Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: 3eecZIxQC7W+MQxDiO6Rrl12gB4i8eIUXm0RJyeiftI=
Subject key identifier: EF:A4:66:7F:19:FB:9D:C3:27:B0:0E:1E:3D:4B:D9:8A:07:C1:29:E7
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019759EDA4210B072FA0199062ECEE242EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 13:00:35 +0000
Manifest this update: Tue 10 Jun 2025 13:00:35 +0000
Manifest next update: Wed 11 Jun 2025 13:00:35 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: euzUU7V1DN7eb54ALMn6XIJYhG+JF4HOtv70Zuv6eHc=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:a4:21:0b:07:2f:a0:19:90:62:ec:ee:24:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 10 13:00:35 2025 GMT
Not After : Jun 11 13:00:35 2025 GMT
Subject: CN=efa4667f19fb9dc327b00e1e3d4bd98a07c129e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:00:72:a2:93:11:41:00:e7:1c:61:e3:e3:
98:75:b9:f2:c7:19:9e:62:bc:d8:63:d8:34:0c:ec:
83:1b:8f:6e:c4:2d:4d:47:d1:fd:ca:8a:81:2a:6b:
07:8a:17:f8:e8:f3:f2:f7:ca:a2:c2:6f:b6:61:74:
cb:41:8c:49:88:b0:55:92:05:6e:42:3b:f5:d1:b5:
9d:32:61:e4:2b:a1:47:22:71:62:24:d5:53:e0:8c:
f7:91:da:73:64:12:09:df:b8:75:78:b0:59:31:c2:
1a:0b:61:61:dc:22:53:3b:1d:3b:5d:88:0f:37:d5:
8a:74:72:4e:69:80:34:bb:ef:3b:c0:98:1d:6a:54:
b1:1f:86:0c:a3:0d:39:31:69:52:bd:e2:4c:89:1f:
c0:8f:c9:a2:7a:06:df:82:b3:33:6d:1d:6e:6f:93:
aa:14:79:99:d2:a7:04:eb:a7:0c:aa:f0:aa:b0:dd:
00:38:10:78:81:ed:93:8c:19:9f:17:2a:44:76:db:
1c:1a:2f:87:14:25:b9:c7:1e:14:ee:5d:f0:c3:dd:
75:31:8c:a6:50:76:00:88:0c:30:60:b4:46:a0:69:
fd:69:89:1a:4f:75:c1:87:95:8d:2e:ea:df:a9:7d:
47:ba:8d:c2:bc:14:53:ce:f2:4f:e4:0b:0a:29:12:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:66:7F:19:FB:9D:C3:27:B0:0E:1E:3D:4B:D9:8A:07:C1:29:E7
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:dc:19:42:bc:4d:59:d3:48:09:63:f5:be:f4:7f:c8:80:
4a:0f:64:e4:e2:c0:ce:53:59:e4:bc:e6:43:71:b1:24:3d:af:
75:04:bf:4d:6d:2f:3c:f4:7a:10:db:fb:5f:c3:4b:7e:1a:fa:
52:22:60:1f:4c:91:bb:0b:ca:e1:a8:34:23:a8:23:c1:1f:c4:
7d:5e:22:55:93:0d:15:02:22:6c:e4:81:8f:72:74:9d:75:3d:
cf:2f:5b:b0:5e:29:a8:10:0d:ac:f3:33:65:1c:13:72:cf:ca:
d9:94:7b:df:35:46:f0:cb:36:a0:75:7b:26:f5:b3:05:06:27:
3a:14:f3:90:69:e6:91:11:92:ca:e6:52:b4:6b:41:cd:f3:16:
d0:43:da:ac:05:a2:66:47:68:25:86:2c:62:5c:67:29:45:35:
5a:41:84:71:28:a1:c9:30:c4:37:61:de:b5:ef:c4:32:81:c0:
25:44:2f:2f:3c:24:ba:39:26:47:cd:d2:6c:ab:7a:a5:43:59:
ee:6e:bf:65:43:49:c9:27:15:1f:05:e8:8e:c7:86:eb:bb:88:
8e:4a:bd:8b:b2:b2:a5:12:cd:c8:42:5c:42:75:6e:26:3e:45:
ba:0a:4b:8e:d6:63:c6:4c:e2:76:ed:ff:69:85:04:d6:fe:71:
6e:a4:9c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:46:31 2025 by rpki-client