Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: TojB6+gIiQaU+XuMj6XyST5urBy2uDsJfHRcaEz7AXs=
Subject key identifier: 77:88:09:F9:A9:E2:CF:49:CC:9A:52:A9:D9:56:54:A0:DD:D3:9F:CB
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019890D9F04CA5E1A403290C10B556D98189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 22:00:58 +0000
Manifest this update: Sat 09 Aug 2025 22:00:58 +0000
Manifest next update: Sun 10 Aug 2025 22:00:58 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: GA9AaomFtP4URGQ3sgmhFv6CjYKJu2fey58gh/nL1t4=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:f0:4c:a5:e1:a4:03:29:0c:10:b5:56:d9:81:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Aug 9 22:00:58 2025 GMT
Not After : Aug 10 22:00:58 2025 GMT
Subject: CN=778809f9a9e2cf49cc9a52a9d95654a0ddd39fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:3a:b2:0a:50:e3:b0:2c:9d:36:22:f9:52:
19:20:83:a6:aa:f2:21:1c:50:5e:f9:49:5c:7e:6e:
4d:4d:74:73:ff:53:4a:53:d7:54:4c:67:90:af:49:
fd:c5:05:62:08:e8:7a:9e:21:eb:35:01:27:eb:8b:
1a:db:c9:16:25:db:d7:16:e3:9b:71:07:69:0c:d5:
99:a7:f0:9d:17:42:f5:96:0c:41:51:85:89:18:30:
80:94:e3:03:14:81:92:34:37:4c:0a:b2:54:af:af:
d7:7f:a0:01:71:72:31:b7:8f:3b:30:a2:42:3f:8b:
5a:b6:77:6b:5d:81:72:92:ea:37:43:50:a7:b9:75:
7a:c7:c2:92:fd:48:2d:c4:c7:dd:bb:15:b9:0e:72:
11:b6:45:0d:d6:7a:a9:4d:04:50:1f:c6:1a:af:67:
93:69:b8:16:ca:73:5c:03:31:2a:9e:3f:44:36:3d:
45:77:04:9c:4c:30:4c:8f:5d:e3:1d:66:d8:3a:8c:
e7:6d:92:bf:9d:f7:51:c6:84:c7:88:f2:b2:b6:42:
53:56:ba:4b:b4:3e:8b:11:d0:72:7f:ad:e1:37:11:
33:63:61:6a:99:31:87:43:2f:7d:2a:81:59:9a:02:
df:24:b5:80:02:f4:13:7d:85:d9:e0:b8:7b:ca:ba:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:88:09:F9:A9:E2:CF:49:CC:9A:52:A9:D9:56:54:A0:DD:D3:9F:CB
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c8:be:3d:2d:a3:53:db:e3:ea:40:cb:6f:58:df:e8:bb:8e:
8d:be:c9:75:ec:36:57:2c:6a:90:5d:f1:95:35:5c:46:2f:13:
6f:fa:cb:ea:13:74:13:c6:ac:27:52:53:d0:f4:8e:c0:14:90:
15:d8:22:9d:fe:79:66:0a:97:bc:c4:ce:2f:4d:ce:05:c0:3b:
7e:a3:6e:a7:1a:aa:ce:99:7b:a8:55:76:4a:c1:e0:43:da:b2:
20:1e:58:11:63:6f:9d:c8:90:00:0a:cc:00:d1:70:5f:0a:b6:
9d:31:a4:52:02:ac:d9:33:7e:c4:81:99:fc:b7:68:72:e3:48:
7a:5c:04:0b:ba:ca:e8:28:21:83:6c:bc:28:a6:de:0f:2f:bf:
8c:17:c0:b3:89:12:38:4f:67:95:8c:36:b1:a7:64:a2:97:7b:
d9:60:ff:f0:3a:0d:3d:d9:3f:97:c6:83:98:fb:66:51:2b:15:
0f:e0:62:57:86:b7:64:fc:f7:2d:64:f4:b4:f8:3c:3c:2a:8d:
db:df:de:f5:5c:e1:2f:bd:c7:be:1c:13:59:7c:29:d7:dd:bb:
b3:55:db:13:70:70:9e:24:79:4f:22:44:98:d5:2c:45:05:2a:
2c:91:0a:11:3f:c7:97:5c:7f:f3:26:ec:c0:7a:e1:2e:66:b2:
79:aa:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:36 2025 by rpki-client