Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: lVDDxqRxag9qnz26yleyTXLMukY8mNdJr9QmcuDMQ3o=
Subject key identifier: F9:23:E5:31:B9:32:A9:F7:C6:99:C6:0B:E0:EC:B0:2E:D2:E5:5A:43
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 01976C61E719D74AD35C5258042F8877CBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 1276
Signing time: Sat 14 Jun 2025 03:00:44 +0000
Manifest this update: Sat 14 Jun 2025 03:00:44 +0000
Manifest next update: Sun 15 Jun 2025 03:00:44 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: Lmg4G3fXp6XV0d/wEqsChwD+nA5Hgz19c3EvOo4cmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e7:19:d7:4a:d3:5c:52:58:04:2f:88:77:cb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Jun 14 03:00:44 2025 GMT
Not After : Jun 15 03:00:44 2025 GMT
Subject: CN=f923e531b932a9f7c699c60be0ecb02ed2e55a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:bf:c6:d9:ca:cc:a1:6e:e4:5f:c0:a8:85:
83:18:e3:5d:a3:d9:a8:1c:53:ec:d5:78:54:8f:3a:
e9:da:77:4d:dc:dd:15:d8:8e:2a:7c:60:d5:d9:24:
df:39:3b:bc:34:9c:ba:5a:e2:7f:2b:3c:41:e2:96:
69:73:f1:52:b0:72:a9:de:b2:35:99:74:f7:c4:bd:
3b:fe:ed:45:94:a3:f0:e4:10:1d:2d:5f:cb:c4:68:
20:cb:7c:f4:30:d7:6f:35:e6:b6:7c:55:cf:e5:d4:
f1:c9:9e:3f:d3:4e:66:c5:5d:00:90:2d:9f:80:7b:
ac:ca:3c:4c:a1:95:7b:a0:92:06:05:97:33:2c:d5:
17:69:67:76:65:e2:6f:e7:5a:91:13:ed:52:a2:4a:
5e:8e:2d:a4:34:03:0c:0a:49:18:e4:19:47:1d:66:
fe:c3:6c:fe:4f:16:5d:76:ee:06:0b:4d:a2:9f:cd:
4c:cc:b7:17:d6:7a:6f:31:23:e2:84:e4:7b:4e:76:
5c:a4:a9:68:df:82:98:e8:a3:3f:18:5d:9c:8e:eb:
bd:d0:b3:4a:40:0d:a9:dc:3a:1e:9c:5b:a4:1a:df:
03:0b:13:15:a9:dc:9d:93:4c:c4:95:ba:fc:81:28:
67:73:82:60:79:d5:0e:4d:c9:ac:77:ec:b0:b5:3e:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:E5:31:B9:32:A9:F7:C6:99:C6:0B:E0:EC:B0:2E:D2:E5:5A:43
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fa:85:ce:45:d0:1b:e3:56:87:3a:82:22:ab:a2:08:67:4e:
07:09:18:d5:f1:dd:fd:f3:fc:1a:e4:ef:fb:69:b0:de:aa:e7:
82:fc:19:7b:76:5d:18:3c:b1:02:a7:49:c8:dd:9f:35:9c:be:
a8:55:43:74:93:18:45:2e:c3:64:20:61:a9:66:6b:52:6a:70:
4c:08:16:d6:ef:f0:3b:20:1d:c5:0c:c3:03:4c:47:ae:83:5f:
22:14:f8:a2:c4:f1:1e:6c:32:11:95:80:ff:b4:5a:df:02:12:
3b:25:6c:af:96:bf:6b:b9:ec:96:bb:31:7f:6f:a0:74:d7:b4:
3a:22:2b:45:20:fc:0b:30:e9:c8:26:be:0b:ea:61:c2:bb:19:
dd:e6:74:f3:cc:b0:71:c6:0a:66:a4:b0:84:c2:14:c2:ce:33:
76:f6:f7:a5:04:99:c5:b6:40:fb:ca:89:61:c5:09:95:bf:81:
a3:97:c8:c3:71:44:f4:42:76:a2:17:d0:68:f3:0e:03:d6:5f:
ea:16:43:0f:97:a0:c5:28:90:4e:c7:2f:85:f3:2f:58:46:eb:
f2:1b:4c:03:40:a3:b2:9d:ae:d9:93:91:c8:e5:7e:72:8b:e9:
ba:81:b4:97:a0:f7:c3:b0:5e:a9:51:d6:9a:74:3e:1d:2b:79:
82:b8:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:35:16 2025 by rpki-client