Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: lAuif28+AVaxuCEWon478d/iFBt+ya3Qjsb88R4eALo=
Subject key identifier: AF:1B:5A:72:C8:D7:DF:FC:77:5C:08:70:62:8D:2D:05:BF:41:CE:7E
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 019897B7EA3E91068B887BAF7772ECB5CC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 15EB
Signing time: Mon 11 Aug 2025 06:01:09 +0000
Manifest this update: Mon 11 Aug 2025 06:01:09 +0000
Manifest next update: Tue 12 Aug 2025 06:01:09 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: IgaKiS4jVtII2KMr/6tZRb3i4uYavPccyuWlu+dlSUo=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:ea:3e:91:06:8b:88:7b:af:77:72:ec:b5:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Aug 11 06:01:09 2025 GMT
Not After : Aug 12 06:01:09 2025 GMT
Subject: CN=af1b5a72c8d7dffc775c0870628d2d05bf41ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:4a:bf:8e:cd:3b:73:b3:c7:87:21:48:24:
f3:a2:7c:13:ee:9a:8e:2c:8c:b4:bb:7f:3c:19:11:
5b:ac:e4:ab:1c:46:aa:56:56:9f:76:e4:44:9f:7f:
08:86:5f:e4:73:31:35:a9:09:f0:94:9c:4e:83:f1:
0a:6b:0d:8f:1f:fc:50:27:d8:7d:e7:b6:cd:3e:94:
96:3e:78:6f:fc:ca:ea:ca:81:b1:9c:5a:69:ec:ed:
07:81:9f:8d:90:50:c7:a4:23:06:6e:a4:2a:28:86:
5b:e6:ec:fc:b2:8a:a2:7f:b7:99:1c:43:fa:32:98:
f7:26:5e:30:a3:4a:1b:f6:5d:ed:1e:86:9d:b7:20:
4d:08:f4:e4:0e:83:51:87:0e:5e:a8:1e:a3:ae:ac:
ee:b6:a0:fe:f8:54:a2:06:f1:77:e9:f2:a1:7e:24:
8c:89:28:5c:e9:26:10:ca:f3:14:c3:e1:d1:a9:3d:
77:fd:df:ff:ab:0b:2a:70:cd:68:85:41:07:07:dc:
f0:b6:c0:31:51:71:9e:ed:85:61:f3:76:29:eb:b3:
5c:86:9e:e2:ae:f8:8b:15:8b:18:36:4e:1c:ee:87:
0f:1b:57:c6:ae:e6:2b:1f:3c:5e:5c:71:da:52:f4:
3b:a4:40:27:c9:9f:75:2b:27:96:f7:15:d5:0f:b3:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:5A:72:C8:D7:DF:FC:77:5C:08:70:62:8D:2D:05:BF:41:CE:7E
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a0:df:f3:68:a4:41:40:08:43:ad:61:ed:2e:38:50:8a:4a:
9f:9f:d7:50:41:85:2b:a1:9a:68:04:e9:05:73:80:b7:d8:58:
3f:a8:8b:05:b0:09:16:9c:43:1e:74:75:75:fa:fc:c4:49:f5:
f6:2c:a4:8c:26:87:79:db:b5:4c:d4:14:a7:13:5d:69:05:fe:
67:4d:c1:11:d5:ad:13:f5:2e:87:fa:76:f6:70:08:57:b1:e4:
9b:c3:8f:24:1a:45:6d:70:e2:c8:d7:34:5f:72:8c:0a:c1:05:
a5:df:14:b5:c4:f4:ab:d1:38:ff:45:5a:9d:4e:3e:08:af:19:
41:65:cc:23:54:e5:e3:a5:cf:92:9a:c9:f6:d1:2f:e7:c5:4b:
f3:8c:06:68:98:f1:44:95:65:7e:c5:00:99:a9:d6:bd:f5:80:
12:b9:5c:ca:3e:45:5b:de:1a:dd:6f:16:bc:3b:bd:a4:68:dd:
5c:3d:9d:a2:fb:66:b9:43:84:f1:1d:9d:14:b5:af:3c:00:0b:
a1:db:99:c2:98:d6:73:d8:3f:d9:44:85:60:6a:cb:c9:b4:36:
e4:fa:34:2a:b4:f1:71:89:e8:13:5a:03:dc:55:0c:15:40:b2:
24:3a:df:c0:7a:7b:bb:31:30:3b:c9:12:01:e8:e6:20:f0:60:
8e:0a:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:38 2025 by rpki-client