Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: oSLTHGrwAa6PlrMKszOfR36EMARZxYuKI/Qx+MAK4Oo=
Subject key identifier: 34:36:6D:CA:EF:51:F9:82:77:43:E2:E0:19:B4:9D:37:6B:86:ED:72
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 01974D7C24A91160AA65A5D9DC454D08190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0D9E
Signing time: Sun 08 Jun 2025 03:01:10 +0000
Manifest this update: Sun 08 Jun 2025 03:01:10 +0000
Manifest next update: Mon 09 Jun 2025 03:01:10 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: 3Zr5a8cbbOKDeWMgAtvYPhrMy+zIOOFjp7vzBYPf1R4=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:24:a9:11:60:aa:65:a5:d9:dc:45:4d:08:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jun 8 03:01:10 2025 GMT
Not After : Jun 9 03:01:10 2025 GMT
Subject: CN=34366dcaef51f9827743e2e019b49d376b86ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:2d:e6:fa:38:00:5c:12:3c:f2:f4:06:4e:
53:77:a7:93:e5:48:3f:66:2b:98:e7:55:ac:48:9c:
3c:e4:b2:75:e1:ab:32:74:7a:ae:fd:19:4d:a1:f9:
e9:a0:0e:4d:8c:98:a2:98:e9:d6:36:da:91:e5:6f:
c6:78:c2:42:f6:79:8b:a1:6a:7a:65:fe:18:22:76:
d9:bf:4c:21:15:ce:b2:c3:2c:78:23:7c:fc:45:e6:
b7:f2:e2:72:29:7f:6f:5d:e0:4b:a4:80:3c:79:17:
95:32:0d:2b:76:fa:7f:f7:d3:4e:7d:88:d2:ee:6d:
c2:54:fa:f3:07:2c:b4:b7:1a:4c:2d:c9:75:a0:cc:
ee:6d:8b:ee:79:5d:70:af:b8:d3:d7:54:73:fd:f7:
c5:05:5f:48:15:52:ce:86:b4:67:89:54:80:af:ca:
16:4b:00:09:92:a8:0a:b8:24:0f:25:ee:e2:ac:53:
7f:32:5d:ba:f3:12:d0:fd:bf:85:95:ee:82:0b:67:
6f:ce:2d:e3:03:fd:86:bd:e0:ee:fb:20:34:4b:c6:
16:a2:77:5d:fc:fd:d7:f5:9e:3f:4d:df:ea:f4:04:
fe:94:99:68:31:41:b9:1e:03:90:a3:80:3a:84:1d:
47:30:7a:b3:da:a3:83:fa:84:b9:55:eb:80:36:c8:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:6D:CA:EF:51:F9:82:77:43:E2:E0:19:B4:9D:37:6B:86:ED:72
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f9:92:60:39:05:0b:40:37:0e:cc:94:b1:a9:c0:73:fb:5c:
e0:b6:8d:3f:7b:fc:b0:80:26:6f:c3:16:a0:ad:0b:ab:2d:58:
34:c4:8b:8b:be:ee:91:67:5f:d0:c1:7d:98:3a:4f:41:72:3c:
a7:65:e3:8e:de:4f:0e:7a:30:4d:1c:4f:05:3f:a1:e0:a1:96:
05:1b:73:2e:51:54:b5:79:b9:80:5f:75:c0:8e:e6:6a:6a:b4:
de:10:9c:08:d5:91:ec:15:f5:8e:f5:e2:8a:7a:90:30:ea:28:
42:72:24:3f:6e:40:52:e9:cc:99:68:5a:ac:39:31:27:ab:85:
28:b1:6e:d7:f9:3d:14:50:ff:54:a2:93:f2:23:c8:91:73:f8:
35:02:9d:79:38:48:db:f4:4a:03:6e:82:d8:bb:46:13:ee:ce:
be:04:e0:86:2d:1e:87:9c:9e:68:7f:25:32:7e:72:c0:1a:cf:
b1:2f:90:a0:91:60:f2:e9:c9:6c:87:e4:95:88:61:43:7f:5d:
e6:ab:92:b1:e1:cb:37:4f:0e:b2:3f:e5:a2:1f:72:28:16:8a:
42:f1:3a:43:b8:8e:ec:59:6d:25:6e:7f:55:07:de:4b:af:7a:
f3:c9:0d:25:80:fb:99:9f:4e:9b:0d:65:0a:11:1b:26:c7:52:
fc:32:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:51 2025 by rpki-client