Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: yS6jgxtk20BwhAfZW3T70JlOafh8m2dPiuzRhQqX+fI=
Subject key identifier: B4:43:43:E4:45:C3:AD:69:75:73:37:B0:0E:01:1A:C8:A3:F1:47:80
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 0198752BB914D917544F22BCB3B1A167DD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 14AB
Signing time: Mon 04 Aug 2025 13:00:56 +0000
Manifest this update: Mon 04 Aug 2025 13:00:56 +0000
Manifest next update: Tue 05 Aug 2025 13:00:56 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: wLaDfLs/YM9BYENgbBXq+/wanSQqOnMkudxFa4Cgsts=)
2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=)
3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:b9:14:d9:17:54:4f:22:bc:b3:b1:a1:67:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Aug 4 13:00:56 2025 GMT
Not After : Aug 5 13:00:56 2025 GMT
Subject: CN=b44343e445c3ad69757337b00e011ac8a3f14780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:b1:e5:09:8e:5b:52:71:78:67:01:98:99:
26:7c:5b:94:d9:06:3e:ad:09:33:40:ca:08:ab:ee:
6e:5b:3a:1a:38:bd:dc:e9:83:eb:26:a9:f2:8f:a8:
5d:73:70:37:c7:67:4e:e9:12:ee:b6:7d:97:c7:9d:
c6:be:5b:8a:19:ba:80:1b:2e:94:09:16:33:d0:cb:
66:9c:d8:4e:f5:8a:71:b8:97:59:08:41:77:a9:72:
e2:80:69:79:f2:6f:78:11:76:9a:d6:83:5e:07:19:
d2:67:16:2c:34:37:6c:83:58:ac:dc:85:00:5e:b7:
2e:a4:8b:80:8d:6a:65:cd:aa:03:26:e4:3a:d0:9b:
47:36:3f:52:a9:a0:77:d3:48:b8:86:42:94:9a:9a:
e3:27:d2:af:0a:71:93:85:93:11:30:3b:d1:34:f4:
d4:5d:f0:a5:43:a6:70:a1:40:83:a8:ea:aa:88:ac:
39:cd:89:6e:63:50:7d:59:41:f4:7b:7c:27:38:97:
bc:b9:73:74:2d:88:ae:70:9d:6f:61:c3:5d:77:3e:
61:90:43:31:eb:09:df:cb:35:44:28:fd:53:00:86:
f5:a3:40:d9:45:32:52:9b:5a:c6:8c:79:6e:49:6d:
fa:d2:36:86:be:eb:0c:40:f4:31:69:c4:0e:96:b8:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:43:43:E4:45:C3:AD:69:75:73:37:B0:0E:01:1A:C8:A3:F1:47:80
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:31:08:ee:57:ca:e9:2b:cd:d1:b0:2b:ab:df:98:a2:80:bf:
0b:6e:a4:7c:2f:43:1f:d7:79:14:88:1e:ae:2f:29:2d:58:02:
4f:94:d3:e5:0c:d6:c2:9d:07:ba:3a:ad:f6:52:c7:78:46:29:
71:58:79:3a:fe:4c:3c:8c:de:8d:0c:54:81:a3:38:6a:96:06:
5f:8e:ed:44:81:c4:eb:a7:cf:34:c8:72:a4:20:1f:60:3c:e2:
88:59:bf:27:e4:87:84:40:f9:b1:d2:df:88:bb:3c:83:b2:b7:
d2:4e:f9:fd:ea:2c:8b:8e:4f:9c:8a:10:ea:83:d5:b5:6c:42:
93:f1:f5:d7:6f:d0:81:65:7e:d8:8d:ce:ec:f2:ea:34:a8:94:
c8:9b:30:5f:8b:aa:f5:93:a7:ab:95:35:b2:e0:43:dc:fb:d7:
f1:04:92:01:1d:65:6d:78:68:3d:60:0d:4a:7d:fc:26:a8:11:
c2:b2:2c:b8:5f:ae:dd:2a:83:5a:81:aa:31:15:fb:e2:28:b1:
c8:15:88:4e:cf:0e:3e:82:9c:9b:e5:de:e1:f4:36:73:41:9a:
e9:b6:bd:ae:9b:46:b5:c0:5b:9a:fc:c4:f1:86:ab:bd:b9:3e:
6e:49:5f:eb:14:c8:b8:e8:35:3c:51:74:83:b9:58:d6:30:b0:
4e:df:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:25 2025 by rpki-client