Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: 11LFJCbg2MpCv+fMKKXNKKXElstsSiMdiktsfGDBYxs=
Subject key identifier: 13:6A:5F:1A:E8:D0:9C:28:32:C8:30:69:26:C1:F1:CB:AD:78:82:45
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 0198488951E72D7C4E591028C96F9F76D7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 12E8
Signing time: Sat 26 Jul 2025 21:00:15 +0000
Manifest this update: Sat 26 Jul 2025 21:00:15 +0000
Manifest next update: Sun 27 Jul 2025 21:00:15 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: cfDpN8mUtcw2MHE17NMEkzyd/HF8DfMERLVABKxUqas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:51:e7:2d:7c:4e:59:10:28:c9:6f:9f:76:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Jul 26 21:00:15 2025 GMT
Not After : Jul 27 21:00:15 2025 GMT
Subject: CN=136a5f1ae8d09c2832c8306926c1f1cbad788245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:6d:02:9c:42:10:56:9e:92:83:ce:75:fb:
b6:85:51:03:3e:13:c8:39:5e:c8:d5:b2:4d:81:65:
63:76:92:d2:3a:1c:3c:c5:8a:c2:35:5a:5d:8e:35:
33:72:2c:32:95:b3:77:24:32:bc:ed:83:d0:68:b0:
60:ef:21:a4:d4:e6:a9:8c:11:0a:b8:d9:00:a5:ab:
10:2e:ca:42:14:b2:0d:f3:29:16:e9:d0:47:af:ac:
a6:58:d2:b9:ff:63:1c:65:f7:25:e6:69:0c:82:af:
2d:81:b3:e1:ec:5f:27:da:87:0c:89:c5:22:91:c6:
74:de:9d:51:14:71:8d:23:29:8c:6d:55:ac:84:65:
2f:7d:3a:4c:5c:41:ef:14:2f:62:87:4b:80:7d:88:
84:30:49:49:7d:3a:c1:a7:cd:34:86:5c:a6:41:dc:
8c:d4:36:ea:17:19:e3:9a:8f:cd:c1:b8:0e:d8:99:
bc:40:6f:6e:0f:9c:3b:ea:8b:da:ae:a5:31:f5:a9:
26:2d:9b:2d:5d:cc:59:f9:ed:55:da:2a:77:69:96:
56:22:0a:35:f3:f4:70:bd:1c:a6:53:86:88:50:88:
81:71:3c:e1:bf:9f:f5:af:4a:f1:02:b8:35:20:8f:
f0:ef:5c:99:b7:d0:02:ef:99:f1:55:72:7f:72:93:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:5F:1A:E8:D0:9C:28:32:C8:30:69:26:C1:F1:CB:AD:78:82:45
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:55:cc:55:f1:22:93:86:19:5a:cb:32:61:41:cf:c7:2a:
48:dd:20:44:d7:98:87:1d:5d:e0:18:18:12:6a:e1:cb:4f:ff:
7b:6a:31:0d:bc:d3:e2:df:61:79:e3:ab:31:1e:59:63:fa:68:
11:3b:2c:11:65:d6:13:d6:f7:b3:d3:a3:da:62:26:e6:79:68:
0d:8a:9d:f6:22:f9:cf:fd:1d:93:37:0a:b6:43:20:2e:7e:fb:
f3:c6:a6:6c:7b:b9:f7:f6:4e:d9:a1:7a:16:1e:c5:21:98:d2:
03:4d:03:19:6c:cf:b8:4d:fe:94:6e:6d:0e:72:3a:93:d2:24:
f0:42:54:02:6f:84:5b:1d:b9:32:1f:93:da:f0:89:25:41:d9:
68:4f:75:a1:99:89:d3:ac:7f:49:0e:e9:3a:52:ff:0f:4a:3d:
20:02:f4:5e:3a:8f:ae:1a:23:bd:24:50:85:4f:3a:97:17:72:
d7:b0:f7:28:93:20:80:9a:8f:ac:13:23:91:f1:55:2f:f9:f3:
cd:c3:e2:ef:0b:7e:4e:63:d8:5e:0a:ed:f1:b8:bd:c2:70:5d:
0e:f6:b4:bb:ef:2c:58:9b:69:32:b6:0e:2d:45:9f:81:a9:1d:
79:bf:5a:2c:08:e3:4a:ed:cf:a9:ad:35:ed:b6:9c:31:d2:86:
62:fa:f0:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiVHnLXxOWRAoyW+fdtfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYWEwMmY0NWI5NzkzMGM3YTQ2ZDBlZjE4YTkxYzBhYWY4
OTkyZjIwHhcNMjUwNzI2MjEwMDE1WhcNMjUwNzI3MjEwMDE1WjAzMTEwLwYDVQQD
EygxMzZhNWYxYWU4ZDA5YzI4MzJjODMwNjkyNmMxZjFjYmFkNzg4MjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM1tApxCEFaekoPOdfu2hVEDPhPI
OV7I1bJNgWVjdpLSOhw8xYrCNVpdjjUzciwylbN3JDK87YPQaLBg7yGk1OapjBEK
uNkApasQLspCFLIN8ykW6dBHr6ymWNK5/2McZfcl5mkMgq8tgbPh7F8n2ocMicUi
kcZ03p1RFHGNIymMbVWshGUvfTpMXEHvFC9ih0uAfYiEMElJfTrBp800hlymQdyM
1DbqFxnjmo/NwbgO2Jm8QG9uD5w76ovarqUx9akmLZstXcxZ+e1V2ip3aZZWIgo1
8/RwvRymU4aIUIiBcTzhv5/1r0rxArg1II/w71yZt9AC75nxVXJ/cpNaAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNqXxro0JwoMsgwaSbB8cuteIJFMB8GA1UdIwQY
MBaAFHKqAvRbl5MMekbQ7xipHAqviZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjct
ZDc5YjBlYzc4ZTk3LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjctZDc5YjBlYzc4ZTk3
LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEahVzFXx
IpOGGVrLMmFBz8cqSN0gRNeYhx1d4BgYEmrhy0//e2oxDbzT4t9heeOrMR5ZY/po
ETssEWXWE9b3s9Oj2mIm5nloDYqd9iL5z/0dkzcKtkMgLn7788ambHu59/ZO2aF6
Fh7FIZjSA00DGWzPuE3+lG5tDnI6k9Ik8EJUAm+EWx25Mh+T2vCJJUHZaE91oZmJ
06x/SQ7pOlL/D0o9IAL0XjqPrhojvSRQhU86lxdy17D3KJMggJqPrBMjkfFVL/nz
zcPi7wt+TmPYXgrt8bi9wnBdDva0u+8sWJtpMrYOLUWfgakdeb9aLAjjSu3Pqa01
7bacMdKGYvrw7A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:44:16 2025 by rpki-client