Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: jw7ExO8j2yH1CwR+sFGrPAOI28PpYr4lnUXnfzYHdOs=
Subject key identifier: A5:7F:96:1F:25:14:D4:11:CF:EB:64:9F:AB:6D:9C:FE:B7:58:5B:56
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 019A4E18BC876AE28BF8A9EFDBE38894E83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 16CE
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: lhzKqMV/nKPhez/OdqcFS+uwIc6yWClRd4g6ploRJE0=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bc:87:6a:e2:8b:f8:a9:ef:db:e3:88:94:e8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=a57f961f2514d411cfeb649fab6d9cfeb7585b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:ef:48:99:ee:5a:c4:21:23:3f:bd:fc:4d:
dc:59:b8:c9:5d:31:df:73:5a:1d:c2:6b:84:95:06:
b9:5a:af:df:4e:af:39:74:57:b7:77:1b:24:91:9b:
c4:d0:15:fe:5e:47:2f:1a:06:44:27:88:d2:4a:37:
7f:ca:73:86:28:57:d1:fb:7d:88:7d:97:43:7b:7b:
59:bf:1f:d5:e4:07:d7:83:9c:fa:5e:7f:73:57:7f:
e7:28:95:2c:ac:d3:dd:cc:91:a2:b9:bc:c0:b0:56:
6a:62:8f:7b:97:c3:f5:71:4b:07:fa:90:54:7e:ec:
7f:dc:76:28:0b:e7:27:f6:7f:fe:b7:88:92:11:a1:
a7:18:7a:cd:e8:db:20:44:b9:d1:87:74:f4:97:93:
a5:b9:6b:64:f8:f3:ec:e8:e2:88:59:e5:f1:f5:e2:
53:1c:5d:b6:f5:78:fa:71:19:85:c2:5f:dc:ca:a9:
c0:5c:4d:0d:b7:04:7a:82:22:22:b7:41:17:08:9b:
0d:b4:54:83:11:b9:17:a3:8f:1b:98:cc:e9:5a:7d:
1e:18:0a:ae:65:b1:c0:fb:0c:29:78:80:93:d1:f2:
c1:4e:51:f3:0d:1c:cf:3f:3b:87:55:a6:10:d2:18:
a6:57:77:e2:ff:a6:45:5d:90:3d:f1:11:f0:55:68:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:96:1F:25:14:D4:11:CF:EB:64:9F:AB:6D:9C:FE:B7:58:5B:56
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:f2:e7:7c:f8:97:2e:d2:aa:54:b1:44:0e:35:0a:7b:b2:
c1:00:7b:31:45:96:00:7b:f0:5e:1c:ae:3d:ce:e0:e3:67:73:
26:a4:ba:d6:13:e3:ea:e5:23:9f:38:1f:cd:8c:88:bf:7a:a1:
3a:30:6c:66:91:1e:09:c6:cd:9d:5d:68:3b:e2:16:b1:bb:7c:
1a:60:bb:58:3d:f8:2b:35:e1:b7:f7:e6:16:67:3d:3b:0d:cf:
2b:4b:55:74:8e:b3:41:b0:3c:30:c4:f3:83:18:91:d9:60:4e:
93:e5:c8:e1:65:fe:0d:c6:df:9a:42:c6:e0:d0:96:ea:ab:29:
06:7f:95:96:a4:cd:d5:87:ec:98:ac:8e:f0:fe:a0:8d:91:7d:
3a:71:65:54:0c:da:ce:08:11:9a:cc:c3:8f:80:41:8f:c7:f0:
da:e1:3b:52:24:ad:90:aa:60:ff:36:66:c0:90:c1:d0:57:6e:
6a:1f:21:ec:47:07:49:22:c3:bc:d3:43:d0:9a:4b:bb:c3:2b:
34:c6:fc:a8:f4:b4:f4:d1:70:04:9b:8c:99:53:61:36:1a:69:
9d:75:c5:79:96:42:29:12:44:7a:8c:85:eb:ba:66:87:73:34:
c9:74:6a:fc:2b:41:21:9b:ec:00:53:3f:a0:19:6a:90:10:2c:
cf:85:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:39 2025 by rpki-client