Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
File: Q9JznRqU2rlXbiF80N-FdyBLIwA.mft (raw, json)
Hash identifier: BUWLYY/IF+1NnfWL//+Fq4fXwmttoX0e6yFs8r80qpU=
Subject key identifier: 2C:A1:20:AE:30:48:89:85:43:C7:B0:06:DA:AF:88:BD:5C:55:48:38
Authority key identifier: 43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
Certificate issuer: /CN=43d2739d1a94dab9576e217cd0df8577204b2300
Certificate serial: 0198A23D02856DFEEDEC0C04FE98E0E96F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
Manifest number: 0386
Signing time: Wed 13 Aug 2025 07:02:43 +0000
Manifest this update: Wed 13 Aug 2025 07:02:43 +0000
Manifest next update: Thu 14 Aug 2025 07:02:43 +0000
Files and hashes: 1: Q9JznRqU2rlXbiF80N-FdyBLIwA.crl (hash: DaobZuQfY0X20OOvku7Hg3+kj56TCXvt+eiUwW8lUwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3d:02:85:6d:fe:ed:ec:0c:04:fe:98:e0:e9:6f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d2739d1a94dab9576e217cd0df8577204b2300
Validity
Not Before: Aug 13 07:02:43 2025 GMT
Not After : Aug 14 07:02:43 2025 GMT
Subject: CN=2ca120ae3048898543c7b006daaf88bd5c554838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:ee:32:63:4d:a5:e8:ec:13:63:75:04:bf:
23:4e:05:d8:2c:07:97:f4:07:b8:66:3b:6b:2b:f9:
f6:02:3f:57:ab:fa:7e:e6:9c:4d:02:83:18:d7:c9:
fa:b5:3a:54:1c:f6:9d:80:86:e9:ab:2e:78:9d:6e:
d3:6a:44:8a:62:36:6e:ff:5a:e6:35:c5:f0:a8:83:
2f:2d:02:05:cb:f9:36:29:98:6c:7f:02:78:33:da:
13:f2:82:05:21:85:b6:47:ed:6c:58:4a:8c:72:d3:
62:9c:50:b2:17:88:1d:c2:f4:81:b4:b0:d0:c8:b3:
67:1d:88:de:61:63:8b:14:c1:af:aa:54:20:0f:92:
97:d9:7d:78:44:14:e9:d3:a8:29:fd:8e:58:89:c7:
a2:7c:56:8e:fa:9f:b0:80:68:4a:c8:ab:39:78:b6:
dc:ba:2f:26:d2:86:e2:68:6c:56:b7:0f:82:ee:8b:
a6:93:7f:ec:c6:74:10:cc:a2:b4:2d:76:07:5b:d6:
b7:09:e3:7b:b7:a8:a6:59:d6:a8:fd:5f:d1:16:7e:
be:bf:39:0b:a0:b2:78:b5:8e:19:73:e3:50:b0:a0:
79:d6:13:a0:dd:4b:e3:5b:b5:7e:fe:52:38:7e:f7:
66:92:72:80:c9:0c:66:53:cb:e5:2d:1d:88:d8:09:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:20:AE:30:48:89:85:43:C7:B0:06:DA:AF:88:BD:5C:55:48:38
X509v3 Authority Key Identifier:
keyid:43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:eb:fc:25:3b:b5:6a:d7:2a:02:bd:bb:ad:1d:64:6e:87:93:
2c:32:ba:4b:b9:b7:66:3a:21:fc:5a:19:ff:33:71:f2:62:b7:
44:e9:a7:9e:23:25:05:4b:ab:74:df:4c:bf:31:d9:35:61:fa:
9d:cb:ab:d1:14:c7:92:df:f6:f4:f9:05:a6:6c:d4:b4:55:72:
5b:4f:8c:d2:39:32:b8:34:59:40:05:a3:d4:be:fa:c8:76:18:
8d:26:79:b4:fc:02:a2:6c:92:6d:11:2d:88:26:cc:9e:dc:a8:
89:98:73:3b:3e:0a:17:de:f8:0d:2b:99:2b:ae:27:bf:6f:4f:
4e:bd:d9:11:fb:5f:b6:be:ee:75:1b:fa:2b:6e:64:85:e0:6c:
68:3a:da:01:09:de:22:2e:83:8d:f4:20:c9:58:bc:fe:44:a1:
65:b0:25:7b:1a:b8:26:77:6b:7d:6c:2f:58:46:d2:d2:37:46:
6d:e9:a9:bf:be:62:6a:3e:47:d3:f3:d1:d1:19:1e:dc:80:af:
bb:38:a6:6a:cd:d2:90:81:1d:5d:ae:65:5d:11:1d:33:a1:8d:
57:b3:fb:eb:14:0e:b9:b7:1f:8d:12:dd:cc:f0:fb:13:2c:d3:
69:e4:96:54:c5:b1:45:6d:52:ee:ac:b2:6c:31:09:9e:67:66:
5b:17:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:44:45 2025 by rpki-client