Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: DzVkQVUM+cMlFea6WsRTa9EzVN13W659TkjLiP+C92E=
Subject key identifier: 62:AD:F9:5B:64:4A:56:8D:F0:79:64:34:5A:F7:93:8E:6A:8D:15:7E
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 0198A04E72AE5E1DBF8419694B1B605A081C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 22:02:32 +0000
Manifest this update: Tue 12 Aug 2025 22:02:32 +0000
Manifest next update: Wed 13 Aug 2025 22:02:32 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: t5r4eGy+X4Uaq/dzGXcgYjWwy+1050pybeSEDYhJAV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:72:ae:5e:1d:bf:84:19:69:4b:1b:60:5a:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Aug 12 22:02:32 2025 GMT
Not After : Aug 13 22:02:32 2025 GMT
Subject: CN=62adf95b644a568df07964345af7938e6a8d157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:86:d6:ed:58:b8:12:b5:18:cc:40:07:33:
1b:53:c5:99:75:68:49:80:50:7e:c5:29:d6:6d:99:
a5:e4:4d:13:5b:66:f4:6f:f3:33:a0:69:80:d2:ac:
da:8e:0f:af:7c:b4:38:4a:bc:2e:d8:64:32:aa:13:
85:0e:6f:cf:f2:91:ab:f0:2a:83:fe:5f:d4:69:bc:
95:3b:69:32:9d:b6:01:37:89:c4:74:41:98:b5:e2:
5b:41:a8:d5:30:94:17:92:4b:e0:7b:b4:c1:e8:27:
d9:df:c7:1b:f1:f4:34:f8:60:d2:f1:84:d7:b9:b0:
65:55:e6:bb:75:bc:aa:c7:c0:63:50:b8:87:a6:d4:
1b:6e:ee:14:f1:d6:4b:f0:c3:68:c3:a0:73:7c:66:
c6:dc:40:94:da:49:65:9b:50:36:0b:26:84:60:f9:
f9:95:c9:7b:c3:84:26:b7:c1:58:67:43:a3:87:18:
ed:d2:1b:d4:d8:9b:03:e0:b3:ba:1e:8d:1f:42:82:
c2:41:a0:76:0a:3d:ac:f2:64:64:e7:4b:c0:36:97:
ce:99:b7:b5:30:03:75:9f:de:d6:67:94:0f:96:c4:
9f:63:1c:be:a2:c6:b9:38:e1:ae:88:61:7a:0f:29:
d3:4e:4d:1e:4a:38:fc:fa:26:d5:71:62:dd:5e:28:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AD:F9:5B:64:4A:56:8D:F0:79:64:34:5A:F7:93:8E:6A:8D:15:7E
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:75:20:d0:18:89:b3:09:f2:6a:53:20:30:e3:9a:a2:6c:
da:90:2e:4a:ed:37:bb:7e:af:7b:15:80:dd:2c:1c:58:69:39:
02:e1:30:94:96:12:71:a8:ff:ea:21:2a:c6:80:1e:c3:b7:3a:
43:1c:16:37:b7:ac:f7:6b:99:8b:44:00:fb:3b:73:1c:29:a2:
16:5b:c0:89:3a:9b:70:62:24:c7:99:da:00:b4:5e:8e:21:54:
93:5a:2f:d0:be:f3:68:e3:a0:0f:16:9a:e0:8e:ca:37:43:a1:
50:47:45:19:4c:fa:a0:ef:89:f5:e9:35:65:c1:8b:79:40:18:
f8:c5:7d:bc:b4:70:19:24:69:7b:24:af:80:79:f3:1e:6c:28:
bc:20:69:96:a1:c1:62:25:0b:f2:36:6c:93:67:13:9d:04:74:
32:b0:cb:e7:8e:15:7c:ee:81:24:1e:02:f5:09:7e:34:6e:b5:
23:55:f9:4c:64:fc:5f:cf:06:43:f9:07:f6:1f:be:14:21:c9:
10:f1:01:df:0b:ee:c1:ea:bb:ed:a4:11:80:ad:19:0e:bd:0c:
ec:7c:e0:ec:03:f9:4b:9e:8a:b6:a9:6f:7f:bd:2f:fd:79:d8:
fb:f4:fb:26:f9:44:cd:d9:7e:d7:01:4b:aa:38:ec:70:5e:df:
3f:63:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:34 2025 by rpki-client