Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File: QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier: Fl0duIpl8i8AimxkXpiO8YJ5pnlzJQ8/dGfbLFBhNGk=
Subject key identifier: F2:35:56:E8:42:57:0F:A1:31:0E:F6:CE:28:C5:A5:FF:0A:D3:65:24
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer: /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial: 01988CFD800540581E6C7B7DEEC38942F2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number: 0A99
Signing time: Sat 09 Aug 2025 04:01:20 +0000
Manifest this update: Sat 09 Aug 2025 04:01:20 +0000
Manifest next update: Sun 10 Aug 2025 04:01:20 +0000
Files and hashes: 1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: qmoPy3Ws3L8RksCN6svLANvTzdBHTxZPBoKvtKYWi4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:80:05:40:58:1e:6c:7b:7d:ee:c3:89:42:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Validity
Not Before: Aug 9 04:01:20 2025 GMT
Not After : Aug 10 04:01:20 2025 GMT
Subject: CN=f23556e842570fa1310ef6ce28c5a5ff0ad36524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:e8:20:9d:4a:2f:4e:1a:dc:29:78:1f:28:
45:84:ed:af:a1:ef:f1:4b:84:66:59:43:cc:65:6d:
49:dc:66:e6:2a:b0:46:9c:eb:43:1a:64:36:c4:55:
52:a8:b6:4b:c9:71:ca:9c:5f:e2:39:0a:8e:71:05:
aa:33:c6:e2:b3:9f:b4:3b:c1:0c:81:1f:d3:cf:30:
24:9a:30:e7:21:ec:a3:29:9a:23:84:e7:66:5a:42:
b1:f8:b5:94:ed:47:99:19:19:02:f3:9a:f6:65:c0:
cd:06:06:af:26:b7:2a:ad:b2:b7:54:34:b5:1c:71:
bb:56:9a:15:7f:63:d1:1e:b8:a9:f9:24:6b:11:34:
cc:ed:f5:25:94:70:92:75:b9:39:87:c8:4e:8d:52:
7c:2a:a3:fc:0c:0a:ab:45:68:b0:89:2b:11:ea:0e:
ae:51:53:f5:3a:bd:f3:0f:43:87:5f:57:3e:37:a4:
2f:9c:42:78:0a:4d:8d:06:0a:82:cb:7a:50:5a:84:
cb:71:a0:1d:ab:d7:e5:ae:2c:54:5c:8e:5f:9f:dd:
23:85:0d:fe:3c:d2:21:05:eb:04:e5:bf:78:b3:60:
ee:d9:02:bf:4a:db:e0:0f:2b:b7:89:c6:b9:8f:d0:
10:ed:6a:23:6b:e2:f8:27:a3:91:b4:fd:bf:21:bc:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:56:E8:42:57:0F:A1:31:0E:F6:CE:28:C5:A5:FF:0A:D3:65:24
X509v3 Authority Key Identifier:
keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e1:03:34:16:c4:c3:5f:80:1b:24:10:df:58:6c:5c:1e:57:
4a:c9:fa:f2:7f:7a:27:47:5e:35:55:94:d4:0f:5a:0a:ec:54:
8d:93:0b:db:62:a3:9a:2a:7d:6a:90:9a:c6:85:e1:71:e3:26:
b1:4c:14:67:47:4e:66:7f:24:c1:6b:7b:43:3e:e4:de:9f:53:
36:da:5e:f1:da:43:3e:7a:4d:74:e9:2e:1e:70:43:e6:7f:f9:
31:d3:b8:eb:8b:c7:98:c3:b4:49:42:c6:cf:f7:bc:8a:21:c9:
80:d4:80:57:e8:70:a7:fb:63:08:58:7c:5e:51:6b:62:0e:0a:
e3:f5:e4:bf:e2:19:e4:76:c2:6b:b0:cb:f3:e4:46:30:73:1f:
16:e8:5b:30:3d:ea:c1:6b:1d:41:ff:f9:0a:98:48:13:01:ad:
c8:48:24:4d:3f:d1:5f:dc:e2:a8:ee:47:61:ee:6d:d2:6d:b8:
c1:18:10:7d:85:f7:28:9d:64:06:f3:34:b7:18:72:ea:21:54:
ac:27:7e:01:57:11:94:e8:aa:6d:b4:c0:76:46:05:93:fa:a5:
aa:a8:f0:cc:9b:a3:c2:75:f5:9e:a1:81:97:fe:fa:01:86:4d:
f6:a4:fb:e1:33:07:36:38:1f:43:4c:94:49:78:88:49:1c:d5:
2e:51:dd:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/YAFQFgebHt97sOJQvLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWEwNDdjNDQ2MTdmY2ZiMjljZDU3MmY3YWQ4NzQ3ZDBi
OTMyNmIwHhcNMjUwODA5MDQwMTIwWhcNMjUwODEwMDQwMTIwWjAzMTEwLwYDVQQD
EyhmMjM1NTZlODQyNTcwZmExMzEwZWY2Y2UyOGM1YTVmZjBhZDM2NTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EboIJ1KL04a3Cl4HyhFhO2voe/x
S4RmWUPMZW1J3GbmKrBGnOtDGmQ2xFVSqLZLyXHKnF/iOQqOcQWqM8bis5+0O8EM
gR/TzzAkmjDnIeyjKZojhOdmWkKx+LWU7UeZGRkC85r2ZcDNBgavJrcqrbK3VDS1
HHG7VpoVf2PRHrip+SRrETTM7fUllHCSdbk5h8hOjVJ8KqP8DAqrRWiwiSsR6g6u
UVP1Or3zD0OHX1c+N6QvnEJ4Ck2NBgqCy3pQWoTLcaAdq9flrixUXI5fn90jhQ3+
PNIhBesE5b94s2Du2QK/StvgDyu3ica5j9AQ7Woja+L4J6ORtP2/Ibx10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPI1VuhCVw+hMQ72zijFpf8K02UkMB8GA1UdIwQY
MBaAFEKaBHxEYX/PspzVcveth0fQuTJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMt
NzdlNjFlZWE2YTY0LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jNTc0NjctNDlhNS00Y2M2LTllMGMtNzdlNjFlZWE2YTY0
LzEvUXBvRWZFUmhmOC15bk5WeTk2MkhSOUM1TW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeEDNBbE
w1+AGyQQ31hsXB5XSsn68n96J0deNVWU1A9aCuxUjZML22Kjmip9apCaxoXhceMm
sUwUZ0dOZn8kwWt7Qz7k3p9TNtpe8dpDPnpNdOkuHnBD5n/5MdO464vHmMO0SULG
z/e8iiHJgNSAV+hwp/tjCFh8XlFrYg4K4/Xkv+IZ5HbCa7DL8+RGMHMfFuhbMD3q
wWsdQf/5CphIEwGtyEgkTT/RX9ziqO5HYe5t0m24wRgQfYX3KJ1kBvM0txhy6iFU
rCd+AVcRlOiqbbTAdkYFk/qlqqjwzJujwnX1nqGBl/76AYZN9qT74TMHNjgfQ0yU
SXiISRzVLlHd2A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:21 2025 by rpki-client