Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: T/4Z5h9pb6jPOVQ9VsnH9WAWJT9JebYAPu8TGbSuUf4=
Subject key identifier: 0A:53:6F:01:DE:83:DF:DC:0C:8A:09:C8:E2:58:EF:13:6C:21:E2:CF
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 0198733D9EAC362188B248A9F265DE83A983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 04:01:14 +0000
Manifest this update: Mon 04 Aug 2025 04:01:14 +0000
Manifest next update: Tue 05 Aug 2025 04:01:14 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: 3cHi9kezhKZlwdcm0qM4pEGZjBTY6mtHGHb5bbfXYDA=)
2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:9e:ac:36:21:88:b2:48:a9:f2:65:de:83:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Aug 4 04:01:14 2025 GMT
Not After : Aug 5 04:01:14 2025 GMT
Subject: CN=0a536f01de83dfdc0c8a09c8e258ef136c21e2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:1b:1b:c7:07:3f:22:4d:64:5e:b1:08:3e:
f7:a8:fe:74:69:a0:ff:c0:4e:7b:cd:d8:47:2f:76:
04:ca:4f:31:ef:1d:1b:97:5f:5e:a4:b0:0e:2b:b5:
2d:b3:eb:2f:6d:f0:cb:58:94:b9:68:2d:ed:13:69:
36:be:3d:01:68:ab:55:3e:42:76:4d:0a:d5:21:ac:
ba:63:3e:31:33:ee:91:80:ad:f4:24:f8:a1:0d:ab:
01:c6:ef:33:2a:e4:9c:5a:b6:70:da:1a:e1:c1:a0:
21:81:5d:90:d0:7d:6f:5c:a3:bc:77:7e:ee:07:da:
a2:1e:6f:07:22:85:e1:05:0f:54:88:7d:53:1e:d6:
bc:7e:ba:a9:d6:18:e7:c1:d7:16:87:43:3e:c0:1d:
b8:07:b7:a5:07:47:ca:32:5c:42:28:32:a3:88:c5:
e7:6e:c6:6d:03:91:41:a2:6e:07:33:ce:16:42:19:
d4:54:4a:5e:1b:40:2b:11:b5:87:4e:94:06:ae:96:
96:b0:67:7b:a0:f4:9e:23:81:36:b2:26:44:93:80:
c6:65:dd:5a:a3:96:26:17:88:c5:f7:32:c6:3b:0d:
74:37:06:31:87:04:15:53:bd:b0:28:e8:0e:c7:a1:
f2:ee:84:95:eb:e7:ab:51:db:2d:b5:76:ed:be:e5:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:6F:01:DE:83:DF:DC:0C:8A:09:C8:E2:58:EF:13:6C:21:E2:CF
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:be:ad:a7:5f:91:f0:70:09:75:b7:1a:98:1f:cf:78:01:52:
0c:df:7a:88:3c:24:56:5f:f3:6d:e7:a5:d6:45:27:8b:05:3b:
62:2b:26:fb:87:e1:95:2f:a3:9b:64:3b:29:c4:f0:c8:2e:30:
be:7f:d8:be:a6:e4:40:a1:cb:37:0b:ff:f3:84:79:15:94:80:
60:b4:b0:23:b6:b0:91:01:eb:8d:db:08:2c:49:0f:ec:93:59:
a2:83:8e:fa:ff:a7:c3:a2:ac:cd:09:0c:6b:37:10:e9:c0:20:
6d:0f:8f:98:7d:e9:e8:9d:6b:84:89:f0:5c:15:41:19:ec:ec:
31:25:80:31:8a:ec:fe:55:b1:da:29:90:6a:f0:d9:d9:25:b7:
a4:40:e3:f8:6f:57:d3:70:a1:40:a0:4f:82:db:2c:00:da:cc:
a4:1e:09:38:29:25:1a:58:3f:95:48:5d:55:a9:d7:01:0e:61:
ae:e2:dc:bd:95:24:88:ed:b3:f7:15:48:5c:4f:91:bb:63:ec:
fe:f1:7e:96:e1:7f:8b:ad:db:72:ef:ad:70:0e:8b:f9:37:20:
21:0c:c9:e1:cf:3d:11:6b:68:6a:c3:e7:53:19:ba:0a:a0:b5:
78:1c:82:35:d6:4a:f4:93:78:b0:eb:54:58:39:da:a5:67:b6:
c1:a7:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:12 2025 by rpki-client