Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: 8wM/tBCHXhRWSewZBqtnEqQ+xMOtF1+aNYjfo5hhNfQ=
Subject key identifier: E5:C2:4A:4C:0C:50:05:1D:78:DD:68:9D:D6:0A:88:D0:F1:11:61:97
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 01984AAF052098C39A6FE32C27C18C022CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 1144
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: /hEie2FV+t0q3CV0gNJDNmNerg19qQoceE5CYQeMEAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:05:20:98:c3:9a:6f:e3:2c:27:c1:8c:02:2c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=e5c24a4c0c50051d78dd689dd60a88d0f1116197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:06:64:8c:7b:84:97:36:70:28:9a:f0:d7:
1c:e0:1b:65:30:91:22:a2:64:20:42:06:b2:c6:59:
1f:0f:0d:65:15:fa:71:a8:7e:b7:44:6e:7b:56:45:
9f:aa:f8:1d:49:27:7e:79:90:8f:3e:89:79:ca:41:
a7:c6:7c:74:95:e0:b1:e2:67:44:d9:a3:a9:cb:64:
72:fa:64:e7:a3:89:b0:f3:09:2a:c1:82:17:9d:38:
d4:e1:d3:a4:1c:63:02:7d:0b:78:56:ec:13:6a:a5:
83:2d:48:1e:b2:06:90:3c:21:50:6b:c7:2f:c6:e4:
9d:17:a7:6f:c2:37:29:01:05:ab:1a:f9:d0:cb:82:
92:b3:a1:52:06:55:9f:7f:67:9b:c2:b1:cc:70:46:
52:bb:59:4f:a3:6c:f2:00:ed:55:5c:6c:07:0b:5d:
74:cf:db:6a:41:e2:e5:94:15:5e:12:0f:56:af:87:
5e:b8:44:16:de:b6:be:b8:f2:e9:11:66:69:f7:67:
4d:d8:df:74:4c:1e:b4:90:d6:00:89:ca:21:5d:4a:
20:d6:60:13:ed:a1:f2:64:6c:f7:6d:62:05:13:2e:
99:74:fa:6b:61:9b:6a:9a:9b:eb:1c:14:ab:a0:b6:
3c:38:5d:93:71:27:ef:55:91:12:32:0e:3c:6f:8f:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C2:4A:4C:0C:50:05:1D:78:DD:68:9D:D6:0A:88:D0:F1:11:61:97
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:ad:3e:08:78:c0:4d:33:01:4f:a7:e8:91:91:cf:3e:75:
09:0f:bc:8d:69:e7:0e:4e:b0:ab:30:2d:b9:e3:fd:5d:3b:31:
84:0c:e7:dd:5f:ce:c2:d5:c1:89:86:b4:dd:99:49:8d:de:5b:
57:22:aa:47:32:6c:6d:1d:74:82:50:ee:57:9e:a5:21:a5:c9:
94:16:16:4b:7a:a0:c4:57:f3:45:cf:ac:53:c7:3d:b9:6b:19:
66:60:5c:fc:fe:8f:71:db:25:a9:e7:10:bc:29:ea:06:79:bc:
1f:b9:25:58:d7:c6:8a:bd:73:b1:93:fc:8a:cb:1f:b1:4b:05:
d2:32:6f:e2:b6:5d:3d:08:75:a1:26:6b:e9:dd:15:9a:d5:a1:
30:d7:a6:c8:85:be:89:f8:f9:de:55:ac:d2:62:c8:3e:e3:2b:
bf:87:de:68:93:b5:d9:89:26:1b:53:29:3c:a8:05:de:85:20:
f7:d6:d2:53:c6:e1:6e:42:ab:98:fd:b6:28:99:f6:83:08:1f:
df:25:40:fa:e6:ce:14:3c:82:54:b6:c5:c4:94:21:12:ea:3f:
9d:3d:08:37:dc:c9:15:5f:f5:4f:25:e1:da:4c:da:ae:4d:d8:
a4:6b:c2:2e:7a:ac:03:de:aa:ae:a7:87:bd:8c:30:0f:bf:de:
69:6b:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:19 2025 by rpki-client