Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: qL4k/N6OgBIU6x1jXRCEp48/G7KFNsRQQhIwC2YckXE=
Subject key identifier: 94:1E:37:09:FF:8A:81:4B:07:AA:DF:E4:E1:20:7E:F6:0D:7C:34:2A
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 0198733D74DB64A1980BB5E140E0F01699AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 0E7B
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: ODCedU1vzIjaFb896j9wd2oMsM4VMiVQ0xJcFMDrpJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:74:db:64:a1:98:0b:b5:e1:40:e0:f0:16:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=941e3709ff8a814b07aadfe4e1207ef60d7c342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:b8:da:f6:94:59:b2:8a:a8:4c:60:13:58:
cd:6e:ff:05:b1:eb:4e:87:b8:fc:91:20:30:08:b5:
96:e2:fe:23:5d:07:e5:52:05:77:2c:a3:74:fa:2c:
b4:51:44:f2:7e:75:61:1f:3f:a6:bd:0b:b3:b3:36:
66:bc:42:f3:b6:91:2c:14:c5:6c:a8:df:7a:aa:67:
77:f8:9b:66:ff:d6:c9:b8:07:e6:1e:ab:de:1b:3d:
a7:7f:ae:3c:ca:14:db:49:78:a3:56:2c:0e:b6:a3:
de:78:45:ab:e2:ee:19:d1:4a:c7:bc:12:47:fe:0f:
d0:46:6b:0d:60:82:85:fe:85:c7:c5:ae:e8:2c:4a:
f1:e3:76:52:4c:62:09:2e:cc:fd:45:79:04:74:e0:
ff:b4:73:99:08:a7:b8:bc:62:a9:06:8d:6b:32:f4:
71:ca:1a:03:20:1e:0b:37:ff:ca:ba:d7:3b:bd:b0:
73:eb:61:94:96:35:50:37:8d:48:15:2e:8b:d0:71:
b7:6e:1e:1f:1b:62:ba:e9:72:ec:28:89:58:83:64:
7d:32:9f:ac:88:03:1e:01:0c:70:93:6a:62:2b:bb:
f2:db:f7:a2:6a:37:f8:e4:44:16:59:08:7a:34:ae:
25:5e:d2:1a:64:5e:7e:57:58:99:99:a4:50:98:c3:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:37:09:FF:8A:81:4B:07:AA:DF:E4:E1:20:7E:F6:0D:7C:34:2A
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f6:29:31:96:88:e0:d5:f7:d2:47:78:4c:2c:ef:64:d1:b9:
bb:a8:60:fb:eb:0a:15:50:49:d6:bc:c1:28:80:43:85:98:a0:
63:0c:96:85:e3:a5:c9:79:9d:8a:00:10:41:d3:26:fb:2a:0d:
0e:3a:fe:dd:7c:e7:fc:38:5b:ae:35:39:ed:f2:81:f9:01:84:
d4:2b:59:b6:ae:be:a9:c3:5a:18:29:f3:47:8a:1c:f1:71:6b:
5d:46:e8:eb:3c:73:7e:cd:1f:07:f4:06:bf:b9:7f:9a:2d:3d:
52:91:7c:36:d0:d7:d6:e0:45:51:03:fe:67:34:e1:57:4d:a9:
67:ca:0b:9e:94:80:9e:fd:34:45:91:51:6c:35:1e:49:4c:ca:
1e:62:f0:65:e2:f0:dd:9e:2b:80:34:67:bb:31:d4:97:f1:10:
4b:0e:e1:cc:62:89:10:84:e0:20:58:2e:41:ab:93:50:5c:1f:
4c:e8:94:35:dc:46:44:75:13:20:d9:06:71:97:62:a1:d4:f0:
d0:6e:b2:cd:c5:dc:84:99:8f:8c:02:a0:17:fc:94:a0:e5:32:
11:f7:df:3b:0e:ca:86:c7:34:1a:6d:71:36:53:2d:f0:6b:c0:
2f:d8:85:40:59:b7:3d:56:2b:76:5e:59:14:09:55:c0:9f:6e:
58:7b:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:06 2025 by rpki-client