Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: L5mvG/e3zTlC5Zq/HFoZayJ+iLxEgSnSGymezvWTWNM=
Subject key identifier: EC:59:3F:0D:D3:E4:A7:2D:AC:3D:20:24:41:4E:EE:00:EB:D8:36:73
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 01976D3E373B813D4AAA254AB45BB9376DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 097B
Signing time: Sat 14 Jun 2025 07:01:23 +0000
Manifest this update: Sat 14 Jun 2025 07:01:23 +0000
Manifest next update: Sun 15 Jun 2025 07:01:23 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: MlisiNQXrEit2nBUmREYQS8TyxCl0KWFxTriY56uyvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:37:3b:81:3d:4a:aa:25:4a:b4:5b:b9:37:6d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: Jun 14 07:01:23 2025 GMT
Not After : Jun 15 07:01:23 2025 GMT
Subject: CN=ec593f0dd3e4a72dac3d2024414eee00ebd83673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:8c:a9:0b:0b:d4:73:39:b0:a5:2b:d7:df:
3b:21:23:56:cc:d9:18:9f:02:a2:86:17:1d:ef:1d:
78:a9:10:38:df:2e:e1:69:c7:c6:6c:28:7d:10:8a:
94:f2:d1:e4:d2:36:e9:44:14:07:5d:13:33:a2:f0:
5c:e7:db:33:26:1c:7d:de:2d:15:b7:81:2d:6d:60:
b9:16:a2:b9:b3:1d:a9:a8:c7:3c:cb:64:dd:50:a6:
86:70:9b:cc:55:77:d0:91:28:38:dd:62:31:2b:fa:
9d:9b:2d:f8:12:fd:46:48:ba:18:ab:75:7d:29:68:
44:04:b4:63:41:a9:34:40:cb:59:2a:f2:e1:ed:f8:
23:ce:67:66:9a:64:d7:95:c8:cd:f5:2f:99:29:5d:
17:05:ed:bc:c0:c5:c9:60:3b:cc:db:7e:17:20:7b:
12:b3:ee:52:73:9a:94:0f:1b:5c:d2:39:f3:a3:2c:
e0:12:c4:6f:eb:44:12:3c:e1:f0:c2:49:05:0f:4d:
91:d3:70:f7:0f:d5:98:3d:64:2b:32:bf:f5:e3:fb:
35:30:69:45:06:af:89:c6:44:50:1c:11:ef:2e:b1:
82:f3:32:28:6a:e4:02:1f:4f:04:bd:bd:2a:ff:2e:
8f:77:07:c2:6c:67:29:38:2c:22:b6:dc:ee:e4:c1:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:3F:0D:D3:E4:A7:2D:AC:3D:20:24:41:4E:EE:00:EB:D8:36:73
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:59:61:c5:16:42:1c:5f:e2:bb:b6:43:de:86:2a:69:c3:
bc:a3:0f:0d:31:2c:66:51:40:c7:d2:46:41:93:72:8c:ad:e1:
a3:f7:37:f8:90:6a:61:68:2d:cf:26:b1:2a:bc:7d:34:d7:0b:
e0:2f:9f:55:8e:12:ea:aa:ed:64:df:ed:a4:bf:fc:77:21:13:
bb:97:1b:e6:b9:8a:28:dc:ee:5c:ac:cd:c1:be:19:32:bc:aa:
f7:6b:36:d7:2b:f3:ef:30:34:a6:f7:ce:62:a9:3e:a2:17:dd:
1d:8e:b6:45:f7:02:c9:ab:9b:a9:9a:64:12:63:61:bd:89:82:
7b:fa:ae:88:a1:85:cc:4a:47:ed:38:0a:18:67:5e:59:90:ad:
78:8c:9a:2c:fa:a0:66:83:70:7a:39:c9:ce:59:9b:d1:77:f1:
d4:ed:19:66:0b:06:f3:a0:0d:58:e0:ef:04:d1:c4:ac:a4:9a:
66:93:b3:6b:d0:aa:00:7c:71:d4:d6:5e:1d:7d:20:55:43:67:
0e:89:a4:19:64:e2:67:f3:10:20:e7:46:80:46:01:11:91:21:
4a:39:8e:cb:de:dd:9c:6a:6d:c7:ae:ea:9e:30:a7:12:3e:bb:
64:49:3e:49:67:b7:07:11:3b:b1:cc:10:0d:b3:3e:ea:37:4a:
ca:14:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:42 2025 by rpki-client