Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: aevU6YyVa1JVSwsJKfHvzYMA3tXB6PiAkgmvjeVMCq0=
Subject key identifier: 0D:50:A6:A3:1A:A7:5E:A0:81:F2:2E:14:4A:D7:1D:E9:8F:7A:70:3D
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 01976C6249E75F3ACA6A0C51B82A5B80DD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 0529
Signing time: Sat 14 Jun 2025 03:01:10 +0000
Manifest this update: Sat 14 Jun 2025 03:01:10 +0000
Manifest next update: Sun 15 Jun 2025 03:01:10 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: ezWK8toM6tgkeBFNsihbStpY4YtQfZzJ6DPi+bLESso=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:49:e7:5f:3a:ca:6a:0c:51:b8:2a:5b:80:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jun 14 03:01:10 2025 GMT
Not After : Jun 15 03:01:10 2025 GMT
Subject: CN=0d50a6a31aa75ea081f22e144ad71de98f7a703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:a1:c8:70:8f:f2:8d:ed:ff:95:78:87:f9:
73:dd:42:6c:0e:c1:96:32:86:9d:1c:3a:27:c0:b4:
db:17:6d:bb:91:63:06:46:ab:f6:6f:ab:7d:92:63:
e6:f9:52:92:29:34:07:bb:99:79:fb:3f:a5:d2:ab:
23:eb:5b:4f:5c:01:7c:b9:a6:a1:f3:d2:32:b4:c6:
92:23:6c:d8:95:7c:b0:96:16:fe:c6:71:f7:e8:63:
4d:06:a3:d1:c6:20:b1:98:ca:fc:48:bc:1b:fc:0d:
73:17:fa:01:cb:33:82:20:12:60:8f:c1:c2:bd:38:
8c:49:f5:27:c8:a8:dd:93:fc:4d:88:00:79:89:2c:
46:2e:e5:e3:c4:4a:01:38:a2:c9:5d:e3:4e:6f:9c:
fc:1a:33:29:23:de:1b:21:46:ea:06:3b:8e:8b:9d:
a5:43:49:71:c2:75:87:bd:13:82:2c:dd:17:15:d8:
52:fb:b6:f7:3a:bb:7a:bb:f6:86:71:a1:b9:6c:5b:
29:82:f2:b0:75:82:04:76:79:f3:57:c6:f1:7c:15:
79:3d:9e:a4:e8:9d:67:71:70:44:35:04:54:bc:3b:
ea:80:64:df:f4:37:d3:2c:2d:cd:b6:28:33:eb:79:
0f:57:2c:99:b1:d5:a5:5f:9a:4a:5f:26:2a:97:48:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:A6:A3:1A:A7:5E:A0:81:F2:2E:14:4A:D7:1D:E9:8F:7A:70:3D
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c8:68:ef:f5:a4:d9:5c:ce:c0:ed:e4:ee:c0:1d:c0:e7:ef:
25:48:1e:bf:f3:63:6e:e1:de:c2:24:51:db:87:32:fd:4b:81:
eb:f4:b2:a7:1a:9a:ac:85:1b:32:53:32:5f:ec:17:19:dc:eb:
62:a4:5c:46:97:01:cf:59:f6:61:47:0a:71:e3:ef:cf:3f:6d:
a8:7b:4c:47:e6:27:d1:29:6f:a9:94:54:b9:9c:45:3d:09:d4:
09:0f:bd:d1:5f:e9:b5:4c:ee:cf:35:76:04:f5:cd:6d:a2:3e:
0c:2e:ce:14:35:d8:00:c7:18:78:1b:00:c0:d0:de:54:35:49:
9f:58:91:b0:a7:5e:27:94:ca:b5:b3:ec:0b:6f:6d:56:d7:18:
e0:f8:ee:88:71:39:46:2d:1a:47:45:89:b8:91:18:a1:94:06:
d3:25:42:22:f8:28:aa:55:cd:14:20:9d:40:e9:81:6a:1e:2e:
26:40:cc:5f:85:0b:e2:82:f0:8a:26:9d:e6:6e:b4:30:8c:97:
73:72:0b:97:e1:dd:9e:5f:1d:f0:86:50:40:54:4d:8b:cd:84:
f7:20:09:f0:76:a7:ec:d4:f2:41:70:81:3d:1f:f2:0a:1f:2d:
ee:95:27:24:11:1c:c5:5d:7a:f8:29:aa:c5:80:ea:08:16:e1:
6b:1e:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:34 2025 by rpki-client