Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: JRYXxXE8EYr2YRiyk4BKR5nehHUfPzEhPNbGEC81JOc=
Subject key identifier: 2D:8A:53:41:FD:1F:8A:64:7E:F6:8F:60:76:D9:E9:08:F3:62:89:88
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 01976DE2A9AD8763E3EAE7476690972656AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0D29
Signing time: Sat 14 Jun 2025 10:01:00 +0000
Manifest this update: Sat 14 Jun 2025 10:01:00 +0000
Manifest next update: Sun 15 Jun 2025 10:01:00 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: jekhXcPXR7vrg6nORaY2+EqjQ5L51sViu4ijrHYehwo=)
2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:a9:ad:87:63:e3:ea:e7:47:66:90:97:26:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Jun 14 10:01:00 2025 GMT
Not After : Jun 15 10:01:00 2025 GMT
Subject: CN=2d8a5341fd1f8a647ef68f6076d9e908f3628988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:a8:9b:9b:f6:3e:89:82:ed:5a:fa:f8:03:
e2:38:ad:b3:18:1c:d7:d7:31:d7:06:9e:ff:ad:9e:
1e:5a:2e:21:95:7c:d8:29:e8:cc:14:eb:cf:e4:b1:
0e:4c:4e:98:7a:88:63:05:d9:c6:9c:14:57:3e:49:
f4:17:0c:ea:8a:ca:2a:94:2f:b7:c2:4f:8a:46:b0:
a9:b9:09:3a:4f:08:5a:7e:bd:92:d3:7a:cc:8f:95:
c1:eb:c4:7e:01:57:7d:d6:f3:a9:83:92:84:9f:55:
b3:f0:8e:6b:44:0d:a8:16:a4:dd:6b:95:83:ba:7e:
e9:1c:a7:05:d0:6c:ff:60:08:44:2b:93:92:5c:cd:
5f:02:01:19:6e:cb:ff:8c:77:a4:a9:98:0f:30:b8:
5d:74:8a:ba:82:ff:93:af:f7:88:ca:8d:0b:8e:9a:
d7:40:fb:9b:25:0f:d0:75:ab:81:19:d4:fc:79:0f:
d3:fb:60:3d:83:54:44:d0:e7:2b:1e:45:d6:0a:83:
8c:39:ac:1a:ba:d1:a5:ad:e8:06:3f:e3:2a:0b:d5:
ec:b7:e9:c0:05:96:8e:bc:38:46:a2:a6:dc:0f:71:
cc:0a:2f:67:01:1b:a3:27:07:09:bb:84:1c:4b:28:
52:ce:2e:46:0e:c4:be:2c:0a:4b:ef:9f:44:92:09:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:53:41:FD:1F:8A:64:7E:F6:8F:60:76:D9:E9:08:F3:62:89:88
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f6:0c:70:20:3b:0b:18:ac:64:dc:cb:21:e9:3a:74:ae:52:
06:97:0c:9c:1e:4f:3c:06:62:0f:40:9f:e0:27:68:6b:d9:01:
af:d0:da:49:be:0b:e2:eb:6c:c6:ae:fa:d3:45:e2:09:5d:bc:
b3:b7:c2:5c:dd:b7:b0:2a:31:d6:af:7d:65:2b:d0:4c:f4:25:
a3:3b:51:98:48:42:60:e2:87:b1:49:77:d7:7d:68:2c:11:19:
b8:9d:99:4f:e5:67:62:8d:3b:38:2d:2c:a7:09:93:15:ec:e9:
a8:74:c8:8a:83:cc:54:e0:3f:97:57:92:3c:97:de:bd:0b:7e:
f6:1c:e7:bc:f3:1c:40:07:5a:1d:2a:df:83:3c:da:b2:64:04:
7c:eb:27:8a:2d:ae:cc:0e:38:63:3e:a2:a2:27:f1:02:98:a5:
b5:6b:33:69:e9:95:e2:c3:f0:87:00:10:05:2e:8d:74:99:cd:
1f:5c:89:b4:d5:87:34:6b:75:7d:2b:0f:8f:0a:5a:04:6c:75:
4f:48:83:d9:e6:1c:d3:8f:04:a2:d4:98:13:62:fd:81:5e:b2:
08:51:82:fb:a6:7b:87:8a:db:60:ee:f5:83:e7:a2:c8:74:01:
88:2d:67:a1:13:17:97:b8:2f:26:86:b8:29:4f:58:b4:86:0a:
a7:be:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:24:13 2025 by rpki-client