Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: tN3xTBfVucruVbGmopZFL3tHcPVJrLxdOMl7Vld3V9w=
Subject key identifier: 15:12:F6:B2:20:DF:40:AB:56:37:87:25:29:2B:74:36:89:0A:B5:7B
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 0197496845A16B121A306D378AAEA3FA2632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 0F12
Signing time: Sat 07 Jun 2025 08:00:59 +0000
Manifest this update: Sat 07 Jun 2025 08:00:59 +0000
Manifest next update: Sun 08 Jun 2025 08:00:59 +0000
Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: 91CuShEoONyu1Js3+cC5DKdeIkqhrm9hPKuqvTFH0Qs=)
3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:45:a1:6b:12:1a:30:6d:37:8a:ae:a3:fa:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jun 7 08:00:59 2025 GMT
Not After : Jun 8 08:00:59 2025 GMT
Subject: CN=1512f6b220df40ab56378725292b7436890ab57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:af:cb:36:e5:01:a7:20:e2:7a:f5:13:8a:
73:7c:94:47:cc:66:d2:bc:e1:77:d6:ce:ff:58:d5:
3d:7d:22:9c:f4:aa:d2:23:ea:e4:93:f0:58:fa:d0:
ab:14:84:b7:e4:a6:9a:9f:7b:4a:5a:94:46:6f:06:
01:f1:24:95:5a:f2:4e:a6:48:5b:6e:49:fe:6d:c8:
66:74:a6:45:6f:3a:c9:14:48:3e:fa:c9:c5:d1:32:
46:6c:1e:37:57:20:8c:8f:f2:ee:29:da:4e:62:be:
ec:bc:10:bd:3c:58:c5:1a:3e:11:7d:17:02:0b:25:
de:0e:ac:aa:4a:66:45:ef:d7:a8:af:9e:f3:bb:d9:
2d:e9:06:81:09:83:90:84:2c:a0:f7:1f:9b:14:88:
78:09:4a:9d:13:08:fa:67:59:9f:3b:68:2e:f5:9b:
8b:a7:9b:51:31:94:6f:fc:4b:15:c9:a8:bb:08:55:
3d:57:60:7b:a5:69:22:02:c6:6b:42:17:e0:46:5f:
dc:5d:c4:5f:4b:61:78:86:fd:84:27:26:94:d9:50:
b0:0a:7e:68:6b:f4:82:6f:4d:81:d2:3c:89:dc:eb:
a3:33:2d:a4:24:92:46:83:bc:63:56:5a:d3:8b:92:
68:8b:57:7b:14:3a:96:0b:8a:1b:b1:93:37:7a:c1:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:F6:B2:20:DF:40:AB:56:37:87:25:29:2B:74:36:89:0A:B5:7B
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:42:30:a7:35:e2:99:38:9b:75:d6:b5:63:88:1e:8a:64:fc:
81:e7:82:98:3b:72:63:a2:f4:5a:a9:c1:8a:f0:23:94:3f:06:
c7:0c:c2:c2:9c:25:9f:2b:40:6e:bb:b3:c6:68:dc:45:8f:12:
18:50:e9:c1:dd:09:27:00:c5:97:cd:f5:f3:ea:fa:5c:58:d9:
26:64:18:b8:b1:83:6e:90:e1:41:32:b1:00:9f:c7:22:1c:02:
17:cb:11:2d:a4:d2:88:76:af:d6:85:a1:f9:97:f1:e7:90:80:
f6:74:03:6e:46:1b:dd:87:92:53:17:57:c1:b0:07:fc:73:a7:
00:18:e1:d6:8f:69:7b:80:0a:7e:26:24:83:5a:47:5b:c1:34:
ea:21:1f:20:d5:bc:96:86:b1:eb:0f:ae:59:34:36:82:14:68:
6b:b7:49:f9:e7:99:28:43:bf:87:18:75:ac:b4:b2:89:2f:eb:
bf:f2:0f:dc:ae:ef:01:b6:72:28:99:da:2d:6e:45:99:d9:ce:
18:50:68:bc:a8:42:dc:12:fb:21:67:0f:f2:5e:7b:53:c2:57:
c7:62:84:9f:4b:aa:05:18:2f:7b:80:89:3c:56:39:e7:e6:bf:
cf:db:0a:b2:3b:56:31:06:12:48:a4:ed:bf:ab:a6:25:db:7c:
5c:81:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:20:57 2025 by rpki-client