Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
File: cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft (raw, json)
Hash identifier: Y586bTc64UWLFT3XR4W1eN9A+blzDlxTLbKjWGSnwBk=
Subject key identifier: 3C:DE:BF:BA:A5:05:A0:B4:EC:38:C5:93:01:24:5D:43:4B:13:DD:F7
Authority key identifier: 70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
Certificate issuer: /CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Certificate serial: 0198933608ED7D8F44B095FF30676ADCE3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 09:00:48 +0000
Manifest this update: Sun 10 Aug 2025 09:00:48 +0000
Manifest next update: Mon 11 Aug 2025 09:00:48 +0000
Files and hashes: 1: cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl (hash: KinuXdSqRRPyBc5bJBY7DiJxL5PqYOvAnfTtjPCjkbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:08:ed:7d:8f:44:b0:95:ff:30:67:6a:dc:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Validity
Not Before: Aug 10 09:00:48 2025 GMT
Not After : Aug 11 09:00:48 2025 GMT
Subject: CN=3cdebfbaa505a0b4ec38c59301245d434b13ddf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:f4:65:ba:24:ae:15:85:d1:50:22:c0:ee:
e8:78:b3:77:03:34:fd:22:e9:99:80:d1:32:87:87:
bf:38:23:ab:4d:e7:93:a4:5f:28:72:b6:dc:97:83:
88:31:30:a1:b2:5a:16:f8:62:1f:5c:ab:a4:b4:1c:
c1:ca:87:b4:db:01:fa:8f:8d:30:b2:97:f9:f5:d4:
b5:0e:17:6e:6f:10:9c:9f:27:53:f7:92:d5:69:5a:
e9:f3:87:93:07:b5:d7:e8:b7:4c:cd:dd:b8:9b:41:
84:6e:8e:74:04:1c:f9:41:ca:6c:7b:ba:96:56:7e:
e8:5c:b1:ef:34:18:ad:20:b3:d0:70:d9:06:d7:d3:
3c:df:a3:96:37:49:30:25:b9:45:cf:16:2c:c2:76:
30:77:b8:c4:48:86:7f:cf:ad:fa:49:68:db:f7:77:
70:d9:d8:02:a2:95:95:67:ba:0a:a2:7f:d7:05:28:
80:76:96:96:1f:bf:31:15:25:14:e6:d6:ea:77:33:
65:60:f8:9a:26:69:70:fc:36:01:ce:96:11:fd:e0:
eb:38:cb:d1:c2:92:7f:31:42:95:7a:90:25:70:75:
ee:f9:36:99:67:70:42:e3:d0:a5:6f:99:4b:cd:89:
c2:f6:a4:a2:80:c2:da:42:96:80:ce:e6:91:e4:65:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:BF:BA:A5:05:A0:B4:EC:38:C5:93:01:24:5D:43:4B:13:DD:F7
X509v3 Authority Key Identifier:
keyid:70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:74:4a:9e:5c:b0:31:71:a8:e5:ce:78:77:47:ff:d5:de:02:
aa:51:c3:98:26:72:97:8a:1f:e4:a9:2a:d3:d0:66:e5:44:c0:
27:e3:76:79:e3:d4:8a:5f:02:a6:e2:36:9d:64:c7:3a:e7:bb:
f3:8f:d3:90:8e:29:b7:fc:7e:65:44:f9:3a:28:29:2e:04:d3:
f6:c0:96:4e:de:78:d9:d9:3c:b1:c9:c1:a3:45:a0:d4:26:29:
25:6d:60:cc:7f:49:21:4d:c8:b7:72:25:e8:5f:8a:75:d1:2d:
20:47:a4:5f:10:b6:6a:de:05:9b:a3:de:c4:cc:7a:5f:43:50:
19:11:34:25:89:8c:e5:92:19:f5:19:44:e0:45:ac:71:f9:54:
03:f7:bc:72:6c:bd:cb:b4:e2:ba:6a:b4:62:7d:85:bf:39:13:
07:25:f1:1e:33:76:eb:11:0d:f5:08:ff:64:99:7f:28:c5:a6:
71:3e:fd:9a:c8:22:4b:bc:83:be:56:1d:5b:fb:15:24:d0:91:
55:86:e1:40:44:7e:57:c3:72:36:9d:f0:3a:1b:99:c1:84:9e:
eb:27:a5:5d:24:f5:b1:e1:08:82:d5:72:68:e8:f7:e5:61:cd:
58:c1:57:01:37:74:36:c5:14:4f:b9:21:d6:ba:88:a8:61:42:
f0:91:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:13 2025 by rpki-client