Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
File: cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft (raw, json)
Hash identifier: xXfeW7KR7VRmdkZ1LA5cOMSk54mfXxtEqtYIah1ED9g=
Subject key identifier: 09:CE:B4:F0:FC:47:65:41:0B:58:AC:E7:C4:B5:CF:D8:37:A5:58:80
Authority key identifier: 70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
Certificate issuer: /CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Certificate serial: 01976F9A585BC749B1F4F0244CD4A01C901A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 18:01:15 +0000
Manifest this update: Sat 14 Jun 2025 18:01:15 +0000
Manifest next update: Sun 15 Jun 2025 18:01:15 +0000
Files and hashes: 1: cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl (hash: xHZimf+yzqYfdBDXEGGlDKUjSO1PAXVJ/Lx9wicoqcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:58:5b:c7:49:b1:f4:f0:24:4c:d4:a0:1c:90:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Validity
Not Before: Jun 14 18:01:15 2025 GMT
Not After : Jun 15 18:01:15 2025 GMT
Subject: CN=09ceb4f0fc4765410b58ace7c4b5cfd837a55880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:a3:8e:e1:95:39:73:7f:a2:ff:6a:71:10:
54:45:2c:b4:c4:0f:8f:c6:30:10:10:f1:61:09:11:
d3:26:5d:d8:0b:7d:f5:ef:71:a7:db:3a:48:c5:1d:
7c:49:26:19:89:86:df:ec:75:2e:75:20:0e:39:da:
a5:ad:ec:71:c0:05:a5:76:b8:f2:53:20:0a:c2:50:
0e:54:f9:93:2c:dd:9a:d5:97:f2:e8:58:fe:6f:e7:
dc:57:51:e9:eb:ed:69:ae:b9:bc:6b:01:56:c0:55:
93:dc:09:93:25:b7:99:d8:f7:b1:40:65:68:c7:cf:
52:9d:0d:91:bf:6e:94:4e:0c:86:1c:a1:9d:9b:3e:
fd:d3:52:79:af:4d:c7:36:54:ec:39:f2:bd:4d:45:
63:4d:a8:4e:08:fd:08:02:c2:30:14:f4:0a:db:69:
65:ec:9b:5a:1f:b3:ad:33:7f:fc:d5:4c:e6:97:94:
94:93:87:75:89:02:ee:93:c8:d2:4a:21:09:cf:df:
7c:0a:aa:23:b1:af:b4:24:c7:6c:62:b9:74:92:da:
b5:95:d1:ba:00:a5:4b:54:23:2e:27:a0:2c:dc:23:
3f:eb:57:4a:41:34:72:c4:ed:6f:33:c6:8f:d1:e6:
5b:51:eb:4f:06:88:2a:4f:5b:4d:10:51:93:5c:c7:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:B4:F0:FC:47:65:41:0B:58:AC:E7:C4:B5:CF:D8:37:A5:58:80
X509v3 Authority Key Identifier:
keyid:70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:66:2d:f6:07:84:b5:5e:81:db:25:1b:65:f8:b3:79:74:
b4:d2:cc:84:16:fe:b0:be:31:5f:e9:5a:eb:2e:47:81:41:94:
74:e0:ca:72:ba:e8:17:2f:f9:22:60:00:ec:db:a1:69:0e:5d:
71:16:86:a4:cb:44:65:58:35:3d:8c:7a:01:00:2d:0b:41:10:
a3:fd:3c:a0:ac:cf:5d:f4:60:63:3e:21:c5:9e:8c:fd:e3:99:
0e:1e:76:5f:3d:7c:a2:97:a4:35:ff:29:1c:e8:f3:23:24:ba:
c4:86:ff:ea:35:9c:db:0c:0e:66:c4:b2:12:ac:ff:22:fe:0f:
d3:02:45:83:8c:d3:5b:ea:d1:0b:a5:ef:ec:c8:4b:48:ef:3f:
45:b4:d2:84:4c:c2:16:30:1f:8b:03:c7:51:fc:d8:f3:60:f6:
76:74:dc:b8:c2:57:cd:13:b8:cc:10:b3:b9:c7:d8:b4:06:bb:
84:cd:c3:1a:11:1d:7d:44:5e:88:e5:28:b5:1a:75:83:7c:e6:
cd:2c:97:0f:7b:ff:7d:61:5d:8e:c7:83:74:e9:2c:42:f3:af:
9a:59:8b:80:44:fa:04:1a:72:72:96:a2:27:12:4c:3d:2a:b6:
89:ab:00:66:cd:81:20:bf:a0:c2:87:13:73:b6:0e:de:ad:1c:
52:01:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:12:35 2025 by rpki-client