Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: BPKkxcoxwWbyXUEwZBkpg7A6iXzsZjNXviv0OPN/IGo=
Subject key identifier: E6:CC:3B:E3:EE:3C:55:ED:19:0E:A9:64:A7:AE:96:F8:EC:86:DB:00
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 01987E6643CE33603D25707182A89E79878B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 08:01:27 +0000
Manifest this update: Wed 06 Aug 2025 08:01:27 +0000
Manifest next update: Thu 07 Aug 2025 08:01:27 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: YsH0/bKAjgUYzSBAdZ9xJdbdhy8pSV7u2lnDIO57ek0=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:43:ce:33:60:3d:25:70:71:82:a8:9e:79:87:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Aug 6 08:01:27 2025 GMT
Not After : Aug 7 08:01:27 2025 GMT
Subject: CN=e6cc3be3ee3c55ed190ea964a7ae96f8ec86db00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:41:55:72:cf:e5:cb:16:bb:65:e3:64:67:
50:e4:54:91:db:0f:12:f7:68:de:18:7e:8c:69:64:
25:3c:2f:2b:19:6a:72:89:03:4f:59:cf:44:1a:a1:
39:87:39:ff:cb:e9:92:c2:d1:d7:6f:de:99:ba:ce:
a1:f7:86:43:f1:f2:2a:88:d7:25:55:4a:e1:54:1a:
33:65:96:2d:8a:b0:c6:96:2c:99:20:60:45:95:c3:
0e:b5:94:47:03:7d:dc:1b:29:f3:a8:92:ba:42:ef:
09:2c:95:0b:b6:1c:e0:db:41:75:ad:06:47:da:c3:
7f:fd:fd:53:c3:6f:97:ed:f0:e5:98:ee:a8:a8:15:
42:d8:44:0f:09:39:71:3b:c1:9c:db:04:3b:87:b0:
42:8a:35:45:6d:d6:64:59:4a:c2:d3:e2:48:49:68:
b2:8f:e9:7c:68:62:2d:1c:cd:53:37:55:6c:e9:e5:
e3:0e:fe:bf:e4:49:bc:ce:8f:bb:07:a4:f7:21:58:
78:2a:fc:9a:26:df:10:4f:f8:71:56:29:66:2e:68:
e5:63:59:6c:8d:62:7d:b6:d6:7a:69:52:7d:8e:a4:
77:a1:93:4e:a2:c6:57:ac:3d:3c:69:af:9a:25:91:
85:52:6f:f1:f2:4b:28:a7:61:95:99:68:d4:a2:8a:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:3B:E3:EE:3C:55:ED:19:0E:A9:64:A7:AE:96:F8:EC:86:DB:00
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:17:5d:7f:ea:c8:73:bb:b7:9e:15:f6:9d:cc:76:27:8e:
84:46:e3:43:59:57:23:76:f5:c8:0e:2f:4a:8b:6b:ee:4d:f7:
55:2a:c1:2a:eb:cd:96:0f:b2:e4:72:b8:1a:23:bd:12:82:ee:
00:22:43:0a:db:c1:9c:c6:ae:8d:7a:e6:bb:c9:e3:7c:38:51:
d8:f2:69:e9:ce:9e:d7:35:7f:dc:76:3f:9d:99:bc:ce:17:3e:
1f:95:04:8b:50:c7:3c:b6:29:cc:95:50:3d:ce:6d:06:7c:ea:
bc:f3:00:42:a1:ba:eb:57:9f:61:cf:45:c1:e4:6b:91:7e:af:
6d:d6:a2:68:57:8e:02:56:01:e2:0e:fa:3d:3b:d9:1f:73:6a:
a8:3d:79:5d:4c:c6:86:5c:32:90:9d:51:86:19:a2:fa:40:da:
06:45:82:52:ed:a1:81:64:b0:a3:e5:a6:ed:71:7c:b9:70:da:
d9:b2:b7:78:71:c7:08:a3:60:3d:db:86:84:7e:00:87:f9:34:
da:85:b6:c9:5a:24:1b:79:50:32:86:53:a8:38:73:e5:75:95:
c3:a7:92:9e:53:8d:c8:cc:70:62:57:0b:71:7f:8b:0d:1c:e2:
55:57:ab:01:49:74:ec:ac:22:8a:1b:12:bd:8d:3b:15:1c:e5:
e5:fe:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:02 2025 by rpki-client