Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: RWdgerEoX2AGiWbX48fq5Gjw7f+j/jdCxManMcXRW+Q=
Subject key identifier: 74:68:B5:73:73:1E:6F:CA:40:67:14:24:43:EB:56:9F:E3:C1:8D:77
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01975BDC016A4D3A296E6E4FCA8FEE4CE4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1588
Signing time: Tue 10 Jun 2025 22:00:34 +0000
Manifest this update: Tue 10 Jun 2025 22:00:34 +0000
Manifest next update: Wed 11 Jun 2025 22:00:34 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: J6g9s6nKLa1PIEr1VAGMTRVTwRP5MjGdoI+DIMizcl8=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:01:6a:4d:3a:29:6e:6e:4f:ca:8f:ee:4c:e4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 10 22:00:34 2025 GMT
Not After : Jun 11 22:00:34 2025 GMT
Subject: CN=7468b573731e6fca4067142443eb569fe3c18d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:8a:e0:2c:be:81:33:05:a5:00:20:03:de:
9b:ea:e9:b1:d5:03:44:23:71:54:f4:ef:e1:a4:3b:
a2:00:3d:bc:48:53:74:00:af:d0:1d:84:db:40:58:
5b:5e:3a:da:f1:61:c1:85:3f:4f:5d:5d:5e:66:49:
50:89:c7:7a:2d:fd:15:86:98:d2:21:33:88:5b:95:
e6:b5:e7:23:61:5a:9c:26:a9:3f:d0:12:f5:43:43:
46:93:51:8d:53:f3:ad:49:2b:b6:9c:48:58:0e:b7:
ec:f4:96:87:38:0b:87:af:01:9e:da:d5:2f:4c:1f:
81:25:e3:13:8c:fa:df:d1:ec:9a:22:3e:fe:2c:7d:
d2:87:7e:dd:c4:bb:ca:ee:12:ed:af:00:7b:51:f8:
47:e9:94:f5:1b:63:e8:02:8a:49:71:06:94:ca:98:
ac:24:e0:a5:f4:6a:ff:a3:db:19:71:8a:aa:b7:33:
f6:67:d6:58:f6:0d:30:9c:86:b6:74:2d:14:82:f5:
be:eb:88:17:85:9e:88:1e:cb:7f:cc:2e:ae:33:90:
fe:82:af:24:7a:dd:c9:d5:2c:e2:3a:8f:44:c9:e7:
5a:94:57:b2:24:a9:9b:82:5e:3b:5c:d1:52:9c:b1:
9c:2d:6d:18:0f:5d:9d:7b:03:cf:10:84:e4:74:38:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:B5:73:73:1E:6F:CA:40:67:14:24:43:EB:56:9F:E3:C1:8D:77
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9d:4d:9c:52:28:22:76:42:02:fd:5c:b0:78:e1:e1:b4:c9:
ae:28:c7:13:ba:3e:f1:a9:1a:a5:ec:37:c2:7b:d0:1f:62:91:
a3:fb:a3:25:fd:d2:ca:c4:b5:cd:d7:ad:10:54:33:c3:d0:86:
7a:57:62:c8:ed:84:97:ac:cb:f7:fb:76:b8:71:4a:dd:5e:59:
f1:c3:05:1d:99:96:6f:76:7b:c0:21:54:cc:56:2f:85:66:23:
40:da:66:77:74:c1:43:b7:5f:5d:dd:18:58:a0:7c:40:00:84:
d4:f2:a3:54:72:62:97:60:c8:65:ff:58:c1:18:c8:0a:ca:14:
9c:e8:64:81:cc:06:77:c3:c5:1d:33:af:07:a2:00:f3:1d:3b:
19:af:e2:2d:2f:b5:1e:7b:7e:85:d0:4f:6d:c2:23:73:6a:41:
c1:17:cf:7e:09:64:37:80:f8:0e:24:c9:ac:e5:f3:78:50:9d:
f8:ef:ba:0a:5c:05:09:f8:3e:c8:3d:f2:b3:9e:8a:19:e3:5e:
0d:ed:84:cb:55:ff:d6:49:68:61:cc:32:c4:6a:c8:56:e6:6a:
3f:aa:18:3a:fc:16:77:d0:64:be:3a:16:fb:99:f2:b0:88:70:
71:a4:bf:8c:b2:3b:4f:e5:57:e4:41:ae:d3:a8:8f:bb:29:5f:
31:27:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:49:56 2025 by rpki-client