Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: reW7uPSiCH5NyEp1UwRuZRpBYQ0N+FyxzMNnPThoHLM=
Subject key identifier: CC:13:E5:88:A6:FE:4E:0B:8B:1F:70:32:01:EB:53:3C:F2:E5:42:FD
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 0198D7E172A4A3473D7521216E1BEF7FBA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 0403
Signing time: Sat 23 Aug 2025 17:02:13 +0000
Manifest this update: Sat 23 Aug 2025 17:02:13 +0000
Manifest next update: Sun 24 Aug 2025 17:02:13 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: /BYeIVTrh9s5jd2NZgylAZaKY7ZmQQqaWfimiNesPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:72:a4:a3:47:3d:75:21:21:6e:1b:ef:7f:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Aug 23 17:02:13 2025 GMT
Not After : Aug 24 17:02:13 2025 GMT
Subject: CN=cc13e588a6fe4e0b8b1f703201eb533cf2e542fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:38:0d:83:7c:ab:c3:9a:cc:1f:50:bb:c9:
e4:ca:74:f0:97:d6:b2:e8:7d:fb:25:dc:c2:5d:e2:
f5:0b:ca:80:e3:04:e6:5a:39:47:2a:31:47:e5:b5:
92:04:e9:2d:a1:31:90:84:67:56:1b:2e:d6:06:20:
fd:b9:55:e5:46:ae:59:6b:79:00:58:88:4e:ca:df:
4b:87:a2:3e:e9:2e:c3:77:e0:cf:6c:aa:94:6b:9f:
8b:e9:17:97:36:c8:35:b7:db:32:82:03:36:d4:13:
99:eb:14:81:d8:a6:76:45:d2:3d:64:a3:d8:72:b9:
66:b4:94:8a:17:c4:f3:7a:b9:47:59:ce:f3:39:c0:
6c:55:09:44:47:54:5d:0f:36:f5:3c:8f:3c:87:ff:
59:d6:2f:9a:4f:00:5e:3e:9e:8e:dc:58:0c:a6:1e:
ab:85:5b:03:e9:f0:2b:81:44:0a:8a:da:fd:4f:28:
e7:4a:8a:2f:33:74:ea:9d:be:c6:a8:d1:b3:74:98:
9e:57:1f:ef:87:0f:c2:d1:3f:60:32:ad:6b:c3:93:
ff:37:2e:b6:97:c9:2d:47:49:9f:a8:93:f5:cd:9c:
65:b5:0e:4d:e2:66:a7:75:bf:8c:ba:30:8b:62:30:
60:66:f4:59:72:a8:78:88:6c:77:b2:de:61:87:b3:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:E5:88:A6:FE:4E:0B:8B:1F:70:32:01:EB:53:3C:F2:E5:42:FD
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6f:81:41:ae:b9:58:05:42:61:a0:4e:55:05:74:cc:37:08:
d4:f9:42:b8:d4:e8:d3:8f:52:e6:35:96:53:5f:d1:c1:c7:e3:
0a:59:01:c3:10:6f:8b:dd:89:cb:5a:d6:d0:3d:85:dc:9e:14:
38:1f:15:38:ae:1f:d6:d6:cd:73:90:86:9f:8e:ae:ad:81:07:
27:75:a3:e7:46:70:80:94:24:02:b6:1e:b2:3d:52:d5:eb:0d:
29:87:db:7c:e0:61:02:65:dc:43:ab:49:83:91:01:3a:f3:52:
20:4e:ba:d0:2d:13:fc:a5:c8:42:9c:3f:75:a7:0b:0a:86:ae:
b5:da:a6:b2:d7:ce:65:b4:f3:56:c6:b9:5b:aa:d0:4d:ec:4a:
5e:52:35:53:36:af:8b:e3:ec:49:4e:26:82:9c:46:87:72:fe:
d4:92:6c:4f:f8:4f:67:62:53:ab:3d:56:a6:bf:f3:2b:70:d6:
a0:31:20:87:d9:1b:74:06:e2:a3:ff:6f:23:73:07:35:cc:06:
5f:bd:79:71:39:a7:9b:a5:05:08:dd:f8:3f:23:f3:c6:74:7c:
b1:06:bf:3b:21:2b:4e:9b:62:bf:57:ec:bb:5b:56:f6:3a:ba:
ac:93:02:bb:8a:c8:1f:65:ac:af:f1:8c:03:07:2f:70:e8:df:
5f:db:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:03 2025 by rpki-client