Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: ms6XpfQXs5t6Ow8BGMsW0hVIYt+Q59W3pJab5NuQHXQ=
Subject key identifier: B9:84:F2:B6:74:44:19:4A:BC:47:8A:6E:47:08:27:10:08:FB:00:F7
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 01976C622A4758F2E4DF393E0970556D5585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0DAE
Signing time: Sat 14 Jun 2025 03:01:02 +0000
Manifest this update: Sat 14 Jun 2025 03:01:02 +0000
Manifest next update: Sun 15 Jun 2025 03:01:02 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: 5iIla6q+0e/0pU/P7viPhU7GAnmb6Mw8i4ugd/kuyO0=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:2a:47:58:f2:e4:df:39:3e:09:70:55:6d:55:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jun 14 03:01:02 2025 GMT
Not After : Jun 15 03:01:02 2025 GMT
Subject: CN=b984f2b67444194abc478a6e4708271008fb00f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:4a:45:a5:e8:2f:41:74:e8:3e:6d:72:85:
d3:38:56:55:56:91:83:39:35:fe:02:5d:cd:20:c8:
b4:cf:5d:fa:32:59:ec:81:dd:5d:e4:89:26:43:d3:
29:6c:1e:46:f5:94:3c:ca:28:9c:07:2b:09:91:aa:
74:42:4d:22:6c:4e:f2:04:88:cc:04:3e:a8:9f:aa:
9f:fc:48:02:c3:5d:fb:a5:5a:46:91:9c:d0:32:6e:
a1:19:c8:1f:60:22:00:49:2d:16:56:95:62:57:8b:
60:0d:ef:26:ff:ca:dd:8c:47:3d:b0:42:e4:7c:bf:
f8:df:54:91:92:42:9a:bd:c2:9e:b8:31:45:03:48:
85:d3:bb:72:4a:25:79:a2:e7:23:61:ff:ce:a1:4d:
5b:07:f5:58:ca:83:cc:58:b3:86:71:7b:1e:e4:3d:
58:42:ad:0f:77:33:8f:11:f8:21:ab:52:67:e1:fe:
ab:7b:84:f5:8f:81:71:db:73:c9:b3:9d:1a:85:8e:
fa:71:bd:dc:bb:55:39:3b:dc:b2:bf:cb:23:9c:c3:
75:70:a9:18:c7:88:14:84:ff:e7:d4:0d:57:d9:42:
3f:e7:76:72:71:e0:3e:28:5d:72:f5:fc:f1:a3:92:
34:f5:75:2e:8d:c7:18:9d:e3:e9:9e:03:c2:ea:ab:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:84:F2:B6:74:44:19:4A:BC:47:8A:6E:47:08:27:10:08:FB:00:F7
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:44:af:fd:8c:6c:6f:07:da:1b:bf:bb:67:1d:09:e7:8d:
71:ab:df:77:da:bd:cd:b3:3c:83:eb:ef:e6:ea:e6:6e:0e:6d:
1e:ac:42:9b:25:b0:6e:d4:8a:b9:3c:00:c5:05:13:2c:5d:1b:
00:9a:1a:ab:1b:12:2c:ee:04:4a:6f:aa:73:00:e7:08:32:4d:
c3:47:ee:a5:c4:3f:c0:15:ef:90:7c:f6:e3:a0:53:42:48:69:
87:18:ff:54:6b:22:b4:53:45:28:d2:f6:f8:17:02:e1:f0:a4:
fd:83:92:91:a1:17:ad:0c:80:d2:fb:83:85:35:09:78:8d:1a:
38:1a:bd:ec:7a:35:00:0f:bf:11:0b:07:1e:12:ef:15:a6:0e:
e3:d6:5c:a5:92:d2:85:ad:83:2f:95:5f:b2:56:3b:27:60:dc:
fc:a5:64:96:2c:a6:b2:bc:af:62:cb:f8:85:5e:3c:c3:58:0f:
65:f9:96:cb:4c:b3:1d:fb:73:25:53:6e:57:b1:45:b0:07:fc:
d6:bb:88:09:64:ce:70:45:7f:5c:bd:32:27:be:4b:5a:58:36:
ce:a4:34:02:8f:50:e6:b5:25:84:a6:06:fd:99:74:9f:72:a9:
f0:8e:44:45:83:d7:12:22:6b:05:1a:1d:3d:bc:27:69:83:39:
59:60:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:19 2025 by rpki-client