Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: R0OtRdgcPgm94O5cxdaYbh14CFkN9F4guJVwFQ/rrH4=
Subject key identifier: FB:D0:E0:97:07:40:73:D6:B2:C7:07:BE:F4:61:AD:37:60:C7:4A:8D
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 0198564598CFB6C344CADC4BF7A9A0E1D60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 149B
Signing time: Tue 29 Jul 2025 13:00:58 +0000
Manifest this update: Tue 29 Jul 2025 13:00:58 +0000
Manifest next update: Wed 30 Jul 2025 13:00:58 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: mwDCpFHHL0JSxB6T0fMSsErKkMRTpmWqA47MSRxpVWU=)
2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=)
3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:98:cf:b6:c3:44:ca:dc:4b:f7:a9:a0:e1:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jul 29 13:00:58 2025 GMT
Not After : Jul 30 13:00:58 2025 GMT
Subject: CN=fbd0e097074073d6b2c707bef461ad3760c74a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:4d:65:da:b9:2a:9a:a4:74:fd:50:8e:15:
be:c6:73:e3:f4:8e:65:cf:0a:33:03:fc:28:cb:fb:
eb:ab:91:17:cf:13:c8:d8:e7:95:7c:6f:c2:7b:00:
b2:a0:d6:27:a9:84:5a:6a:d9:09:76:38:f8:73:ec:
34:e4:9a:d5:1b:85:78:5d:e1:34:67:55:1c:02:e6:
d9:82:bb:14:7d:12:ae:e0:c5:ca:ba:0f:46:a8:eb:
7a:78:55:1e:72:b4:3b:99:61:17:14:ba:71:4e:56:
2d:95:57:4c:5c:87:3e:0a:56:b3:70:70:84:4d:4a:
6f:17:f4:2b:80:40:d5:1e:9d:73:12:71:e9:5c:27:
a2:aa:02:09:0f:69:16:1d:ed:cd:f1:86:ab:b2:76:
7c:9a:7c:a5:40:c5:1b:64:2a:85:1b:cc:63:39:7b:
e1:5f:b6:cb:c0:ef:cb:26:42:b9:6f:ac:16:79:a1:
47:fd:2d:6f:63:04:f7:17:11:78:69:1d:68:53:df:
6f:c1:06:8d:45:6d:da:46:eb:ac:f5:dc:c7:2e:b4:
5b:85:e0:09:ce:8a:41:ba:2c:d7:a8:09:aa:6f:7c:
d2:27:fd:6f:34:d3:76:0e:64:1b:08:93:18:cf:62:
d8:fa:57:f3:65:57:6f:f9:dd:6e:f2:e9:b7:33:d1:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:E0:97:07:40:73:D6:B2:C7:07:BE:F4:61:AD:37:60:C7:4A:8D
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:5a:6b:3d:47:3f:f6:58:43:21:03:c5:a2:7d:b0:e0:c3:
b9:73:0b:4a:7f:ee:e4:13:79:2b:6b:88:ba:a9:ec:9a:89:19:
31:4c:b5:e6:33:e1:66:38:5a:d4:6e:6b:8c:8a:f6:1b:f8:4f:
25:61:d9:06:62:f2:80:31:9f:c2:b0:16:0e:41:d9:cc:a4:99:
1a:79:0f:3a:ec:f2:5e:cb:4a:50:8a:ef:16:a7:10:7e:ac:f1:
e1:4a:07:f0:86:7a:f6:d8:75:48:39:a5:84:46:d5:74:7f:33:
dd:06:be:c2:e7:41:88:cb:54:2f:0f:f8:57:3f:9c:0b:99:de:
ac:31:96:ab:70:9e:8c:92:96:67:d6:88:63:9f:a4:3d:85:93:
cc:66:c3:01:c8:94:9c:6d:ca:1b:d3:c3:25:b8:99:10:a2:28:
2f:ed:b2:84:cf:0e:7c:74:4a:85:02:63:49:8a:0e:8c:5d:d0:
bb:30:ca:c8:a3:60:7a:d7:24:8c:7b:f8:b8:52:58:2d:e7:13:
ab:16:b1:39:0a:6a:11:a5:c0:4c:7c:72:6d:9e:16:a3:2f:e4:
9a:a0:4c:f7:3a:3b:b5:a0:c0:76:66:50:19:91:a7:cd:e0:13:
04:76:e2:3b:8e:98:0e:93:20:13:03:52:2f:22:98:2f:f7:15:
f9:2e:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:39:03 2025 by rpki-client