Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: lHHiIAmFmw10rg5Taz8n6o6qj9Yu99AC44njp8hppW0=
Subject key identifier: 0A:84:4F:E0:84:A6:B5:A7:38:EB:98:6D:2B:7D:E9:B1:FC:68:D0:DA
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 01988A69F97590FD10F618ADFFBFFB1FAE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 122E
Signing time: Fri 08 Aug 2025 16:00:57 +0000
Manifest this update: Fri 08 Aug 2025 16:00:57 +0000
Manifest next update: Sat 09 Aug 2025 16:00:57 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: PklMhdVMGWn8jSxhnM468PnStgXGn0OQx2XQrBgJQBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:f9:75:90:fd:10:f6:18:ad:ff:bf:fb:1f:ae:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Aug 8 16:00:57 2025 GMT
Not After : Aug 9 16:00:57 2025 GMT
Subject: CN=0a844fe084a6b5a738eb986d2b7de9b1fc68d0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:c4:e0:87:76:a6:88:fd:b8:89:a4:5f:a8:
3f:90:dd:be:ab:71:37:b4:1e:0f:42:fe:80:43:f8:
59:bd:72:ad:b6:45:9a:bc:3f:01:bc:9e:d6:27:79:
59:c9:83:71:d3:08:e5:72:32:f3:cc:d5:ec:2d:87:
e1:b7:0e:4a:03:66:35:9e:f4:0b:3e:16:db:c8:1f:
6d:49:ad:fb:c8:48:7a:e3:92:88:ee:2a:5d:5e:35:
dc:c6:6e:ec:03:e6:67:2e:1f:e3:03:b3:eb:de:87:
b5:b5:93:c8:c5:90:90:bc:1f:f5:5b:f6:72:a1:41:
bd:67:90:db:7e:63:97:09:8c:51:67:ac:55:b1:bf:
25:8e:a4:b8:bb:22:94:5c:95:5e:67:d0:b3:64:ac:
48:fe:66:38:f7:b5:48:03:92:01:79:de:b7:84:9d:
61:67:c0:61:8b:56:a3:7d:a5:10:3a:63:f6:2e:d0:
bc:54:3f:f6:09:0b:38:46:e1:f5:c5:67:c8:8e:2b:
1a:21:56:58:bf:d5:86:05:24:6f:bf:de:f2:b6:fe:
40:e6:0f:d3:c5:64:48:98:a5:b4:14:d8:86:f6:c1:
6f:24:34:5a:8c:8c:29:fe:7d:46:60:10:46:47:7c:
dc:9f:e7:6c:2f:67:0d:53:33:c6:81:48:da:dd:7c:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:4F:E0:84:A6:B5:A7:38:EB:98:6D:2B:7D:E9:B1:FC:68:D0:DA
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:87:41:d2:c7:0e:63:34:be:0e:0b:b0:5c:2c:98:f5:56:23:
86:5f:44:88:2e:d9:e8:f7:58:df:56:91:ca:b1:fb:65:bd:8f:
73:4d:9c:bf:39:cc:60:95:f0:81:8e:dd:f1:cb:00:8e:c1:6b:
f9:36:c5:bd:2a:9e:d2:ee:99:4a:62:7f:ae:b4:d7:e4:2c:0c:
29:f7:2c:fa:4f:dd:84:eb:fc:a5:75:0b:38:38:18:19:73:2d:
83:9c:1a:88:a2:12:0c:01:0d:f6:79:58:cd:b0:22:8e:fc:c4:
b0:2e:c9:5b:7a:5f:60:20:e9:40:63:ad:b6:9f:a5:83:d0:7a:
50:35:00:df:5b:9b:40:af:a9:0c:4b:ee:b1:56:b5:1c:08:d3:
45:96:fc:4b:09:57:04:35:c4:ca:a8:fa:1d:26:17:2c:f1:e7:
fe:48:b9:44:a5:f7:24:28:cc:b4:2a:9e:8c:e9:8c:a8:34:72:
c8:f1:36:5b:a5:73:87:50:8e:8e:23:3e:2a:d2:58:c2:c8:37:
84:bd:42:4e:63:b1:b2:06:48:c0:0c:67:02:b2:8f:9e:44:54:
3d:35:4a:6c:93:6b:25:54:2f:5c:2a:a9:ce:86:1a:0a:05:2f:
85:9a:d0:13:e9:01:2c:29:62:09:1c:05:a6:0e:d1:15:3b:68:
10:29:7f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:50 2025 by rpki-client