Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
File: qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json)
Hash identifier: Q4YHhiH6ca3FNDI+SD/gnuPBey8QxjKv83I4xERbJmM=
Subject key identifier: 3C:16:D2:5A:2B:DB:04:BA:03:93:18:81:C9:C7:B7:7A:10:1D:C7:D8
Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
Certificate issuer: /CN=a97246fc431933f0b2820ced965c7851180b15ee
Certificate serial: 01989034C867AF2E461481724AEE398C118A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
Manifest number: 09CE
Signing time: Sat 09 Aug 2025 19:00:34 +0000
Manifest this update: Sat 09 Aug 2025 19:00:34 +0000
Manifest next update: Sun 10 Aug 2025 19:00:34 +0000
Files and hashes: 1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: 3KXvnetns5frXk1fc67VBxHMJht9LvWiJhGhFfW4PzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:c8:67:af:2e:46:14:81:72:4a:ee:39:8c:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee
Validity
Not Before: Aug 9 19:00:34 2025 GMT
Not After : Aug 10 19:00:34 2025 GMT
Subject: CN=3c16d25a2bdb04ba03931881c9c7b77a101dc7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:c4:1c:a6:9f:32:65:0a:27:98:b0:8e:f5:
93:12:e5:8d:be:49:c7:d9:96:86:91:d0:f1:d4:ce:
e4:0b:04:78:63:d3:54:98:c7:4e:8b:02:f2:95:64:
17:f7:05:67:6f:73:d7:54:9a:80:b5:be:fb:18:19:
ea:b8:6d:42:91:2c:9d:24:d5:18:48:df:14:de:29:
9f:46:59:c2:e5:e6:35:50:08:cf:80:bd:56:b8:58:
33:cd:ba:d9:f8:34:4e:2a:7a:ac:5c:d7:70:8e:88:
a3:67:8f:c4:23:11:9c:04:17:4a:75:75:3c:bb:97:
d4:53:16:d8:ca:f8:db:c0:bf:98:94:46:00:dd:d0:
41:92:9e:f1:28:69:e1:19:ce:68:24:04:dc:ad:9d:
8f:5c:94:4b:46:23:cc:4c:cd:3e:c6:81:6c:71:a0:
b4:47:ce:58:7e:9b:a4:23:a5:46:fd:24:da:52:5e:
a3:f5:69:31:73:3f:ba:96:03:73:1c:a5:bf:98:c3:
33:16:ec:fb:6f:aa:7b:bd:a3:7b:d7:82:60:e1:4d:
41:d9:e2:72:0b:53:4f:5b:9c:9b:13:ac:41:74:20:
4d:86:d5:e6:92:3a:f8:06:b6:40:33:fb:48:da:a7:
bb:4a:48:ff:83:ae:51:36:7e:4c:e4:35:ca:12:ee:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:16:D2:5A:2B:DB:04:BA:03:93:18:81:C9:C7:B7:7A:10:1D:C7:D8
X509v3 Authority Key Identifier:
keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:4e:d1:39:6a:4c:e5:06:bc:2d:5f:a4:c4:65:c7:33:5c:
bd:71:0b:70:89:05:3b:ac:af:7d:3e:ee:e9:3a:28:86:9c:df:
1d:2d:e7:9f:52:1b:39:a4:d0:f6:60:75:58:e8:e7:a1:ec:08:
07:cb:a5:f0:8f:31:fe:af:16:d9:fb:f9:54:26:fc:60:f8:79:
95:4e:c9:b8:0c:15:d4:52:2c:c6:eb:fa:e4:58:83:86:32:15:
00:25:15:6e:5d:4a:39:dd:ab:68:b3:11:49:a8:dc:a7:96:2a:
61:d5:83:07:66:4b:78:eb:ca:f4:67:6a:72:47:4c:27:d2:89:
9d:de:ab:3f:e9:2e:3b:a1:0d:41:ba:6a:d1:eb:31:dd:e3:98:
11:f1:d9:c0:da:73:17:2d:4d:de:c6:02:a8:e3:99:10:a5:c9:
4b:70:d2:c4:37:31:64:a6:dc:62:62:49:18:fb:48:62:06:d4:
c7:f0:a2:0f:7f:0c:a9:cf:33:b3:96:d9:97:25:c4:80:81:c3:
7a:42:21:ef:0e:fe:67:b5:e1:a6:88:76:9e:ec:af:8d:d6:8d:
df:d8:49:fd:4a:e5:9e:85:b8:95:4a:ab:ad:ac:ca:08:4e:84:
5b:2e:1d:ca:7d:43:d4:27:63:dc:ed:48:46:aa:4f:51:0d:54:
7c:56:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:59 2025 by rpki-client