Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: ilYRamVDBEfpJTZe4rVYfhl47EDh99JR6apd7ZeP8MY=
Subject key identifier: 0E:ED:AA:5E:EE:A5:9C:39:D4:C2:B6:92:AC:2C:70:26:5D:7A:14:9F
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 0197C75D5311F4EF29DB42C8D1DCB1A96360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 1100
Signing time: Tue 01 Jul 2025 19:01:11 +0000
Manifest this update: Tue 01 Jul 2025 19:01:11 +0000
Manifest next update: Wed 02 Jul 2025 19:01:11 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: 0esnNNzSFp1vd7qzorQwUEvb+bRZ4VWc7QFxvWKhNqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:53:11:f4:ef:29:db:42:c8:d1:dc:b1:a9:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Jul 1 19:01:11 2025 GMT
Not After : Jul 2 19:01:11 2025 GMT
Subject: CN=0eedaa5eeea59c39d4c2b692ac2c70265d7a149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:8a:2e:c6:78:ce:b1:c5:bd:07:7d:6f:a8:
03:ff:06:38:bc:fa:4a:6d:80:b3:14:56:dd:eb:66:
79:bf:ce:37:30:a8:52:47:f6:b0:dd:e6:8a:f4:f7:
bc:ae:2a:d3:f4:3d:d9:48:b9:49:7d:c4:f7:08:ab:
e8:11:b3:0c:d4:ac:b0:b7:c9:73:0d:9a:37:4d:5d:
e2:89:ba:9a:fe:27:ee:bc:df:65:b2:83:90:71:9b:
e9:45:e6:a5:ed:ba:aa:e9:de:21:f9:16:b4:74:6e:
b0:47:6f:cf:06:ca:c2:21:3b:9c:d4:38:3c:48:17:
24:82:c3:b4:3d:66:a2:fc:26:77:40:45:e7:c7:d2:
c7:79:c5:27:54:b4:e7:57:51:bc:f1:90:37:e1:7c:
45:9e:94:a9:0d:1d:73:03:7f:a9:fc:7d:34:1d:7a:
3e:a0:72:c6:4d:da:96:d6:9e:02:c2:cf:fb:ed:97:
6a:66:48:e4:71:b1:f8:ed:6e:e2:db:ba:18:72:de:
4e:da:f6:8b:3d:19:72:00:9f:d4:67:50:0a:9a:db:
8a:40:a6:a6:9e:be:c7:fe:74:b1:b7:2e:95:00:43:
6c:d0:c1:2d:4c:a0:8e:e8:24:95:49:7c:d9:43:5e:
47:be:f0:c7:f7:84:2c:c4:c2:80:4b:3d:3b:d2:4a:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:AA:5E:EE:A5:9C:39:D4:C2:B6:92:AC:2C:70:26:5D:7A:14:9F
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3c:c1:60:6a:53:3a:61:d4:17:37:e0:b0:68:20:1c:d4:2b:
3a:c6:53:f3:2a:07:d1:fd:c3:48:82:92:1b:90:76:b6:da:95:
fd:08:59:29:66:6d:b3:74:49:a2:bd:5c:52:d4:88:60:7e:84:
42:ef:0b:9b:7d:22:44:fb:38:36:9a:67:a5:c6:eb:8e:4b:80:
d3:8e:59:9d:14:98:1c:01:8f:aa:02:6a:e4:2f:1e:79:83:5d:
12:34:97:bd:ac:0c:fe:6f:95:92:94:91:dc:99:d2:9f:11:f8:
32:2d:6a:12:1b:74:c0:45:1b:4c:08:d0:c4:3a:0d:ae:e6:bd:
d3:c8:64:24:4a:d8:7a:42:34:37:60:a6:64:28:38:5b:73:66:
c9:ea:e7:09:d2:66:64:04:fc:8e:dd:a2:b6:8d:bc:6f:61:d9:
24:04:75:81:c5:26:6f:97:56:b1:e8:2f:30:7c:26:3f:07:f7:
93:e7:06:07:06:08:ff:d8:fd:f0:26:70:6b:4c:78:9d:df:83:
3f:e5:1d:96:0a:46:6f:ee:4b:0b:3b:62:5e:bd:99:60:30:d3:
42:78:9f:2c:21:83:68:cf:ee:b7:45:5c:dd:12:b5:43:44:64:
96:42:3c:62:54:ce:95:79:fe:63:95:7c:d9:8d:0a:74:3b:d7:
13:11:e6:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHXVMR9O8p20LI0dyxqWNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYTNjNmNhNDM1ZWJkYmY5NmZmZmE0YzVkOThlNDYwMDgy
OGY3MTIwHhcNMjUwNzAxMTkwMTExWhcNMjUwNzAyMTkwMTExWjAzMTEwLwYDVQQD
EygwZWVkYWE1ZWVlYTU5YzM5ZDRjMmI2OTJhYzJjNzAyNjVkN2ExNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQKKLsZ4zrHFvQd9b6gD/wY4vPpK
bYCzFFbd62Z5v843MKhSR/aw3eaK9Pe8rirT9D3ZSLlJfcT3CKvoEbMM1Kywt8lz
DZo3TV3iibqa/ifuvN9lsoOQcZvpReal7bqq6d4h+Ra0dG6wR2/PBsrCITuc1Dg8
SBckgsO0PWai/CZ3QEXnx9LHecUnVLTnV1G88ZA34XxFnpSpDR1zA3+p/H00HXo+
oHLGTdqW1p4Cws/77ZdqZkjkcbH47W7i27oYct5O2vaLPRlyAJ/UZ1AKmtuKQKam
nr7H/nSxty6VAENs0MEtTKCO6CSVSXzZQ15HvvDH94QsxMKASz070krnyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7tql7upZw51MK2kqwscCZdehSfMB8GA1UdIwQY
MBaAFHKjxspDXr2/lv/6TF2Y5GAIKPcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWIt
Y2ViMjFiOGU4MzJiLzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWItY2ViMjFiOGU4MzJi
LzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTzBYGpT
OmHUFzfgsGggHNQrOsZT8yoH0f3DSIKSG5B2ttqV/QhZKWZts3RJor1cUtSIYH6E
Qu8Lm30iRPs4NppnpcbrjkuA045ZnRSYHAGPqgJq5C8eeYNdEjSXvawM/m+VkpSR
3JnSnxH4Mi1qEht0wEUbTAjQxDoNrua908hkJErYekI0N2CmZCg4W3NmyernCdJm
ZAT8jt2ito28b2HZJAR1gcUmb5dWsegvMHwmPwf3k+cGBwYI/9j98CZwa0x4nd+D
P+UdlgpGb+5LCztiXr2ZYDDTQnifLCGDaM/ut0Vc3RK1Q0RklkI8YlTOlXn+Y5V8
2Y0KdDvXExHmyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 01:35:36 2025 by rpki-client