Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: UWUx2f6UjdbItpU23b6ju4yLXkET/XYB+Y/LJjQI2DI=
Subject key identifier: 6F:72:EC:54:1A:3E:93:D1:48:39:84:BA:E1:07:16:B1:AA:CB:52:48
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019874506E71CF19D355FD4A6AFAC21AEC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 09:01:24 +0000
Manifest this update: Mon 04 Aug 2025 09:01:24 +0000
Manifest next update: Tue 05 Aug 2025 09:01:24 +0000
Files and hashes: 1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=)
2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: aoSc0wCd1TvvuXnSOO5tmcwx8SiAi+UfuSoi8OTAWG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:6e:71:cf:19:d3:55:fd:4a:6a:fa:c2:1a:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Aug 4 09:01:24 2025 GMT
Not After : Aug 5 09:01:24 2025 GMT
Subject: CN=6f72ec541a3e93d1483984bae10716b1aacb5248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:0c:ec:04:d4:eb:47:55:1e:e8:7c:d3:b7:
b9:f7:9a:f9:07:43:10:4d:18:c6:4d:4d:2e:db:59:
47:e6:b9:d4:70:a4:bf:98:e6:3d:69:73:20:af:d2:
28:dc:03:42:d5:34:e8:77:f1:b7:c5:5e:78:fb:2c:
4e:e4:06:8a:7c:31:e2:95:4c:be:2b:34:d3:0c:c9:
6a:a0:f7:2c:b3:60:9f:9e:85:bb:0d:2b:2d:71:09:
0a:06:41:70:c3:17:d1:ad:0d:a2:62:c4:ea:52:67:
9f:4e:eb:2a:96:c4:0e:0b:5f:cb:f2:6f:f1:5d:03:
77:c1:6c:46:28:e0:c5:dc:7f:30:1a:3c:65:a6:f7:
c7:2f:a1:39:fe:d4:99:63:24:31:e7:8e:12:f6:4d:
02:62:cd:94:01:e9:48:11:7e:0e:02:1c:22:45:d9:
72:cd:4d:7c:4c:be:b6:d2:03:1e:17:93:cc:06:74:
73:f6:e9:89:70:ae:13:47:49:88:ac:b8:c4:7f:5c:
fe:3e:4a:1f:eb:47:66:77:5d:98:38:cd:c4:41:ed:
70:d9:ef:f4:70:c8:80:47:d5:94:2a:2c:3e:e7:b7:
21:e6:ab:a1:ec:e7:7b:b0:3c:0b:9a:c9:2b:10:80:
59:db:40:82:96:4d:90:d0:12:5f:81:0d:78:88:17:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:72:EC:54:1A:3E:93:D1:48:39:84:BA:E1:07:16:B1:AA:CB:52:48
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:c3:c4:21:f9:48:48:19:a8:54:74:23:0a:7a:f9:6b:7c:
80:ac:62:32:ed:8a:39:35:28:ea:4a:21:aa:78:05:e5:a9:c6:
8c:ef:ad:ee:4c:26:d1:01:1c:0a:63:c2:9a:d8:9f:38:45:fc:
e8:f0:99:62:5f:bb:9d:95:fe:1c:a0:91:d2:0a:d3:4e:44:66:
07:a1:fd:ac:ed:36:6b:ed:32:02:d1:db:6b:4c:31:b8:23:d2:
bb:f5:a5:00:43:11:4a:24:be:49:a4:0c:ad:3e:09:40:0d:2b:
51:ab:e6:43:cc:85:88:87:98:23:26:98:b7:7d:17:25:dc:b9:
b0:dd:82:29:e5:36:fb:50:7a:61:2c:26:de:27:9c:c5:c3:13:
8d:ae:29:8a:e0:94:ed:ef:d8:af:1a:3b:bd:ba:bd:e2:b7:af:
c7:d3:a3:34:94:43:41:05:f9:63:8f:7b:33:b5:88:e0:57:c5:
fe:7f:e5:20:ba:21:90:c4:26:5e:3f:1d:a0:ee:d3:0c:3c:40:
c0:00:4d:e5:6c:94:38:54:06:90:24:8f:71:da:6d:e8:eb:9b:
6c:db:0f:e0:77:8a:37:7e:fe:90:fa:34:99:b1:fa:9f:cb:da:
ee:eb:51:35:f1:ae:30:ce:ae:2a:13:93:83:72:bf:0f:40:01:
c6:72:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:10 2025 by rpki-client