Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: LwT8Chtx8MH8FXHxhSgHr0pjFwxvE5iwAObutalLc4I=
Subject key identifier: A2:C0:0A:D8:23:DA:14:BB:F7:7D:CD:38:08:F4:9E:01:A2:48:83:31
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 0197B88EAC0BE71AE75BAB3B6EE2287CBD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:00:47 +0000
Manifest this update: Sat 28 Jun 2025 22:00:47 +0000
Manifest next update: Sun 29 Jun 2025 22:00:47 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: i8hf7DySdQqalk9hVM7NLTZ77naWkWWzXphO95PtUV4=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ac:0b:e7:1a:e7:5b:ab:3b:6e:e2:28:7c:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 28 22:00:47 2025 GMT
Not After : Jun 29 22:00:47 2025 GMT
Subject: CN=a2c00ad823da14bbf77dcd3808f49e01a2488331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:a5:b4:b1:95:82:75:3e:cf:15:4c:ec:cc:
12:01:b5:bd:85:ad:75:de:ba:ec:d1:21:0d:0d:8b:
4a:f2:ca:92:aa:53:88:ca:41:3e:c9:9c:a5:ac:78:
a3:b7:95:26:7a:a3:19:6b:21:d3:59:ef:a9:1a:9c:
1b:8f:ca:e1:c5:e4:fc:65:dd:74:00:cd:4d:10:88:
2e:99:b1:e3:e4:a7:4c:ab:a0:af:d5:86:54:54:a8:
2e:7a:0f:67:a3:fb:78:53:62:88:f2:e5:47:2b:21:
87:47:9e:a1:b6:83:9a:ea:cf:6a:03:7f:af:bb:98:
69:f4:69:ef:6a:49:e9:75:23:8e:55:cb:b8:32:c9:
38:24:be:d2:ea:0a:b7:20:59:40:54:52:01:68:cd:
86:ce:d2:4c:34:64:c6:25:17:02:29:65:08:d8:44:
ea:d5:01:ea:92:74:96:4e:6a:d9:b8:45:6d:0c:d5:
b2:53:53:7e:9a:d2:e8:1c:19:65:c1:88:e9:ae:30:
06:db:32:26:11:d0:51:37:3f:2b:df:db:cd:a9:07:
88:f7:7d:7b:7c:be:c3:b2:cd:37:8a:8c:59:67:9e:
69:9c:36:4a:58:2f:54:8b:d1:22:5e:04:05:ff:71:
81:34:68:31:f2:bb:39:80:26:7c:a2:67:7b:5b:25:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:0A:D8:23:DA:14:BB:F7:7D:CD:38:08:F4:9E:01:A2:48:83:31
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:79:59:80:8d:0e:ae:a5:bb:04:bf:fc:a2:2f:e8:9a:f4:
b9:37:1a:e6:3d:d0:54:da:6b:17:49:18:ee:c3:59:d0:94:c5:
65:3a:78:a7:11:7c:34:22:d6:e1:65:af:7a:37:19:b6:f4:bf:
93:87:d3:9f:d5:f4:76:27:ac:92:fc:76:57:00:d7:2a:80:9b:
fd:f9:96:23:33:aa:c5:51:5f:d1:e6:09:7e:d2:53:89:38:e6:
cc:32:d2:43:43:a0:ef:4f:b7:d3:1c:83:32:54:42:68:fc:23:
63:8d:03:8a:1e:09:e1:2b:05:09:18:b8:17:60:e1:37:44:33:
9f:a8:50:29:a3:fe:38:bd:bb:be:c8:ea:be:3e:aa:19:1c:cd:
50:94:a1:96:64:90:c9:32:7e:e2:b7:24:bd:90:89:83:a4:a6:
b2:e1:6c:43:be:62:a8:b1:4b:b1:bd:2d:ff:e4:c4:23:d4:d0:
7c:42:8c:f9:37:50:12:fe:56:92:69:85:b1:d8:a4:6a:e9:48:
c1:4c:86:4a:fc:69:c3:14:cb:f7:14:05:aa:fd:80:a7:74:b1:
61:40:22:df:51:0f:ec:7a:75:1b:f8:1c:aa:2a:eb:a4:dd:1c:
4f:c0:5f:26:fb:c4:9a:44:b4:76:88:b8:3f:2a:36:65:da:08:
59:8d:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:57 2025 by rpki-client