Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
File: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft (raw, json)
Hash identifier: TsE0awJKn99go9ANflUUhF6IW1qMJZOPbQKvOZ5KKzw=
Subject key identifier: 72:DF:8C:E1:B2:B6:DD:BC:EC:EE:69:00:3D:A0:5D:C6:1D:23:58:B5
Authority key identifier: 42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
Certificate issuer: /CN=429fe46633e4d3276251b3b261af727d35d4dffb
Certificate serial: 019873E37AF6191C89DDCA5638B00F73BF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
Manifest number: 0593
Signing time: Mon 04 Aug 2025 07:02:24 +0000
Manifest this update: Mon 04 Aug 2025 07:02:24 +0000
Manifest next update: Tue 05 Aug 2025 07:02:24 +0000
Files and hashes: 1: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl (hash: 5KRb0X7JjpCBImyNJOxN3WeYHvic9XJrqDxbfIpBiMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:7a:f6:19:1c:89:dd:ca:56:38:b0:0f:73:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429fe46633e4d3276251b3b261af727d35d4dffb
Validity
Not Before: Aug 4 07:02:24 2025 GMT
Not After : Aug 5 07:02:24 2025 GMT
Subject: CN=72df8ce1b2b6ddbcecee69003da05dc61d2358b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:3b:4b:bc:a9:96:47:ab:8d:99:c3:49:69:
f1:b2:15:d7:9c:3a:0f:58:e0:2c:60:c5:60:0f:a3:
52:f7:19:b8:cb:71:9a:1b:5c:10:4e:ca:91:9e:97:
c8:8e:eb:01:e9:25:18:28:72:4b:66:60:79:0b:7e:
5e:6c:23:f3:a2:fc:ff:cd:97:4d:44:00:0d:2b:8a:
00:aa:01:d5:58:28:dc:79:4d:f0:02:3e:63:e8:27:
e0:a8:78:ce:05:4d:2f:fc:8f:a3:a6:35:54:bc:e1:
fe:0e:26:57:8b:08:21:3b:18:c7:83:76:74:1f:a6:
21:24:a8:a7:14:83:6b:39:32:4b:1f:af:d3:92:e5:
73:fe:3c:b3:5d:b8:54:5a:49:1f:e3:18:58:6f:c1:
71:fe:a9:a5:e9:94:84:82:11:89:ac:3c:77:c7:ac:
da:7e:02:8e:14:db:5d:e9:e7:bf:5c:03:79:e6:fa:
07:d1:e0:82:e6:79:aa:5c:36:d0:ec:76:ad:d0:f2:
4b:1c:10:6e:56:24:c6:f4:f9:08:43:04:f6:f1:7d:
96:66:7d:bb:96:7d:10:74:f5:22:d0:17:bc:82:1d:
67:51:a1:93:0c:00:e9:e5:16:91:8f:0c:ae:c8:8d:
88:56:d7:e1:e7:71:eb:5b:8d:b5:5d:92:48:5a:01:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:8C:E1:B2:B6:DD:BC:EC:EE:69:00:3D:A0:5D:C6:1D:23:58:B5
X509v3 Authority Key Identifier:
keyid:42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1f:b8:7b:25:23:67:dd:96:37:cd:0e:16:9a:85:48:ba:f8:
ea:77:2f:02:34:c9:ae:04:08:52:e7:5c:c0:c3:c3:1b:ad:89:
0e:9c:fb:fa:1f:78:a8:58:2f:cd:27:a2:89:97:1d:35:71:9c:
e5:2e:86:02:36:df:d6:4c:59:53:5f:04:f6:28:f0:69:25:0b:
dc:bc:2a:a2:fb:33:b9:76:5f:d6:cc:8c:5f:4c:48:cf:45:59:
c3:ea:a6:73:ce:af:c1:11:2a:a0:f3:a7:99:3d:ff:ab:ac:5b:
d6:bd:e0:ae:66:90:ca:51:52:cc:8d:36:a9:bd:2b:d9:7e:f4:
ad:ac:78:36:46:88:29:00:77:73:a2:67:16:bc:cb:8e:65:f8:
1e:b2:ae:f0:32:68:cc:07:ae:94:9f:ae:90:8b:02:3e:3b:5f:
69:0e:ef:d2:e3:87:17:65:55:74:85:fa:7c:78:7d:22:da:a4:
58:d6:91:09:ad:ce:cb:80:c1:28:52:2d:aa:ab:aa:44:1a:92:
50:b5:f0:8d:ec:ee:06:3c:04:9e:3c:26:1d:ac:c9:26:15:1a:
e2:b7:1d:41:f4:a5:c0:12:3c:31:3a:9d:da:67:5a:cd:77:54:
c7:71:73:c1:42:ff:20:7b:26:5d:f3:09:e9:89:10:79:5d:74:
e5:c9:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:48 2025 by rpki-client