Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: WxRsBDgUFWj0REiJRUYW4o3dCtTp2771pFaTAPK6NeI=
Subject key identifier: D3:8E:DC:97:56:A0:F6:9A:ED:2D:1E:03:D2:94:E9:5A:BC:B1:00:7C
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 0198578F7045E0A2B43A7B64B32C7BC5B141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0DA2
Signing time: Tue 29 Jul 2025 19:01:14 +0000
Manifest this update: Tue 29 Jul 2025 19:01:14 +0000
Manifest next update: Wed 30 Jul 2025 19:01:14 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: GISAyOwysJ+wS9dtWB1PStMpFaB5rUC1PZV8xpzOT0Q=)
2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8f:70:45:e0:a2:b4:3a:7b:64:b3:2c:7b:c5:b1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Jul 29 19:01:14 2025 GMT
Not After : Jul 30 19:01:14 2025 GMT
Subject: CN=d38edc9756a0f69aed2d1e03d294e95abcb1007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:42:5f:24:8a:2c:55:83:dc:84:71:a2:9a:
70:ec:18:b6:cf:46:d1:56:c5:5e:43:d5:8c:ff:de:
3c:ab:69:bb:31:04:67:18:41:1c:33:82:1d:82:29:
a0:5b:48:3f:b4:91:26:f0:52:fe:82:8b:cc:98:ca:
fc:b4:aa:6a:0b:34:94:c1:05:4b:d5:69:33:02:06:
8d:4c:4e:78:aa:fa:bc:c1:68:92:63:ca:54:9d:7e:
d6:1f:4e:87:e0:be:2c:b4:51:07:85:ca:bb:38:59:
15:c8:a3:5c:b8:36:f0:b3:01:33:8f:f4:08:eb:10:
72:9a:12:25:af:7b:53:d3:c0:06:a8:31:c1:fd:09:
e5:68:ef:f4:d1:25:24:b8:d4:63:9c:2a:f5:10:ce:
2d:ed:63:a8:f2:e2:e5:68:f7:01:87:7d:bf:84:4b:
b9:83:4e:53:eb:86:c9:ac:4e:19:26:82:a6:6f:4b:
ed:3c:a1:3f:8e:12:0d:02:bb:f2:bd:59:bd:fd:c3:
be:9e:0e:e4:3b:dd:f6:85:dd:57:cd:9d:71:7a:4f:
20:c6:d9:10:54:b7:0d:b9:d0:cc:91:0f:8b:0e:16:
f7:7e:ca:ba:b2:e3:0f:14:fc:e1:0d:44:2d:7c:50:
bb:2f:1f:d3:61:3d:d5:f1:1e:47:6b:e0:d1:c7:86:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:DC:97:56:A0:F6:9A:ED:2D:1E:03:D2:94:E9:5A:BC:B1:00:7C
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:03:fd:a5:f3:d3:38:76:b0:ab:1a:86:ba:f7:24:03:86:
6f:75:cb:07:d5:47:d9:6c:a1:fe:7d:b4:0f:00:35:a0:8f:6f:
91:38:4f:99:22:5f:27:57:8a:26:7c:ab:33:81:9d:18:dc:c6:
2b:d5:51:fc:53:9b:9e:30:04:62:98:26:87:28:53:e7:2f:a7:
05:b6:24:18:1d:fd:ff:cb:30:3d:11:8f:aa:81:52:ab:b6:a7:
46:85:9c:b0:ff:52:3f:6e:d4:54:76:97:20:b2:04:b7:e7:d2:
b1:07:7b:3d:c2:4c:22:43:b1:b2:bd:df:b3:11:01:91:53:da:
91:f3:72:c4:91:9b:2e:fe:4f:d6:97:3f:4e:1d:5a:6f:1e:88:
f7:d2:c1:9f:74:fa:9e:ae:13:f8:60:85:7c:17:77:df:df:a9:
29:8d:31:be:2b:a5:be:dd:99:dd:ce:a4:a6:3a:e2:01:ed:96:
7f:5d:00:33:b9:1d:5a:5d:10:d1:7d:e9:d6:bf:fc:c3:32:3e:
8e:c0:0e:8f:d9:83:d9:1c:9b:56:b2:7c:bb:82:b2:46:6a:0a:
d3:db:08:64:d2:a2:d5:7d:a1:20:91:f0:2a:9e:2a:cc:08:ba:
01:44:83:58:bf:a9:17:f9:a8:0c:87:2a:5f:d0:c8:f4:3f:6e:
67:60:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:14:21 2025 by rpki-client