Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: aCPbdcwoiKbq92Tu33icI+VBrTnDeH32BECtAT/ZHxU=
Subject key identifier: 64:31:85:3B:07:8E:E8:65:E3:D3:AB:7B:D7:30:EC:13:3B:65:EF:AB
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 01991763CC4BAE2D81B65F6224B24B5E555B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 01:00:40 +0000
Manifest this update: Fri 05 Sep 2025 01:00:40 +0000
Manifest next update: Sat 06 Sep 2025 01:00:40 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: D3bPx8IpwXX+fi6jjuNRCnJip3gH4hV8Lvmd8sZRZUc=)
2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:cc:4b:ae:2d:81:b6:5f:62:24:b2:4b:5e:55:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Sep 5 01:00:40 2025 GMT
Not After : Sep 6 01:00:40 2025 GMT
Subject: CN=6431853b078ee865e3d3ab7bd730ec133b65efab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:5f:4d:d0:6b:58:e4:21:fa:3c:cc:35:63:
92:ee:2b:5b:ad:aa:75:9d:dd:92:d2:ed:5b:cc:67:
05:5a:cf:76:d9:9f:eb:04:1b:bd:62:33:1b:cd:8a:
13:36:b0:20:ab:1f:5e:91:5a:52:03:3b:1c:27:0c:
de:d3:c8:91:9e:c9:36:8a:7f:d0:46:f4:d2:e9:48:
76:67:98:99:71:9c:ba:59:6a:42:95:0e:58:9e:9f:
e1:34:4b:54:8f:79:12:91:d0:26:e7:b5:f0:71:e1:
be:34:4b:6c:8b:56:4c:1e:f4:1e:24:c0:34:39:8c:
46:51:8f:55:73:ac:13:e9:25:e6:5c:94:ed:85:9d:
7d:6c:b8:91:11:96:9b:75:f9:de:44:25:35:af:ae:
77:31:63:99:84:8c:2e:4a:e1:7e:60:71:be:f0:03:
cb:1a:ac:20:0b:94:aa:1f:9f:6c:36:16:e9:b3:92:
6b:b8:17:3f:25:00:af:1e:95:9c:17:c1:6f:81:c6:
ac:f5:f6:38:a7:97:66:75:7a:f1:60:95:49:7f:98:
76:d5:b1:ef:8e:b3:12:1f:f9:20:6f:b6:b8:ae:0e:
4a:4d:05:80:0a:bb:33:77:96:cf:de:71:b0:0a:78:
9f:da:26:41:8d:17:9f:24:01:ef:87:1b:f6:9b:4d:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:85:3B:07:8E:E8:65:E3:D3:AB:7B:D7:30:EC:13:3B:65:EF:AB
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d4:9e:7f:cb:5d:9c:92:8f:de:b5:a5:27:61:f6:64:7c:7c:
24:fe:99:7f:43:09:c5:3b:a8:2c:b0:b6:ea:44:23:af:77:51:
59:cd:a8:36:06:47:9d:52:f0:09:58:28:f1:21:ac:8c:b8:4b:
38:52:2d:7d:84:54:81:45:6e:13:7f:ed:51:3a:ee:36:48:72:
8c:ee:ae:f8:8b:ad:a7:88:5b:e7:28:5b:5d:ae:64:5c:af:df:
6a:32:db:31:58:f4:6e:79:94:29:63:be:82:28:fb:49:45:47:
35:dd:ea:59:ff:52:64:df:9a:cf:82:b2:3e:f3:39:f2:2f:4a:
c2:14:6a:01:fc:a0:8e:34:9d:29:29:4f:67:8c:73:54:2b:aa:
72:3d:4f:1c:ae:e1:5d:ab:43:e6:6f:fa:ef:fa:c8:ec:f8:ad:
b7:c3:81:d5:38:82:0e:0e:07:80:58:27:43:df:4a:d0:f6:fd:
48:bd:c3:e5:fe:91:1e:74:e2:1f:be:3d:01:b1:14:84:7b:b7:
b9:ba:9d:45:f1:ba:d1:2e:ff:16:75:16:77:c7:72:47:92:e6:
b7:e6:1c:b7:e6:db:49:54:9c:b1:26:77:50:0c:0b:f2:47:dd:
00:88:6d:8c:57:d0:5c:ca:b1:af:be:c4:37:1a:8c:1d:8b:5c:
08:77:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:21 2025 by rpki-client