Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: owyz0YOPyMdcbjI+xnWUrc2RZlGM0Truu1BNyUoUksY=
Subject key identifier: D5:93:E7:67:93:3F:C7:ED:DE:4C:B3:A9:56:1E:C2:42:41:43:DF:89
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 0198978092A6077E4F97641C8405EBD0F15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 10C0
Signing time: Mon 11 Aug 2025 05:00:42 +0000
Manifest this update: Mon 11 Aug 2025 05:00:42 +0000
Manifest next update: Tue 12 Aug 2025 05:00:42 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: yNFoBrlQRQ2qcEQYNM6AGLwDyAuMx03R/npRHPeHKO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:92:a6:07:7e:4f:97:64:1c:84:05:eb:d0:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Aug 11 05:00:42 2025 GMT
Not After : Aug 12 05:00:42 2025 GMT
Subject: CN=d593e767933fc7edde4cb3a9561ec2424143df89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:a4:da:6d:70:64:fd:37:58:b1:e3:e9:6f:
c9:ec:85:f2:2b:88:78:9b:f1:d7:12:51:eb:91:8e:
68:33:bd:33:30:86:c9:27:b4:0b:32:28:43:75:e0:
61:19:1e:a0:2e:a7:b7:0e:7b:5d:91:71:d4:f6:10:
58:95:ea:6b:94:46:86:60:1d:94:bf:24:a3:6a:20:
3a:c6:0c:e5:27:a1:8b:fc:bf:f3:71:a3:23:a3:de:
e1:3a:b5:0e:7d:e4:ae:e5:4b:4a:17:be:4a:ef:d6:
87:e8:f1:10:90:c9:06:f2:33:e8:62:c2:50:a7:e8:
bd:28:16:7f:51:36:db:f2:93:3b:a3:7d:b0:85:9e:
2e:d5:56:4f:d3:86:d3:c5:ab:5c:e8:db:45:cb:6e:
69:7f:65:28:ae:76:69:da:89:90:e7:87:54:6e:d1:
e4:1e:64:b9:cc:59:87:0c:be:a0:d6:f5:2e:09:0c:
56:37:c4:6a:df:bf:dc:6e:80:6c:ce:ec:bc:9e:ba:
8f:72:ab:15:11:3d:b6:63:2b:11:49:1c:cf:49:a4:
87:fb:03:e6:91:93:7e:28:87:5c:d4:3c:31:a8:b0:
6b:a5:ed:e0:2e:d2:09:db:ae:7e:1c:fc:65:b4:7b:
63:60:0f:52:0a:14:c5:d6:8d:a6:d5:7e:b0:d0:c3:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:E7:67:93:3F:C7:ED:DE:4C:B3:A9:56:1E:C2:42:41:43:DF:89
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:84:9a:d0:32:ac:40:a8:95:f2:0a:9e:cd:98:3e:5f:83:e6:
18:4d:3a:e1:26:fe:c6:ee:d9:6c:fd:cc:c0:ed:2b:a0:bf:68:
ad:9a:05:16:b5:19:89:4c:c4:52:c5:76:bc:e5:9b:bd:06:3a:
61:cf:35:10:c0:1f:64:92:bc:4d:2b:e7:6e:bc:ee:2d:9b:a2:
8e:48:69:7b:f2:82:b4:27:be:3b:55:65:3b:00:42:86:19:0b:
ab:8d:be:ce:04:b9:b3:0e:69:fd:89:ac:08:0f:d9:92:7f:c0:
f3:cb:b6:a8:e0:6c:36:0c:8f:57:1d:b9:88:2d:d1:75:75:73:
95:53:bb:e4:32:5f:14:01:dc:78:5f:e6:58:26:2a:c2:2e:a6:
16:13:f6:c5:d6:2f:a8:fd:48:81:b4:85:9f:a8:6c:aa:e1:e1:
6a:5b:c0:63:98:98:63:7e:d5:90:7d:9c:ff:e3:7d:78:aa:0f:
26:34:ec:3a:07:62:f4:bb:ab:99:45:e9:9a:ba:2e:f3:e6:05:
49:28:b8:ea:e8:ec:90:01:2a:a1:ed:c6:13:a0:d7:8a:08:86:
07:39:2d:eb:48:f0:fc:b9:1e:21:46:8e:fb:a5:b0:9d:a3:42:
c5:78:9c:34:6b:79:57:df:ef:bc:9f:8d:6d:33:15:b2:8c:07:
db:0c:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:28 2025 by rpki-client