Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: wMtm9V8HT1Rg92TCQ3cnqHXNbC8J7uv9N/VlNXlpyH4=
Subject key identifier: CC:4B:08:72:67:DE:30:8E:DD:9A:19:0D:B4:AA:A2:43:7A:01:C1:D2
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 01993612D185044477FD34B4C633B97A3982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0E9B
Signing time: Thu 11 Sep 2025 00:00:26 +0000
Manifest this update: Thu 11 Sep 2025 00:00:26 +0000
Manifest next update: Fri 12 Sep 2025 00:00:26 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: tT1ujKs8skACBWQqbUvI5B0Jnj/aOGHMpsiBIrs1zeQ=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:d1:85:04:44:77:fd:34:b4:c6:33:b9:7a:39:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Sep 11 00:00:26 2025 GMT
Not After : Sep 12 00:00:26 2025 GMT
Subject: CN=cc4b087267de308edd9a190db4aaa2437a01c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:62:16:09:d1:bb:7a:5a:1e:bd:72:47:24:
19:da:79:e7:78:54:cb:f8:b5:dc:36:0d:b0:c2:5d:
f5:b8:05:8f:13:7c:33:38:34:3e:77:5c:09:a2:78:
63:d5:80:c1:f5:90:7e:a0:d1:f4:1e:ac:c0:b7:80:
6b:6e:e5:ba:f6:4d:ad:40:63:62:41:2a:3a:88:ec:
66:0b:d6:af:c3:62:68:90:3f:19:f9:98:cc:20:5f:
e0:51:9d:62:50:fd:16:56:5e:d9:82:36:cb:57:16:
8a:b7:e6:de:9b:2a:a7:2c:ac:77:16:8e:3b:06:c7:
5f:e1:47:59:a5:af:e9:53:aa:50:ab:39:7e:0a:16:
47:fa:95:05:fe:88:33:bb:ac:65:31:8d:72:64:3d:
b5:9c:f3:b6:b7:9e:db:af:4d:aa:d2:db:31:6d:22:
b6:ab:db:d4:87:14:f0:f6:c3:5a:de:f6:d5:97:14:
56:b6:6d:a4:ba:49:7f:31:7d:6a:e0:92:61:14:38:
38:39:f9:b2:5f:13:7a:49:77:87:c2:e2:d4:84:dd:
b5:70:d9:32:55:22:78:50:30:78:d4:19:c7:35:06:
26:e1:3c:95:96:1f:55:82:79:22:cb:cf:6e:b3:47:
b4:49:6a:80:6f:2a:f4:e9:7e:c1:bf:91:5c:f0:6d:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:08:72:67:DE:30:8E:DD:9A:19:0D:B4:AA:A2:43:7A:01:C1:D2
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3a:7c:0f:3c:72:d5:86:61:5c:ab:a3:11:20:b9:24:87:d8:
42:62:41:79:63:8a:70:5f:8e:94:cc:bf:91:6e:ee:7a:ad:f1:
2c:e5:67:52:03:b0:61:e8:a4:d8:4a:b5:f8:13:89:c2:f5:44:
95:fd:0e:1f:b4:6c:b1:1b:96:6f:b2:2a:80:49:0d:71:c1:54:
81:8b:d4:96:1d:4c:40:3b:1c:da:d4:47:65:4b:c5:8b:fb:1d:
bc:39:84:86:b2:4b:1d:cf:98:87:6b:35:ab:f4:72:fa:a5:10:
86:56:33:de:18:b8:ea:88:63:6c:c6:35:bd:ff:8d:8a:28:a6:
2a:47:74:30:e2:dc:4a:bd:28:78:f5:71:8d:f5:fe:5c:80:05:
e5:e9:3f:0f:a2:73:21:6e:73:41:19:24:7d:2f:df:f0:12:83:
78:14:47:2d:ac:bc:35:36:ee:d2:28:30:35:23:24:0b:74:26:
35:ac:a8:d2:53:95:3e:69:a7:e9:c1:19:c8:24:8b:39:31:1b:
29:1f:8e:18:99:8f:8b:62:e4:08:d6:1f:e8:2d:fe:ff:91:9e:
e8:03:7c:2b:98:24:19:3f:fa:b6:a3:87:05:28:99:34:d6:aa:
24:35:1a:29:ae:1b:97:e4:50:38:3d:4c:9a:02:9e:23:ab:d9:
4b:05:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:13:06 2025 by rpki-client