Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: aBzkEP9PsIhT30FakvkCx3m/KM82LDqHvNCIljbFq5I=
Subject key identifier: 26:B7:A4:C9:79:7B:A5:C6:34:7F:32:D6:81:46:71:10:BD:39:2A:C5
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 0198469B351201C95B2394BDFE6446849B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 056D
Signing time: Sat 26 Jul 2025 12:00:33 +0000
Manifest this update: Sat 26 Jul 2025 12:00:33 +0000
Manifest next update: Sun 27 Jul 2025 12:00:33 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: 1pa6ZlBr74nuEntTc4uq8sP+PqwnX63JOwt3hpYYI8A=)
2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:35:12:01:c9:5b:23:94:bd:fe:64:46:84:9b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Jul 26 12:00:33 2025 GMT
Not After : Jul 27 12:00:33 2025 GMT
Subject: CN=26b7a4c9797ba5c6347f32d681467110bd392ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:38:91:c6:ca:a2:47:5a:16:1d:99:4d:9d:
d7:39:37:21:a0:a6:c6:8e:c3:72:e9:4c:f7:e5:36:
e7:e7:5d:a4:05:bf:1e:78:1f:5d:d6:16:f7:d6:f5:
15:a9:0c:99:03:b3:77:1d:46:b9:59:ab:87:62:50:
cc:17:04:bd:1f:30:7b:f2:97:4e:76:af:66:2c:84:
ec:88:bb:7a:8c:a0:fd:6f:68:cd:5b:be:9e:e0:f2:
fa:15:e5:05:41:50:91:b9:35:82:21:69:6d:ea:39:
7b:8f:5d:72:01:2c:37:14:22:8b:29:ee:c5:0e:d9:
44:c7:12:bf:c6:36:91:24:20:98:53:d2:2e:49:b1:
44:cd:4b:7c:22:0b:83:70:ea:59:b6:69:bc:06:0c:
52:bf:33:c7:10:1a:be:b8:1b:ed:4f:2c:b7:2a:47:
b4:97:0b:ba:52:2d:85:47:72:fa:f4:e2:36:32:cb:
25:41:c9:15:ae:84:91:a5:ed:c0:01:a0:36:fa:06:
4e:0c:60:96:2d:77:fd:96:3d:02:71:06:70:8e:1c:
c7:44:82:49:4f:c7:0f:f3:d5:35:94:b8:1a:7f:64:
ee:89:ca:76:4d:bc:b7:ac:20:a8:55:a1:18:2d:04:
03:53:8c:ac:27:d9:0a:4b:9c:4b:6a:e3:53:34:06:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:A4:C9:79:7B:A5:C6:34:7F:32:D6:81:46:71:10:BD:39:2A:C5
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f9:b6:bd:25:29:21:40:e9:d6:33:0e:6a:4c:7f:00:65:54:
23:3d:dd:57:a5:a5:47:f2:75:a6:1f:b6:9d:32:df:9b:52:7b:
9d:08:a9:80:3c:72:1f:b1:37:fd:0b:d9:99:a3:cf:39:31:5e:
e0:d4:22:67:ef:e6:9d:bc:f1:74:43:e1:cb:7d:84:3f:b9:5b:
c8:b5:4a:40:8f:bc:46:da:c1:97:e4:70:2b:c7:5c:da:26:72:
0e:38:44:81:8b:6a:ea:86:9f:55:87:62:f2:53:13:bf:07:a4:
54:1f:40:f0:8a:8c:77:d3:60:4b:f6:16:46:0e:6c:07:b7:33:
dd:31:61:27:70:49:5c:ac:55:2d:70:6a:6c:25:70:dd:c5:2e:
75:8a:25:b8:0d:30:f6:ff:e3:1f:9c:bf:ae:b0:37:4f:d8:d1:
0d:e1:1a:a3:43:87:00:bd:9f:7d:8f:b9:69:55:92:86:48:76:
ab:fd:22:1c:55:d8:38:d4:72:cf:f5:72:11:48:58:58:02:3e:
d6:a0:fd:d4:ad:22:2f:d1:be:be:d5:07:1b:29:d0:1d:72:db:
8e:81:f8:37:07:5e:8c:3a:0e:17:c0:9b:13:e8:c0:0b:eb:ff:
37:3f:8c:43:3e:7a:be:a9:45:09:0a:14:3a:8a:dd:33:67:d7:
93:ff:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:13 2025 by rpki-client