Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: TWeIPUl6ggPaKDsM1GRzYO+kLWmxqGotTmOnV4kPSyc=
Subject key identifier: 1C:91:BF:58:3D:8F:1B:5F:5B:49:8A:B1:87:42:EE:FD:BB:09:57:33
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0198469B2041476D64EAB719DA132914787F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0E1F
Signing time: Sat 26 Jul 2025 12:00:28 +0000
Manifest this update: Sat 26 Jul 2025 12:00:28 +0000
Manifest next update: Sun 27 Jul 2025 12:00:28 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: NxicTQCvfLUIKC5kxGXeg8Klq9L+x9OkYlKlG0wDwho=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:20:41:47:6d:64:ea:b7:19:da:13:29:14:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jul 26 12:00:28 2025 GMT
Not After : Jul 27 12:00:28 2025 GMT
Subject: CN=1c91bf583d8f1b5f5b498ab18742eefdbb095733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:96:02:b0:91:6e:ba:52:33:d3:da:c8:f5:
b4:b9:32:b7:82:6c:ca:47:84:4f:2d:d6:8e:a6:8d:
36:3b:09:2b:3f:b0:7b:84:2f:74:56:d9:ad:4e:70:
79:33:f4:fd:99:5e:e3:16:e8:c9:21:ad:ad:34:a7:
20:04:43:cb:0d:06:9a:3a:03:23:bb:96:a5:14:bb:
65:45:27:6f:d0:22:f8:0c:f9:39:2c:44:4d:e6:52:
33:ad:b8:af:73:87:81:03:7f:89:2d:81:f9:69:bd:
79:c2:d2:3c:72:6a:e9:37:10:41:43:d9:10:ae:3a:
3d:4f:00:65:d7:a5:28:a8:93:6c:de:a9:a2:5a:24:
c9:fb:28:74:2f:17:1b:4d:02:3b:f1:5d:6b:97:d9:
f1:9f:88:47:13:e1:8c:bd:56:e2:e6:6e:fc:90:5c:
ec:79:2d:0b:c2:5f:ff:92:71:8e:08:65:2c:4f:d0:
dd:ce:e1:5a:b8:37:d3:75:6b:c9:a2:f2:56:30:47:
a8:d8:f0:98:82:10:9f:7f:e6:04:2d:ce:42:cf:13:
65:39:67:2a:68:4b:2c:0e:53:a4:7c:eb:8e:17:f7:
bf:ef:7f:89:a8:45:32:ae:b0:7b:cd:1f:b4:b5:9f:
89:31:45:96:92:eb:4c:e1:08:60:1b:77:ef:89:4d:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:BF:58:3D:8F:1B:5F:5B:49:8A:B1:87:42:EE:FD:BB:09:57:33
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:18:c5:ca:4e:c1:c9:fd:13:5b:73:40:8e:b4:0d:b5:dc:22:
63:a2:16:6f:41:a3:70:71:71:d1:69:b7:b6:df:17:a8:f2:90:
96:79:9c:fb:b0:89:70:b7:ac:4e:14:93:f5:0c:8b:8a:7b:d5:
7f:20:bd:81:b7:00:5e:bf:7d:3d:70:fb:a2:be:3c:7a:4f:81:
56:2b:cf:fe:2b:d4:a7:ae:85:73:ac:47:0b:80:bc:c1:ef:8c:
60:6b:75:06:cd:24:27:87:f5:93:11:2e:05:32:f7:77:73:56:
9f:4c:8b:e0:95:8f:bd:83:2d:d9:f5:94:8c:b9:19:a3:0e:aa:
9c:cf:1c:20:01:1a:93:2e:f1:72:33:16:6b:34:8b:36:df:50:
8a:ec:cf:06:55:6e:01:ba:34:a3:54:b9:14:8d:cc:5b:fc:c9:
c8:b9:38:fe:32:af:a3:bc:bd:ea:5d:5b:3e:1a:66:fc:e5:a7:
a3:f8:02:98:23:b6:e6:06:d8:72:5c:4c:5a:a9:0a:cd:65:3a:
68:61:1e:e8:c8:a9:5e:9c:b9:97:ba:09:cb:f4:79:ec:6a:41:
fc:ef:fb:49:07:b0:d3:3a:9d:ff:8b:fc:c4:be:6e:44:bb:85:
04:f9:bb:c3:9e:d8:55:4b:b1:14:af:71:f3:17:91:e2:22:48:
43:31:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:45 2025 by rpki-client