Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: jZeFk7dgQtYzLOzFn5S83Mw39TSm3k+0tV4LnpM4FCI=
Subject key identifier: AB:D1:99:80:DE:76:0F:7E:53:27:CC:AD:6E:72:9E:53:A1:3A:18:C2
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 01992330D97C3A9E8D9ED220F460B064026B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 1341
Signing time: Sun 07 Sep 2025 08:00:27 +0000
Manifest this update: Sun 07 Sep 2025 08:00:27 +0000
Manifest next update: Mon 08 Sep 2025 08:00:27 +0000
Files and hashes: 1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: AjfJwDCwY3+wiss/nITo/3x/qqm+4XOooh1QQBmyi2Q=)
2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d9:7c:3a:9e:8d:9e:d2:20:f4:60:b0:64:02:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Sep 7 08:00:27 2025 GMT
Not After : Sep 8 08:00:27 2025 GMT
Subject: CN=abd19980de760f7e5327ccad6e729e53a13a18c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:f3:e4:73:ab:2c:47:0f:c1:2f:ac:0d:a6:
8c:13:fa:d9:07:b5:28:18:5b:38:93:60:96:20:57:
a9:93:02:72:0a:77:90:0e:d7:71:5f:c4:f6:c9:aa:
de:2a:c2:7c:2a:c3:5f:9b:d6:17:2f:ab:c1:df:22:
94:a0:ee:44:4c:45:1e:3e:65:ff:7c:b4:8f:0e:b1:
bb:0b:b3:bb:f5:0b:ad:89:f8:49:c2:54:2e:5d:94:
52:fe:ab:30:70:34:2c:48:98:ea:09:d5:cd:d5:b6:
48:c1:7e:24:f7:3c:93:76:8b:e0:51:22:85:a6:70:
5b:4d:e7:9a:b2:a8:cb:9e:39:6c:1a:10:d0:42:2b:
e8:9e:53:1b:a0:67:dc:db:45:2e:84:1e:75:1f:88:
b9:69:53:4b:2c:a8:4c:63:57:0b:a0:28:d0:95:99:
b8:d7:62:f3:61:9f:31:cc:f4:ec:30:97:db:b3:f0:
34:6e:8c:9f:91:55:a7:5b:71:5a:10:67:84:9d:df:
98:47:b8:63:da:cf:08:50:26:81:98:c0:71:0c:b6:
7b:1c:e4:6d:67:4f:f7:9d:23:da:ba:7d:ae:04:67:
22:52:96:af:57:c5:21:a4:a0:60:fc:b0:7e:c5:97:
37:4e:69:c9:ca:a2:1d:27:e9:75:61:76:5a:a4:ba:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:99:80:DE:76:0F:7E:53:27:CC:AD:6E:72:9E:53:A1:3A:18:C2
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:33:d8:9b:31:4c:48:dc:7c:9a:2a:77:c8:da:bd:15:18:91:
fb:f7:61:fb:79:60:e9:67:3e:c9:46:33:2b:19:45:8e:e0:64:
20:76:91:be:01:92:11:c5:0a:f3:0e:92:ad:b0:12:a9:f3:12:
3b:ab:cb:34:69:d5:ff:e4:b0:50:dc:52:0c:2b:bd:06:e6:ed:
bb:b9:49:96:b2:7d:dd:da:eb:4f:2e:a7:bd:12:d8:f1:34:b2:
62:35:49:de:c0:6e:a0:31:f6:43:0d:b5:5f:29:f4:9d:bc:d9:
cf:66:ea:b7:11:9c:47:92:05:b3:f1:70:15:39:02:60:66:0e:
ea:89:e1:bd:22:25:be:e7:39:95:e1:f8:41:88:4f:a3:a8:c5:
52:ab:52:e9:68:51:3a:39:b9:24:8b:97:1a:a6:80:76:d8:31:
0f:f3:94:7c:87:a1:de:06:c2:ba:09:52:c6:47:ba:ed:c9:1d:
c0:b8:cc:c6:d7:63:4f:1a:d1:1b:6a:52:1f:de:cd:65:00:12:
5d:9e:ac:76:91:63:84:44:67:14:ef:37:fe:ed:fc:4f:0f:26:
84:09:df:da:bf:f9:90:d3:30:80:6a:ec:1d:a2:9a:ca:f6:ee:
d3:c9:7b:47:5d:34:11:30:56:70:e3:f5:08:67:f5:03:ee:66:
47:83:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:38 2025 by rpki-client