Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: yU4qFugp8iFcXqin5Pgw336r1zTa9MXQ1KtpogZ/7XM=
Subject key identifier: DB:56:3F:1E:A1:14:A4:90:12:4D:8E:93:17:38:E5:86:E4:F0:4C:FB
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 01987306E88E5C0773E29842E419D8FC13B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0584
Signing time: Mon 04 Aug 2025 03:01:29 +0000
Manifest this update: Mon 04 Aug 2025 03:01:29 +0000
Manifest next update: Tue 05 Aug 2025 03:01:29 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: 653DeAxlybtr+JBcD0Pm+K5enwgB78P8uFxn4KNKjmE=)
2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:e8:8e:5c:07:73:e2:98:42:e4:19:d8:fc:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Aug 4 03:01:29 2025 GMT
Not After : Aug 5 03:01:29 2025 GMT
Subject: CN=db563f1ea114a490124d8e931738e586e4f04cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:f3:f3:16:f8:30:c0:f2:a3:57:92:77:65:
67:15:8f:9e:4e:cc:6d:e1:85:f3:15:95:95:f2:1c:
9b:f6:a8:c8:13:95:18:59:32:17:54:94:ec:08:a3:
47:61:c7:6b:82:1a:52:53:17:27:ad:19:1d:c7:fc:
f8:f0:26:81:35:cb:e1:61:fc:1c:9d:f3:53:95:96:
b4:bb:33:0a:a3:21:4c:45:f4:24:6a:35:d5:53:a1:
35:0b:ac:83:ad:db:6d:49:5c:0a:3c:3e:f9:26:41:
9e:34:b2:57:49:a0:07:bd:cd:fb:d1:69:a3:0f:93:
46:47:e4:ef:c6:86:33:5d:9d:78:53:4c:d4:39:66:
59:46:23:5d:de:d5:8b:b1:85:d9:2a:01:0a:bc:6f:
cc:16:87:13:4e:e6:b5:cc:53:35:ea:1d:a7:56:f2:
ff:57:10:07:a1:73:4d:e3:8b:ad:77:77:43:e7:21:
55:d1:4a:f5:90:b9:63:91:6d:38:1e:f9:95:11:37:
37:9b:ca:20:2b:59:52:98:33:95:69:ca:33:46:9f:
4f:b6:47:6a:e3:77:e8:d8:a0:ac:e5:0a:43:37:12:
c1:c8:12:c2:a7:31:ce:01:5d:cb:9f:02:c4:38:38:
0f:23:bf:39:88:7f:d5:21:01:4b:77:3f:c4:3c:84:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:56:3F:1E:A1:14:A4:90:12:4D:8E:93:17:38:E5:86:E4:F0:4C:FB
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:05:20:29:1a:cb:ee:27:82:6a:55:77:68:dd:52:e5:ca:c2:
41:59:56:0b:f7:4b:6d:d0:0a:41:b5:68:3b:c8:0f:a8:8a:f8:
f9:05:57:1d:95:86:bf:59:4b:1e:77:eb:ee:e6:d5:27:94:76:
ea:6d:2b:01:3b:19:b0:f3:bf:a6:37:77:5a:ae:4f:89:46:b4:
81:a1:e7:b1:d5:b4:4d:36:76:7c:56:87:df:c0:e3:61:64:67:
59:05:d7:13:04:25:8d:bc:de:3f:ca:85:47:f2:e9:4e:a5:dd:
04:a3:7e:13:05:62:db:95:7a:b2:f0:5e:cc:9f:da:6a:69:fd:
54:dd:f4:37:6b:a8:f0:f9:83:7b:c9:22:e7:27:b6:3b:24:52:
d6:34:fb:f4:00:bc:fa:d9:75:8a:ba:14:d6:4c:ff:7c:ec:e3:
0b:7f:b0:da:7e:87:11:46:42:69:ba:9d:97:10:81:f2:bf:49:
e2:65:90:62:c6:78:59:0e:59:10:9e:49:8d:53:df:03:69:07:
98:ad:be:44:c0:f0:9d:c5:aa:11:bd:a8:03:55:38:52:d9:b9:
00:0e:68:9b:71:c7:56:42:41:94:84:92:02:61:f4:56:08:c4:
7f:85:c2:65:55:95:95:b9:db:0e:bd:bd:21:74:30:39:b7:75:
52:e9:d8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:39 2025 by rpki-client