Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: BrNN6gg8Ggc1TCdR4vpeN318EU6/6zYRO+U9VSUrDNs=
Subject key identifier: 36:3F:9C:53:0C:4D:F5:2E:56:C9:4B:AD:D8:C2:66:D0:51:D2:88:C7
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019872CF479222C484DA5AAA8FA195036DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:00:43 +0000
Manifest this update: Mon 04 Aug 2025 02:00:43 +0000
Manifest next update: Tue 05 Aug 2025 02:00:43 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: cZF27v9jz9oSCVPEsDo8E1mbxNL4QOfhIArPeet/x74=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:47:92:22:c4:84:da:5a:aa:8f:a1:95:03:6d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Aug 4 02:00:43 2025 GMT
Not After : Aug 5 02:00:43 2025 GMT
Subject: CN=363f9c530c4df52e56c94badd8c266d051d288c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:e0:26:88:d7:69:68:26:ac:04:3b:e7:01:
8b:d0:16:10:a6:c2:02:82:38:c8:0c:90:ec:e2:ba:
4e:b1:e9:68:f8:d4:b9:07:00:20:4d:9f:2f:27:2f:
fb:f1:6e:3c:22:6f:54:e9:83:da:f1:6d:43:30:16:
1e:3a:36:68:94:c5:60:09:06:52:9c:7c:0c:d5:10:
a1:e3:71:60:d8:35:9c:0d:63:ee:b9:2d:ae:6e:60:
d8:31:81:e5:3a:d6:7e:d3:0c:62:9f:83:87:74:14:
bb:56:64:c9:d2:5d:28:85:dd:b7:4c:66:91:04:8d:
d8:59:2b:ce:57:f3:a4:42:b3:94:4d:b1:19:08:bb:
92:92:f9:f0:0b:e7:e1:11:69:3f:28:4f:50:4f:a0:
f5:78:dc:96:e0:15:ae:91:d0:cf:c2:82:bc:fb:3d:
e8:65:e8:82:18:5d:c4:b5:1b:3d:ce:d2:ea:94:57:
d3:cc:e9:88:f1:2e:07:b0:3f:ef:81:87:1b:2b:96:
3c:87:b8:2a:01:23:13:70:a8:e1:ff:8d:08:fd:6d:
ca:4e:dc:3c:e1:30:1f:e4:6a:f8:08:a9:f9:8f:4d:
92:de:84:20:b2:7e:11:69:4d:84:a5:4f:6e:35:11:
0c:2c:43:65:59:a0:d6:e6:48:b3:1e:15:9f:59:0b:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3F:9C:53:0C:4D:F5:2E:56:C9:4B:AD:D8:C2:66:D0:51:D2:88:C7
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:89:9d:cf:38:a9:9f:9d:2f:88:e4:9e:38:70:ea:70:6a:77:
fe:ca:da:9d:7b:52:8b:1c:f9:7f:0d:7d:c1:52:a0:60:b4:d1:
59:83:b6:10:39:93:8b:d8:cb:eb:a7:30:ae:2e:d0:2c:a5:4d:
d2:2c:e7:28:04:76:3a:ef:74:3a:2c:78:b2:25:8d:ed:cc:f4:
4f:cb:44:4f:60:69:e0:e5:9b:e3:d4:06:2f:ff:4e:b1:12:26:
9f:4a:72:3a:58:ef:7c:a3:ab:4c:79:10:4a:4b:e8:68:4b:5f:
43:51:4e:2b:df:b5:e2:2d:a1:8f:d0:c6:69:8c:1d:82:3b:41:
b5:68:99:40:a0:cc:88:4f:84:d7:87:2c:47:7c:24:33:5e:c2:
16:46:c8:bd:6b:80:4b:ba:af:87:d6:f7:25:c1:ae:6a:78:c7:
83:88:11:f3:0f:ae:7a:63:b3:0c:56:76:40:e6:5b:ca:51:6d:
88:02:d5:6d:02:f0:af:e3:a4:82:df:fd:23:c7:d1:4a:1d:0a:
e1:2f:2f:31:da:a9:81:5c:30:b9:fc:e3:f1:30:10:04:96:6b:
bb:6d:d1:15:c7:35:02:46:ca:55:c7:68:ff:b4:70:88:8e:e5:
fc:e1:c9:dc:22:81:00:e4:47:35:99:6b:29:4d:13:94:24:6d:
25:27:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:16 2025 by rpki-client