Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: iQ2YMCX79TmomPGyDiZbOXh2Eqcbf3cPTqOVWt3e42Q=
Subject key identifier: 6F:57:0B:99:DA:6D:89:6A:01:36:88:AB:73:4D:87:1F:E3:85:5E:59
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 0197B9A199DE7FC4A88913E78D4D5262306D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 129E
Signing time: Sun 29 Jun 2025 03:01:04 +0000
Manifest this update: Sun 29 Jun 2025 03:01:04 +0000
Manifest next update: Mon 30 Jun 2025 03:01:04 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: GwH+/SVw8M8lxWsjttaStKMw8Yyr6PnpzSJkPEl2fXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:99:de:7f:c4:a8:89:13:e7:8d:4d:52:62:30:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Jun 29 03:01:04 2025 GMT
Not After : Jun 30 03:01:04 2025 GMT
Subject: CN=6f570b99da6d896a013688ab734d871fe3855e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:d6:64:67:81:16:07:7f:af:59:85:dc:3b:
b1:8f:a8:a1:7f:5a:25:88:04:f1:ce:9c:1a:ed:98:
40:a6:ca:21:e1:ab:8d:8c:3d:9e:fb:43:fb:97:a3:
3a:5d:2b:7a:b5:73:73:f6:a5:5e:02:3b:4f:f9:12:
08:ca:45:f5:e7:2a:91:f0:58:a0:0d:61:8a:25:3e:
47:c0:42:63:45:b9:0e:65:91:9e:ce:28:5a:ce:cc:
a4:68:1b:17:52:0d:28:73:09:64:bc:71:2d:a5:5e:
3a:3c:a6:4a:78:3b:8c:ac:de:e1:cb:cd:53:07:cd:
c0:1f:46:cd:b9:db:91:dc:9f:6b:58:e0:e3:f0:36:
1b:1b:43:de:7a:4e:f6:42:80:97:8e:4c:ac:e4:fd:
b6:ca:0e:79:57:54:e1:1a:e1:5a:a6:cc:df:59:01:
94:b5:21:56:11:57:44:01:d4:ff:4d:9a:99:9a:6b:
e5:51:8d:7b:d6:5a:73:43:68:85:d1:2e:03:1b:ab:
94:19:91:6b:fd:d0:40:48:19:1a:bd:51:b7:14:9e:
07:a6:b6:8d:04:fb:32:4b:03:2e:b3:1c:5c:12:51:
fc:82:f2:1c:23:99:cf:cc:a1:20:bb:e2:1a:c3:2a:
1b:aa:2b:2d:a1:89:63:2c:48:40:6d:f2:81:21:d0:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:0B:99:DA:6D:89:6A:01:36:88:AB:73:4D:87:1F:E3:85:5E:59
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:42:cc:f0:fc:73:cf:22:73:1a:ec:2d:c6:82:ec:0d:22:e0:
ae:0b:82:2e:6d:e9:bb:8b:8f:ff:ca:80:6d:dd:e0:2f:f2:30:
a4:5d:7e:1a:30:26:8d:15:3a:cc:d5:7b:15:23:0e:6e:55:c5:
ac:bd:63:df:a7:b2:3f:86:77:64:e8:d3:11:bf:1c:d0:05:63:
46:7b:c9:d8:34:db:46:4c:fa:f0:e3:99:68:00:10:8a:48:e0:
0f:05:cc:67:71:c2:c6:31:f1:32:75:04:69:ea:b8:7e:04:cc:
27:24:35:e2:6c:5e:27:10:44:1b:41:19:95:4e:8f:b6:bb:ca:
f0:fb:c5:9f:ae:80:8a:a5:ed:3a:1d:19:6b:25:a3:93:ae:e6:
49:24:2e:85:ca:dc:a9:c7:8c:b0:14:b5:0c:11:ae:58:7f:dc:
84:60:d6:d3:7a:b7:12:fe:93:03:1a:d5:65:76:de:ff:be:88:
18:6e:f0:cc:58:50:4b:51:7c:43:6b:c1:76:b8:b8:63:2c:30:
12:5d:1a:ca:ac:c6:d3:c8:d4:97:b4:67:ce:8b:b6:81:cf:ee:
a5:f3:be:13:e5:82:e1:a0:03:a0:9b:7d:b3:7e:ae:84:49:b5:
88:9b:1d:bc:c6:c0:7d:2d:ce:e7:8d:2d:8f:84:dc:69:ce:ff:
87:46:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:26 2025 by rpki-client