Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: 6Cj4V/XBkxrXEx78A+4REwVs+StL3nCBSbZd0ykUDac=
Subject key identifier: EE:1D:42:C5:06:7B:1A:22:DC:1B:52:37:44:A4:99:FC:AE:D4:6D:5E
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0197B7B2FA002F86C6B5747BCEDCE85D53CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0DD5
Signing time: Sat 28 Jun 2025 18:00:49 +0000
Manifest this update: Sat 28 Jun 2025 18:00:49 +0000
Manifest next update: Sun 29 Jun 2025 18:00:49 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: q3k27Uj4lpwYgj+xBFcUHFu26nvnzI1/8TwVzOfdBJc=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:fa:00:2f:86:c6:b5:74:7b:ce:dc:e8:5d:53:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jun 28 18:00:49 2025 GMT
Not After : Jun 29 18:00:49 2025 GMT
Subject: CN=ee1d42c5067b1a22dc1b523744a499fcaed46d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:14:04:df:90:01:cf:45:fd:b3:14:45:da:
09:26:a5:03:ba:f8:49:d7:3b:e2:a5:80:d4:45:2e:
55:e4:30:9c:f0:66:65:17:c8:0b:5b:2e:a0:c3:69:
6e:5c:16:fb:40:b6:d7:8f:50:6c:c3:6b:5a:55:0c:
a1:7a:5a:b3:bc:83:cc:ab:f0:a6:2f:1e:27:4b:89:
07:5f:9f:22:a9:58:67:e4:d2:34:b7:83:a5:79:60:
65:ba:14:a6:cd:03:04:49:c1:9c:1b:83:64:a6:91:
57:80:44:8b:c8:de:57:8a:5f:02:6a:26:c4:f5:86:
ba:ae:f2:94:74:b1:97:59:40:5f:90:2d:c0:02:10:
6f:9b:d9:81:60:45:e9:a4:ac:e7:e5:17:ea:f2:05:
5d:4c:1f:84:e5:85:75:1a:c4:6e:87:ff:0d:bf:05:
23:c6:c3:b0:3f:18:b9:f2:a5:a4:42:78:06:83:a6:
ec:71:25:1b:24:b8:38:57:13:eb:6f:50:3c:6a:b0:
dc:1b:1e:32:ac:44:80:80:f8:06:34:34:8e:46:12:
f5:c3:e7:a8:0e:9b:64:43:e2:87:29:39:bc:bb:7f:
5a:14:ac:38:e3:39:cb:70:06:2d:31:0c:eb:ff:70:
1b:a5:4b:98:66:6f:70:3a:bc:ca:2e:7a:2c:17:94:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:42:C5:06:7B:1A:22:DC:1B:52:37:44:A4:99:FC:AE:D4:6D:5E
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:8d:cd:45:47:89:72:58:29:93:bf:5e:d3:4f:24:03:17:
f1:94:f2:71:17:24:9e:40:78:33:0d:c3:a3:d2:6d:70:4d:37:
62:be:b8:87:26:c0:74:41:1f:c6:e4:e0:a9:6a:00:fa:06:61:
8c:0b:45:10:64:8c:99:69:57:fe:f8:40:c0:95:c7:a4:2c:4f:
cc:86:76:19:e6:1e:fc:7f:24:cc:aa:f3:ce:c5:7c:fa:f8:46:
a5:08:49:98:be:3a:e5:36:9a:a1:8a:ea:47:af:9d:08:fd:3f:
22:95:c9:98:3d:bd:9c:fd:54:e3:23:b5:ad:78:a4:69:5a:06:
eb:bf:16:8a:b4:b9:73:46:5c:37:5f:bb:80:f2:8a:f1:51:8e:
f2:b9:63:5b:ef:30:75:3a:ec:10:87:2b:bf:4b:6b:3b:8b:dc:
66:e3:0d:8e:36:d8:51:10:79:6b:2c:f0:a2:f9:e6:b3:a3:00:
37:a4:d5:9c:4e:31:0b:c4:2d:fb:c5:55:f1:48:80:a6:40:c4:
76:ec:14:33:cf:35:a6:7e:57:6a:84:84:18:2c:28:16:02:b2:
68:ab:18:97:7a:db:74:c6:ad:52:64:09:eb:ca:96:3f:bb:89:
47:af:f9:20:9b:6a:79:72:ac:d9:ea:a5:cd:23:28:4a:cd:d5:
a5:30:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:55 2025 by rpki-client