Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: T47x+knethx1Se4FJD9jHYtO2GrKcvsmwWSa/WxXakU=
Subject key identifier: C7:A5:E5:E9:F5:A8:8E:40:24:B2:1B:4F:81:5E:5C:26:A4:2B:E1:3B
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 0197B6A0B4006136613D235614CE9A61F88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 15AF
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: 6E91/P2BR8XXefBphBmTA/VFx6g7l2EkuV2WyXs9okw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:00:61:36:61:3d:23:56:14:ce:9a:61:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=c7a5e5e9f5a88e4024b21b4f815e5c26a42be13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bc:e2:a3:1c:de:97:7a:8e:48:cd:bb:7d:3d:
8c:89:e2:91:38:dc:34:53:e8:18:ae:a2:2b:26:08:
e7:7b:4d:5a:e3:52:4f:7d:b2:9d:d0:85:ad:7d:6d:
7a:31:98:ed:67:bd:8f:68:76:c6:9d:b0:20:c8:82:
01:b4:70:c5:d2:5b:ed:24:73:70:3c:ef:a4:88:0b:
bf:06:fa:5a:8d:00:da:f8:21:50:33:c4:7a:c6:c4:
3a:2d:15:7a:76:50:a6:8b:84:ed:9a:77:2a:5a:b6:
1a:50:13:3f:c5:3a:8b:2f:23:61:74:21:f6:2b:f8:
bd:93:5d:c2:a7:6c:5f:74:ea:de:6e:8f:ee:f7:a0:
d1:3b:72:40:a7:3d:d7:5f:92:2a:2b:ec:58:a6:f4:
2f:3b:a9:f0:13:2e:10:04:d1:05:9e:21:43:e5:9b:
e8:46:b7:a8:1a:da:61:3f:d4:52:a0:10:b3:f1:9c:
2e:e4:ae:ca:f1:fd:3f:55:c4:6b:3f:9d:10:4c:7d:
66:c1:8d:c8:21:af:85:20:0e:8b:4f:20:f6:22:ba:
a1:6b:bc:44:70:9d:c0:ac:6b:e2:72:60:ff:e7:9d:
a5:bb:ef:0d:33:93:57:07:96:e8:5a:dd:fa:ee:ef:
b5:21:e7:d8:5e:a5:3c:3c:a8:6f:8a:bd:ef:ca:c1:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:E5:E9:F5:A8:8E:40:24:B2:1B:4F:81:5E:5C:26:A4:2B:E1:3B
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7d:92:16:fa:8e:de:6f:83:28:91:7b:b8:f4:98:4d:ef:63:
23:8b:30:3d:4f:22:a0:b0:06:29:6b:1d:a1:e9:59:9f:0e:27:
fd:f0:b4:36:cd:0d:82:1c:01:f8:45:6c:a4:41:35:45:99:09:
c4:eb:de:d7:32:b2:a9:07:ca:71:9f:17:9a:f7:35:86:29:ca:
f8:e6:64:4f:34:93:7b:1b:5b:ef:be:2a:5b:de:e9:80:e2:e0:
3c:04:50:b7:af:fd:d6:39:d6:76:e5:c9:a7:53:c8:dd:61:bd:
98:3b:0f:f9:ad:aa:2c:da:7f:6c:7d:cc:2d:da:4d:bd:4c:06:
be:36:96:b8:3b:1a:c0:6f:5e:b2:96:77:c7:cc:34:5d:95:37:
35:4c:69:a8:e8:b2:b9:5a:bf:ee:db:19:2c:22:0b:6a:ee:6c:
06:25:3e:88:6d:f2:4d:ab:9c:a6:56:91:8e:66:ba:43:10:c9:
3a:ca:7d:54:c6:fa:a9:25:5b:db:43:1d:ee:4d:7c:e0:0a:25:
04:73:53:57:8e:de:9a:fd:48:5d:b4:f9:8a:60:9c:77:b7:3f:
11:ef:4f:c1:55:74:59:b9:b5:ff:1a:0f:1c:8d:5f:19:0b:85:
83:c0:e1:d5:59:33:ab:bf:28:9e:60:43:fd:19:b5:3e:87:b0:
02:b9:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:29 2025 by rpki-client