Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: ANMCoGbXhdfXw2jqGqmuZtLCJVwybAGSTfVJjvFSlyw=
Subject key identifier: 5D:69:E4:DC:5B:CC:EE:B8:32:F5:DE:DB:F1:85:2B:A1:07:3D:61:B4
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019A5007049762777D1E615BEF8C6A673AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 06A8
Signing time: Tue 04 Nov 2025 18:00:28 +0000
Manifest this update: Tue 04 Nov 2025 18:00:28 +0000
Manifest next update: Wed 05 Nov 2025 18:00:28 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: m/iEVVDB8gCQYqHSH30M7tkIKuWsfGxMFkm500n0i8Y=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:04:97:62:77:7d:1e:61:5b:ef:8c:6a:67:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Nov 4 18:00:28 2025 GMT
Not After : Nov 5 18:00:28 2025 GMT
Subject: CN=5d69e4dc5bcceeb832f5dedbf1852ba1073d61b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:b2:ce:4c:44:18:63:48:3e:91:cc:f8:55:
19:47:9d:ff:27:48:18:06:79:61:18:cf:d0:dc:fd:
84:24:79:64:73:10:65:bc:44:6a:c4:70:37:68:88:
3d:6c:c0:b9:4b:3a:9c:f2:71:98:56:73:ee:d4:22:
b9:c6:23:eb:0d:00:68:47:77:77:cc:c3:87:4f:84:
e6:8b:fe:f6:7b:4a:96:72:e8:d7:34:07:ab:93:33:
0f:24:13:bf:98:c4:52:1e:29:1f:e1:07:27:96:7d:
79:48:c6:f8:0b:84:08:b3:94:91:f4:06:20:a4:c1:
da:ab:bc:d8:71:e5:65:92:d6:2a:30:ba:9f:f4:21:
43:9e:79:bf:91:75:ac:84:ef:de:08:46:d0:61:35:
36:5f:b4:e9:62:a6:41:53:09:b5:ff:da:bf:e0:4d:
23:d3:be:6a:20:20:cb:a3:be:64:c9:c9:8c:0b:e0:
a8:12:2f:d0:e7:0d:1d:d7:4f:77:19:90:46:9d:51:
42:9d:5c:eb:78:7c:91:23:6f:c2:d6:be:64:76:f1:
25:c6:98:ff:52:c3:b4:a8:69:4d:66:19:ba:3a:16:
02:52:af:b7:e3:06:b4:87:c6:8a:57:8a:8c:be:3c:
77:7b:c7:7a:ff:06:08:96:28:dd:68:a4:12:48:3e:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:E4:DC:5B:CC:EE:B8:32:F5:DE:DB:F1:85:2B:A1:07:3D:61:B4
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:23:3c:9c:c8:74:37:7f:2e:04:09:eb:6c:56:ee:08:50:1a:
f2:bc:f9:dd:69:85:2c:8e:0d:9e:3d:b7:c4:9a:f0:0d:f6:d4:
10:5b:3d:7b:b7:4c:82:62:b8:06:1d:b1:d8:74:94:41:14:47:
a5:73:88:e4:01:4e:dc:81:af:04:46:ba:99:b5:d0:a3:cb:3c:
a4:8a:a3:44:13:9b:45:93:2e:47:8a:83:64:0d:25:94:33:c1:
bf:ba:ee:f7:f4:99:98:fa:e8:60:86:a3:23:ab:a2:ba:79:aa:
08:bf:d2:d7:9b:70:84:2a:36:fb:de:df:1d:0b:9a:25:da:52:
39:82:c1:e7:85:05:bb:98:82:de:91:d1:1f:7c:4f:0d:91:21:
d1:f3:e0:d2:7a:81:ee:de:a7:af:8f:41:9e:74:c8:7f:5d:33:
50:1f:ea:4e:23:aa:a2:71:67:fd:eb:c1:a5:ac:cc:5e:6c:56:
0d:fa:82:9f:3d:f4:09:89:c4:e9:3e:7b:ce:57:10:a8:e5:de:
51:f6:32:fb:1b:bf:c3:0d:f0:c6:d9:60:ea:94:e1:2d:47:ec:
b2:37:04:9a:4f:81:f9:bc:84:9b:d5:3d:36:c9:cd:f5:ae:b0:
8f:23:b3:89:c2:09:fc:69:d5:40:e2:98:a8:18:61:ee:ab:1d:
f8:0c:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:05 2025 by rpki-client