Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: Jp56iZ0BjpEhpUCjiAdR0uEzusJtwRHm5oxYYsUrK4U=
Subject key identifier: B7:F5:7D:25:96:0B:B9:26:2E:B5:7A:F3:B3:47:FB:17:75:CE:0F:D6
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019757FF75E5C5D4DCE1F83FD06D1538015C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 04:00:48 +0000
Manifest this update: Tue 10 Jun 2025 04:00:48 +0000
Manifest next update: Wed 11 Jun 2025 04:00:48 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: T69KWfXjp+cTDG97CYM06RMI7hXm490SXi/2qGccTtM=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:ff:75:e5:c5:d4:dc:e1:f8:3f:d0:6d:15:38:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 10 04:00:48 2025 GMT
Not After : Jun 11 04:00:48 2025 GMT
Subject: CN=b7f57d25960bb9262eb57af3b347fb1775ce0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:18:1f:68:9f:95:b3:97:22:08:b4:a7:21:
e4:71:30:b6:f5:08:82:bf:74:e2:90:73:80:1a:c3:
b3:bc:af:02:26:50:8c:db:87:48:8c:93:18:a1:64:
a3:41:0c:68:4c:67:48:60:75:05:bf:42:ca:9d:83:
19:1d:d9:16:7b:51:94:02:41:40:90:c5:30:9c:6f:
34:81:44:03:20:a1:08:ae:d9:34:cc:ed:61:6b:2e:
31:e8:c7:c0:82:c5:9c:4c:b9:0e:ae:35:b6:bf:f1:
90:8c:58:98:73:cd:43:e4:0d:e0:3a:50:62:f7:d5:
7b:b5:65:4f:37:d0:b4:6e:dd:ef:fa:43:aa:0c:d9:
04:c6:38:5d:43:b1:8b:9e:0f:bc:2d:6c:d6:90:25:
7e:20:ca:82:98:a0:a4:a6:84:d8:93:c0:6a:40:01:
c7:40:63:70:9e:f5:a2:e4:86:61:c5:fc:a7:68:2a:
fd:76:be:70:84:ad:b6:ae:b9:26:59:89:33:4b:bb:
aa:df:84:e5:d9:ed:0e:28:5a:dc:13:2c:e7:c3:59:
86:b6:d0:8f:cd:23:11:be:c0:d4:4d:a0:86:d4:fe:
d2:2a:4b:c5:95:d4:1f:55:6c:2b:74:f6:96:53:17:
20:0a:67:0b:9b:89:5e:5d:9c:4c:99:55:dc:2a:2e:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:7D:25:96:0B:B9:26:2E:B5:7A:F3:B3:47:FB:17:75:CE:0F:D6
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ac:fd:63:4d:0b:b1:16:e5:cf:0a:b2:0b:83:6c:01:ed:8f:
3c:c2:8f:af:c0:4d:88:c1:ba:08:50:45:c1:3e:0b:89:aa:27:
fa:49:a5:90:3f:71:2a:4c:e6:82:fd:6a:96:72:a3:f9:55:6d:
43:b0:4d:a8:7f:60:e3:91:24:c6:33:77:9a:1f:b6:14:9f:66:
09:e5:b3:28:a4:02:8c:ab:e7:56:01:6f:a1:85:f6:d0:5c:e9:
1a:f3:d7:ee:f9:16:a3:b6:90:7a:53:a6:61:77:12:62:40:4c:
49:aa:1a:58:1e:fd:98:79:17:db:6a:58:a7:86:3a:b8:d0:29:
d2:4d:78:8b:44:b6:08:eb:47:8e:e1:be:d0:eb:57:4f:6c:b2:
19:09:da:5e:2b:88:28:0c:f8:33:1a:24:e8:c8:a2:57:f8:62:
08:57:5c:25:60:57:13:87:90:a4:06:74:87:65:6d:db:e6:14:
00:9d:a0:01:bc:ab:47:8b:a8:4f:a2:ae:79:01:07:53:c7:16:
0b:e4:1f:86:6c:03:29:1c:7c:2c:8a:d6:44:88:fb:53:ea:6e:
ce:cf:cc:35:f7:62:a8:4b:71:da:96:81:27:54:9e:d6:95:ff:
2d:10:c6:64:ee:e9:ae:68:1d:1c:ef:1a:38:7d:0d:54:c9:f0:
69:1d:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:02:14 2025 by rpki-client