Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: q6ETklcLAudbr9Dhs35s8hm7gDs1BPntZ0kzNLXvhWY=
Subject key identifier: 5A:32:46:E3:B6:DA:FD:EA:79:35:C6:7B:AA:7B:95:0B:65:4B:ED:41
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 0198906BF60659C90E2081336BF81D4AA780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 03DE
Signing time: Sat 09 Aug 2025 20:00:51 +0000
Manifest this update: Sat 09 Aug 2025 20:00:51 +0000
Manifest next update: Sun 10 Aug 2025 20:00:51 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: ALPdlIh6ayVRFzN0+mJ4XoqT2E2LVTOiL/3MCXsPRgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:f6:06:59:c9:0e:20:81:33:6b:f8:1d:4a:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Aug 9 20:00:51 2025 GMT
Not After : Aug 10 20:00:51 2025 GMT
Subject: CN=5a3246e3b6dafdea7935c67baa7b950b654bed41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:28:5b:b4:37:13:4a:b8:a9:85:21:33:21:
41:f5:08:70:e8:c8:de:5b:2b:53:f8:41:47:9a:d7:
1f:97:57:bc:1e:92:86:e4:88:18:23:4c:2f:41:16:
e3:9e:f1:42:87:5e:0b:52:c9:67:38:ee:d5:14:20:
75:62:e7:50:3a:27:e4:36:3b:42:9c:cd:67:0b:58:
ea:d0:f9:03:c9:30:bf:8d:1f:f1:56:72:5e:f6:41:
10:3e:c5:65:4f:e7:0a:bf:60:92:48:53:54:91:ba:
a0:31:0d:a8:16:a3:8e:a4:c2:d9:1a:17:03:ef:d7:
55:7d:a4:bf:a4:49:b9:90:fc:86:4d:3e:f0:ee:45:
ff:21:0e:51:77:08:70:89:0e:e9:33:b3:1e:d5:ff:
5c:bf:29:57:cd:81:e5:1e:e2:53:16:71:ff:60:89:
22:f8:e6:a5:5d:e8:15:ed:df:0c:4f:7e:5b:33:77:
06:e9:4a:f0:5f:f9:bd:2f:8c:45:a2:b5:80:64:cd:
27:00:d1:3d:28:e3:0c:50:a3:3b:07:6c:86:cc:31:
cd:ae:66:56:2c:52:e5:c3:85:2a:45:23:9d:4b:b2:
8e:d2:69:07:32:9e:14:61:6d:10:52:b6:1d:e8:5c:
c4:15:a4:c4:34:00:02:36:39:1a:96:67:b2:c1:e2:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:46:E3:B6:DA:FD:EA:79:35:C6:7B:AA:7B:95:0B:65:4B:ED:41
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:04:a9:f6:47:eb:be:7b:e9:69:e2:e3:b0:78:44:1c:22:3b:
60:33:1d:ae:fc:c9:e1:d1:ee:b7:e1:5c:bf:51:6b:31:53:da:
48:ad:3a:2f:1e:24:33:17:32:07:89:11:d2:ee:e8:b4:22:8a:
be:c6:1e:eb:f6:46:4e:40:79:47:0d:c9:d1:ca:f0:bd:11:a7:
50:69:1b:92:74:8a:02:fb:f4:6d:83:36:c4:b3:1d:f6:b1:1c:
0f:21:ed:e0:bb:0d:bf:97:30:4b:de:77:d2:4a:72:be:ea:59:
31:48:ba:38:04:8e:64:06:24:1b:e2:87:c4:e6:8d:2f:f9:73:
11:d6:fc:fe:61:9f:52:53:e3:11:96:1b:14:7d:b7:69:5f:4f:
7c:da:9c:44:07:09:05:32:72:ed:55:c3:ef:ee:cb:e7:4e:3d:
af:42:b6:7d:90:4e:21:f6:25:e8:7c:73:56:72:6c:f7:70:31:
35:d9:e5:c9:cc:d4:a1:2c:b0:c5:78:35:1f:a5:51:08:78:9f:
95:d2:be:01:c0:e5:70:06:cc:43:ca:f8:d9:dd:eb:2f:bb:d9:
14:f8:18:1d:26:90:02:0c:ad:96:a7:2e:0c:b6:f5:03:9e:9a:
8f:19:9c:72:49:b0:d6:00:74:a2:8b:95:7f:96:af:41:65:89:
d0:d4:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:00 2025 by rpki-client