Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: T+Iu7d1K0I8LAMrFl4DtcVp936FWAjCBytXhCvAk6QI=
Subject key identifier: 88:86:AF:B5:98:02:89:16:CB:8D:08:48:3C:B8:7B:1B:93:AD:76:E0
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 0197B82120E813C8608C124672654CE44C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 036E
Signing time: Sat 28 Jun 2025 20:01:08 +0000
Manifest this update: Sat 28 Jun 2025 20:01:08 +0000
Manifest next update: Sun 29 Jun 2025 20:01:08 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: lg7d7obpBi6Xz91ON2THHbQ/sf+JpX/gIbbItLj8/X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:20:e8:13:c8:60:8c:12:46:72:65:4c:e4:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Jun 28 20:01:08 2025 GMT
Not After : Jun 29 20:01:08 2025 GMT
Subject: CN=8886afb598028916cb8d08483cb87b1b93ad76e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:ad:25:6c:e8:24:f2:7d:b0:6a:e1:59:61:
d2:ed:56:25:b3:8d:e2:96:d7:cd:70:18:52:fb:58:
bd:fd:f7:cf:21:16:7a:fe:09:0b:0d:59:91:ca:66:
88:12:5a:9f:0e:3b:81:da:cd:15:96:50:83:89:5c:
31:fb:c8:e2:ea:18:83:48:6c:dd:09:6c:fb:02:5c:
18:f3:16:1b:3e:59:df:74:e8:2d:dd:0e:6e:10:13:
31:5f:e9:32:77:2d:d9:50:5d:65:51:c5:a9:7a:0a:
1f:65:3f:f5:22:a0:29:f2:00:71:e1:c4:e7:b3:32:
73:65:60:f3:75:7b:2f:ec:ed:67:48:88:ba:77:67:
b8:6a:c1:6b:75:70:82:2e:1d:de:a4:6b:4e:35:c9:
b5:59:ef:7e:78:69:f1:92:ba:2b:01:82:bb:60:98:
8f:21:bf:30:37:ae:44:9f:04:ad:76:e4:85:98:04:
a0:4d:79:4a:16:29:35:04:29:8e:90:40:6f:5d:b4:
7f:d6:6e:03:60:cf:15:7f:dc:4b:63:a2:48:de:9e:
46:96:9c:b2:cc:b5:c3:5f:a2:56:32:df:90:89:92:
ec:a8:98:ab:66:8f:2d:27:01:2e:2b:25:6e:1e:c9:
87:bd:c2:d0:29:65:91:1e:4f:7b:34:5e:96:4c:f6:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:AF:B5:98:02:89:16:CB:8D:08:48:3C:B8:7B:1B:93:AD:76:E0
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:d9:89:be:b6:b1:9e:dc:65:ba:49:d9:6b:63:d4:94:47:
97:7a:19:fb:74:56:b3:ee:0a:31:0d:71:13:cb:83:fd:e6:ff:
9a:9a:21:8f:93:80:1d:44:a7:e9:28:af:d5:77:c7:60:61:56:
c9:e5:0b:a4:1f:73:d7:9b:9f:e6:0e:7f:d5:fb:e0:e1:f6:16:
1b:ac:d2:5c:55:2e:a7:7a:3a:e3:a1:1f:ca:2f:4f:b4:9a:9e:
cc:e8:aa:eb:c9:f8:ef:06:81:dd:6b:33:1d:0e:f2:56:d6:9f:
a4:80:19:d9:93:1e:0d:95:1e:a7:2a:e2:3b:7d:99:a0:a7:8c:
46:a9:15:6f:70:70:d8:3a:9e:e3:ce:6d:ad:06:a9:87:56:a5:
e7:41:ef:02:b7:8c:9c:a3:e7:4f:54:fc:9b:50:a1:93:56:6f:
c9:c2:b4:cb:9c:5e:fd:ce:b0:c6:93:fc:43:23:23:32:66:78:
2d:74:57:3e:da:a3:31:f3:2a:fb:71:22:c8:11:f0:51:b5:ab:
d3:99:55:21:71:5b:c2:12:49:b1:a7:b2:05:18:5d:a3:eb:5d:
bb:c1:bb:15:09:70:c1:ce:0d:8c:c4:9b:b6:ab:92:c5:c6:7b:
0e:58:50:6c:78:34:8f:0e:50:f2:9c:ef:e8:7b:92:22:94:a4:
c6:ec:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:52 2025 by rpki-client