Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: ipsDUcy03cqgwklmDEQDdedzrctXTFLTWJahCEFwT9Y=
Subject key identifier: BD:94:C6:1F:23:C3:18:B7:8B:E4:AB:F7:44:EF:7A:42:A9:1D:3D:8A
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 01977DFA850070A784A7CA05B17DF6594660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 10DA
Signing time: Tue 17 Jun 2025 13:00:59 +0000
Manifest this update: Tue 17 Jun 2025 13:00:59 +0000
Manifest next update: Wed 18 Jun 2025 13:00:59 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: BiEWScafU3+q46RJeI/66YXdmtDjLF5mBr5e2BP52lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:85:00:70:a7:84:a7:ca:05:b1:7d:f6:59:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Jun 17 13:00:59 2025 GMT
Not After : Jun 18 13:00:59 2025 GMT
Subject: CN=bd94c61f23c318b78be4abf744ef7a42a91d3d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:7f:7b:15:ce:5e:be:34:ee:2b:f1:96:ea:
c8:26:65:e2:25:6e:5f:d1:8a:d0:e3:e8:34:30:14:
d0:06:07:bb:6b:a4:76:e6:57:4a:78:56:61:e9:54:
20:f2:0c:6a:0e:fd:50:e8:3a:b2:ec:2a:60:11:c4:
ce:a3:39:c5:61:f7:27:dc:ee:5a:d7:c3:4c:d9:f8:
86:f3:7e:3e:af:3b:4b:ed:a0:be:4a:9d:85:6b:b6:
b2:e7:bb:a0:b8:d1:1b:5d:8a:2a:ba:87:fd:1f:ca:
b6:5e:2e:c6:50:f6:b3:77:3e:b2:ef:35:9b:cc:32:
e9:65:9f:48:ff:49:55:08:4a:34:df:36:06:1d:6b:
40:44:94:0d:f6:4c:2f:0f:e2:44:cf:71:58:f1:70:
21:76:5d:c6:fa:a2:16:e8:b1:78:94:a9:e1:56:7e:
c7:d5:71:f9:72:3d:58:8a:d6:c4:32:80:29:e3:c2:
93:30:4f:28:eb:28:a2:34:51:6d:5a:02:87:b1:10:
10:9f:58:2e:13:88:39:0f:9b:39:27:d0:2e:96:e8:
f7:ac:84:6a:1c:cd:83:13:1f:c3:48:05:d4:21:7e:
4d:c9:57:6f:ba:42:b8:ef:4d:a4:17:ae:77:00:ce:
77:e5:7f:a3:14:ac:a6:6b:cf:7d:9c:e0:f2:11:22:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:C6:1F:23:C3:18:B7:8B:E4:AB:F7:44:EF:7A:42:A9:1D:3D:8A
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fa:4b:09:f6:32:e2:aa:4b:bd:e3:e6:97:e0:45:fe:61:73:
ec:bb:e7:d7:28:aa:4d:2b:ad:31:99:5f:03:71:8a:fe:2d:51:
e3:da:5a:da:35:01:eb:e2:6d:1e:3d:8c:bd:ed:27:39:bc:55:
96:b5:ec:1f:80:54:49:6a:fd:a3:16:cb:7e:43:37:01:82:7d:
46:c1:ba:d3:39:27:b3:1a:33:8e:20:1b:2a:31:81:53:d2:0f:
0b:40:7a:22:b0:47:b9:2a:d9:3d:1a:6a:21:7f:26:e7:b9:a4:
0c:52:59:ec:7b:27:b2:de:50:00:e5:9b:47:a9:eb:2b:83:89:
ae:95:5b:4d:b8:a9:40:ae:1b:22:47:7a:94:9d:12:eb:94:67:
c2:a2:13:da:de:5e:2b:a1:27:bb:37:99:b3:6e:bf:e4:a7:b7:
ca:40:63:2e:16:58:ad:71:4c:e8:a6:c1:6d:0f:a1:96:4b:81:
06:2a:e1:a6:15:e3:76:eb:46:be:bd:16:c9:0a:04:36:f5:4f:
82:33:60:3e:bb:16:36:14:38:e6:1f:e2:0c:8e:8c:67:58:05:
a6:91:90:87:c8:41:e0:30:4a:7d:3c:c5:4c:5a:55:68:2d:fd:
76:13:91:eb:20:25:e5:e4:fe:5b:5b:90:09:77:d4:01:58:9e:
e6:5e:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:54:58 2025 by rpki-client