Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: rFKMs1ujIDvY75JcVSU5I1TOKLiqDianLVuSsGvaomE=
Subject key identifier: 85:F1:D1:F8:A5:11:A9:BA:05:A3:79:15:1D:5D:F6:D3:CF:DE:B9:51
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 019851C401BCB38B50DC837CCD0F58DCF016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 16:00:56 +0000
Manifest this update: Mon 28 Jul 2025 16:00:56 +0000
Manifest next update: Tue 29 Jul 2025 16:00:56 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: /LuRwNl/317ArR01n5XuuF5rSWaSZCRDqg0tSf0qMKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c4:01:bc:b3:8b:50:dc:83:7c:cd:0f:58:dc:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: Jul 28 16:00:56 2025 GMT
Not After : Jul 29 16:00:56 2025 GMT
Subject: CN=85f1d1f8a511a9ba05a379151d5df6d3cfdeb951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:08:f0:25:dd:ac:43:ec:2c:79:50:02:88:
d6:7b:2f:a6:86:71:fd:e2:df:8b:72:ec:2e:ad:5b:
33:30:2a:2d:3b:7d:97:a0:89:c0:78:73:cb:45:19:
33:5d:62:b9:2c:28:3e:29:95:ad:81:60:0f:3c:a9:
f7:95:ae:ee:59:2f:d7:07:bb:2c:12:9c:00:00:cd:
e7:57:43:d0:b7:99:9b:f0:25:9c:08:1d:7c:df:47:
9e:ef:b8:0e:bb:7a:5d:aa:4a:c4:7d:20:8c:b6:c0:
bc:40:8b:35:6d:e5:7f:f7:64:e7:71:6c:04:37:bc:
1c:dc:84:bf:81:9f:a8:06:81:3c:a8:17:f7:2f:86:
27:f0:f5:13:1b:36:72:c0:e6:44:81:1c:bb:27:d6:
e7:e0:33:77:c0:44:c1:75:49:85:4c:b8:c0:e5:c4:
07:31:2a:35:d6:5b:7e:67:c4:31:84:39:cb:f7:86:
29:d6:8d:7a:2d:05:f9:62:af:41:dc:37:c4:20:da:
23:e1:63:43:a7:b5:50:b8:a9:c4:0b:9c:5e:26:e6:
d0:47:ea:1a:ca:35:5f:6f:be:0c:e5:6b:d2:4b:7e:
97:39:b1:71:55:a5:21:6b:24:39:c1:fb:64:97:df:
79:5a:3f:87:17:91:46:df:65:73:97:9a:fc:70:10:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F1:D1:F8:A5:11:A9:BA:05:A3:79:15:1D:5D:F6:D3:CF:DE:B9:51
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:c1:bc:8d:62:38:a9:1c:96:2d:83:13:0b:f9:d1:50:4d:
7a:33:c8:b3:98:e1:80:9f:73:ab:e3:cb:0b:33:74:ee:c3:28:
48:c5:c7:b1:7e:3f:be:6f:35:98:04:86:1e:f9:f7:5f:4a:4d:
c4:71:21:d9:d6:10:a9:f8:89:fd:a6:58:a0:c0:09:40:67:32:
55:5b:5a:5d:5d:1d:4a:2f:75:78:d0:f5:d3:c8:0d:d9:f6:a5:
b6:2c:95:dc:fe:ef:3f:29:5f:ac:86:70:e3:c3:50:6e:08:d9:
95:ff:1b:a5:fe:46:c6:15:c8:79:7d:cb:c7:fb:be:ec:83:ac:
33:fb:ee:43:cf:1b:c9:61:1e:fd:bc:93:35:e8:42:1a:6f:c2:
a8:4f:27:40:22:3d:5b:53:ac:78:4c:23:1a:90:c8:e3:ee:87:
d9:b1:87:9d:28:a6:b0:78:c8:ef:a5:2e:8e:05:52:07:f1:8e:
19:98:11:2d:39:14:3d:bf:6a:ad:a8:b5:38:4e:9e:3c:a8:1f:
f6:3a:ee:54:0f:01:ea:39:82:ba:38:36:26:e5:93:ee:8c:20:
58:68:bc:b6:db:dd:be:db:69:0d:7e:1b:33:bf:09:e1:31:5a:
f2:57:99:b4:f4:b0:d4:41:7f:bc:03:cf:6d:ba:76:c1:3a:12:
1f:ed:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:24:21 2025 by rpki-client