c5:d5:f9:36:cf:59:fe:3c:16:7a:40:8f:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:06:9E:00:56:31:CD:A1:D7:9C:36:8C:4C:BA:1D:2F:1A:7C:FD:B1
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8a:41:39:1f:ed:68:41:f5:21:ce:ac:4b:3e:21:a3:e1:96:
48:3a:15:79:31:3c:b7:1c:f9:d2:51:c5:57:df:57:ad:7b:c1:
7c:e5:9b:f4:31:fe:d8:f0:9d:4f:fa:1f:5a:18:fe:11:c4:1a:
15:8f:d9:1e:19:b0:a2:08:57:c9:f8:26:5b:68:a1:11:7f:ed:
88:be:ac:be:b2:ff:d0:2f:ae:d0:d0:8a:55:79:96:8c:9b:31:
7a:8e:1c:61:c9:d3:cf:fe:a9:c6:bc:f7:ba:f2:82:82:0b:c6:
b8:92:0a:10:e4:56:53:9a:16:39:60:be:34:76:19:32:d4:72:
ad:eb:e7:02:6a:f0:13:09:8a:26:a5:e6:c5:d1:d5:be:52:04:
a3:7b:b9:a0:52:14:39:98:ce:94:17:59:58:81:27:8b:de:73:
45:33:92:ef:4c:a7:50:ee:35:f8:c7:a0:14:13:7b:69:c9:7c:
fe:6f:06:7a:5c:bf:d8:bb:f9:6f:b7:24:47:98:e6:18:da:13:
ad:1f:b0:4f:b7:b9:7a:6c:e4:75:5d:55:52:b6:5c:c6:90:48:
14:bf:cb:39:04:83:3d:b9:ec:de:df:ec:d8:b6:c4:12:94:3f:
f0:01:e8:f6:2a:ca:e3:32:b7:d3:a6:36:e9:17:9f:36:f5:86:
41:b4:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:45:40 2025 by rpki-client