Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: 3NbMAKlDwN3E5/p8uPkQHNQlEdMOjKZfCIDF6+fmNQI=
Subject key identifier: 11:81:BC:BE:10:73:EE:F7:1A:3E:D4:59:52:9B:95:D6:4F:9D:6C:E8
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 019770077CFB5FEAA9464FFF9A0F6FE9383A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:00:28 +0000
Manifest this update: Sat 14 Jun 2025 20:00:28 +0000
Manifest next update: Sun 15 Jun 2025 20:00:28 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: lGL0/880rGoj3VLpwewVdIXnWaLgnKHRqDcp0ajAkgE=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:7c:fb:5f:ea:a9:46:4f:ff:9a:0f:6f:e9:38:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jun 14 20:00:28 2025 GMT
Not After : Jun 15 20:00:28 2025 GMT
Subject: CN=1181bcbe1073eef71a3ed459529b95d64f9d6ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:d5:b1:b1:ef:63:b9:5c:af:af:e3:45:66:
3f:7a:52:88:72:80:b2:ec:87:99:4c:7d:95:98:27:
46:02:71:06:9e:3c:a0:b8:fe:69:05:84:11:af:bc:
4c:ec:57:9a:6a:a3:87:3c:2b:0e:49:0a:10:3e:1b:
44:fc:3b:3d:bd:84:d7:c4:a7:eb:4f:43:8a:b5:27:
ce:18:78:c3:d4:98:fd:64:27:36:52:a8:62:b6:a5:
3b:3a:0d:77:65:e2:8c:2a:78:18:50:27:e9:cf:4f:
cd:a2:35:f5:e7:91:f2:b2:d9:b5:f4:07:7a:9f:01:
23:c5:03:46:7c:58:17:70:05:25:91:f4:eb:5d:19:
c8:ae:a6:83:cb:28:ed:a3:c8:2e:c6:82:6d:8f:d3:
12:05:03:e6:30:b8:ad:01:64:b0:f8:2b:b6:0b:39:
ac:30:5f:44:21:97:3b:c0:d8:fa:93:42:d2:84:58:
0e:9d:ae:1c:cf:54:ec:8a:ee:e5:0d:6e:40:ec:21:
53:04:90:b3:98:c4:c9:af:1b:be:0e:2a:bd:25:9f:
2b:68:d0:f7:70:c4:75:ab:3b:53:89:25:ff:94:8c:
15:f1:56:88:ce:79:f4:67:c4:59:2d:da:79:af:f8:
22:a8:6b:28:fa:94:26:a2:fd:b8:ee:82:59:d8:4a:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:81:BC:BE:10:73:EE:F7:1A:3E:D4:59:52:9B:95:D6:4F:9D:6C:E8
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:c3:bb:cb:96:bc:f8:bc:95:54:e5:e2:ea:6f:1e:c7:40:
b3:5c:c0:71:a9:6c:9d:9c:be:8c:b9:78:16:2c:bd:e0:35:d6:
1f:df:4b:ab:27:5c:a9:72:8b:1f:33:cc:ab:b7:c0:58:09:99:
c7:b8:bc:fe:3d:da:e9:1b:0a:8a:fa:98:08:7f:29:e9:d5:81:
07:cf:fa:c8:73:ca:22:e1:04:82:ba:0c:a5:23:b8:29:f6:4d:
3c:e3:e5:bb:fd:f8:c8:9a:ee:6d:a5:9b:69:a3:a8:d7:38:12:
1d:51:68:99:16:fc:5a:88:24:f9:14:04:6c:70:7e:00:f1:71:
28:ce:21:69:35:31:db:47:da:e8:7c:76:c0:82:75:6c:30:f2:
d8:38:5b:24:4e:3f:ca:46:80:25:3d:aa:26:ab:4f:9f:3d:7e:
9e:26:16:0b:ea:9f:22:3a:6f:c3:15:de:60:ef:00:0b:7f:55:
fd:18:fe:7e:e9:ac:99:69:ff:0f:92:4b:8c:4c:f7:eb:a5:1e:
0a:94:4e:4e:a2:38:6c:4b:c6:90:f7:30:e8:66:c7:d2:8f:e6:
d2:65:cf:bb:bc:81:8f:1d:32:e4:2c:10:20:2f:89:52:18:52:
45:1a:40:43:b1:8d:af:b4:56:47:4e:51:4a:dd:7b:0f:a0:cd:
d3:d4:ec:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:11:51 2025 by rpki-client