Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: XRmImQ9zIcSpYMrrU8FTbibXjbf47IiBsIr51PVHPWk=
Subject key identifier: 4E:C8:68:86:E8:27:CF:FD:CC:0C:A4:EA:07:13:34:5F:D0:9D:AE:26
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01976395952B8B378E63CF42806185BB319E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 10:00:36 +0000
Manifest this update: Thu 12 Jun 2025 10:00:36 +0000
Manifest next update: Fri 13 Jun 2025 10:00:36 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: mp2cG3ZbLMUu/rBiydAs5wQdoc9a+f25J+505u2HU5A=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:95:2b:8b:37:8e:63:cf:42:80:61:85:bb:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 12 10:00:36 2025 GMT
Not After : Jun 13 10:00:36 2025 GMT
Subject: CN=4ec86886e827cffdcc0ca4ea0713345fd09dae26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:da:15:72:5b:24:06:cd:0f:8a:a6:07:28:
4e:81:aa:16:8a:13:35:32:e5:f6:45:61:8d:0c:8d:
c7:e9:85:32:fe:07:46:3e:5a:1d:66:1c:d3:5b:fa:
52:6f:6d:0b:8c:ce:3c:77:e5:d8:5a:f3:b3:6c:f0:
73:6d:24:4f:21:25:d3:a1:0a:21:b6:f6:59:3f:7a:
f9:4f:60:f3:99:ec:b0:3c:da:ad:37:e3:d9:bc:4f:
0e:a4:d0:87:ae:8b:f2:1b:02:4f:5b:be:c4:a1:b7:
b1:46:79:ea:2f:ac:db:43:f8:07:ad:a3:d4:82:d5:
b4:57:85:92:6e:61:94:0a:98:7b:59:2a:d9:99:2d:
de:9f:00:bb:cf:1a:46:8e:0b:6b:3b:41:6b:9f:4b:
b3:ba:e8:39:6a:e8:54:60:4c:03:6c:2f:d1:e6:ec:
ac:74:13:71:61:93:8d:83:c9:1b:03:ed:f7:5c:2e:
c8:04:0b:03:e4:34:e5:02:70:df:d2:cf:c5:f5:d4:
a7:cd:86:dd:6e:60:02:19:0a:52:f6:db:7b:89:33:
f2:59:dd:be:1a:b5:4e:fa:f8:b6:c1:48:7c:46:f0:
53:85:ab:07:a0:87:6b:fa:fb:f1:1c:4b:5f:63:b9:
52:9a:5d:64:e2:68:61:eb:f7:75:56:5f:32:90:a2:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:68:86:E8:27:CF:FD:CC:0C:A4:EA:07:13:34:5F:D0:9D:AE:26
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c6:51:f8:6e:51:2a:fc:7b:24:5f:bf:b1:10:98:cc:81:bc:
be:2e:ec:46:ce:02:d3:75:2d:e2:07:d2:33:8e:ff:c5:11:27:
1f:ff:fd:09:7f:c4:c5:53:33:6e:ad:1c:37:c3:4c:ea:56:a4:
75:f6:d9:fc:0c:a5:bc:f5:7b:4f:0f:05:04:d7:b7:99:dd:1b:
de:6c:24:29:45:66:d9:f6:7f:df:57:1f:66:79:75:35:1d:1d:
ce:73:8a:65:3f:20:60:bf:2c:8a:b9:68:2c:3e:f4:fa:90:a3:
4f:42:3c:3f:ab:9d:6e:fd:b8:bb:cf:3a:bd:32:b5:83:10:41:
e8:36:ab:fd:c9:5b:0a:fc:06:73:a9:e5:b4:c6:2c:09:2b:a1:
15:8d:69:51:a5:e1:78:e3:5d:24:b6:5d:72:f6:8d:f3:55:e9:
82:83:54:67:6d:4e:dd:ac:e5:b3:e9:bc:b2:80:19:6b:56:bb:
e4:f6:49:cd:6b:10:da:94:4c:e6:dd:11:1c:29:a0:15:61:bd:
a5:b9:25:d3:2c:e1:9b:69:cb:65:d2:80:8a:99:4e:dd:e8:5d:
93:65:d4:8b:2b:8e:61:fb:dd:f0:68:26:b6:37:d0:8f:15:37:
d6:ce:d4:f4:fa:91:e0:33:1c:f0:04:ee:37:46:94:58:71:f3:
9e:b1:a4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjlZUrizeOY89CgGGFuzGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll
Y2IyZDYwHhcNMjUwNjEyMTAwMDM2WhcNMjUwNjEzMTAwMDM2WjAzMTEwLwYDVQQD
Eyg0ZWM4Njg4NmU4MjdjZmZkY2MwY2E0ZWEwNzEzMzQ1ZmQwOWRhZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA3aFXJbJAbND4qmByhOgaoWihM1
MuX2RWGNDI3H6YUy/gdGPlodZhzTW/pSb20LjM48d+XYWvOzbPBzbSRPISXToQoh
tvZZP3r5T2DzmeywPNqtN+PZvE8OpNCHrovyGwJPW77EobexRnnqL6zbQ/gHraPU
gtW0V4WSbmGUCph7WSrZmS3enwC7zxpGjgtrO0Frn0uzuug5auhUYEwDbC/R5uys
dBNxYZONg8kbA+33XC7IBAsD5DTlAnDf0s/F9dSnzYbdbmACGQpS9tt7iTPyWd2+
GrVO+vi2wUh8RvBThasHoIdr+vvxHEtfY7lSml1k4mhh6/d1Vl8ykKLJqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7IaIboJ8/9zAyk6gcTNF/Qna4mMB8GA1UdIwQY
MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt
ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll
LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMZR+G5R
Kvx7JF+/sRCYzIG8vi7sRs4C03Ut4gfSM47/xREnH//9CX/ExVMzbq0cN8NM6lak
dfbZ/AylvPV7Tw8FBNe3md0b3mwkKUVm2fZ/31cfZnl1NR0dznOKZT8gYL8sirlo
LD70+pCjT0I8P6udbv24u886vTK1gxBB6Dar/clbCvwGc6nltMYsCSuhFY1pUaXh
eONdJLZdcvaN81XpgoNUZ21O3azls+m8soAZa1a75PZJzWsQ2pRM5t0RHCmgFWG9
pbkl0yzhm2nLZdKAiplO3ehdk2XUiyuOYfvd8GgmtjfQjxU31s7U9PqR4DMc8ATu
N0aUWHHznrGkOw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:49:56 2025 by rpki-client