Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: uSXB3QeHi+e8xnWOVRh3ataEoD5ep1/VqptThRe/wVw=
Subject key identifier: 1A:52:3E:32:2F:06:72:85:48:75:4F:19:9E:D2:6F:06:97:00:52:DF
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01988168C1451E91BC62F9B7FCDBBDA35A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 22:03:02 +0000
Manifest this update: Wed 06 Aug 2025 22:03:02 +0000
Manifest next update: Thu 07 Aug 2025 22:03:02 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: 4RtAsvF8GUPVuxqzi88mbkEJHzb/fXcNOck2SuLP5PQ=)
2: NYpGsgvZZnS43WLsZ6IiOuK1URk.roa (hash: 1DbDkDpg7L2mWH/maxc8wFOk6zRLCwxEnE3jGY7E3oU=)
3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:c1:45:1e:91:bc:62:f9:b7:fc:db:bd:a3:5a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Aug 6 22:03:02 2025 GMT
Not After : Aug 7 22:03:02 2025 GMT
Subject: CN=1a523e322f06728548754f199ed26f06970052df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:f9:54:47:18:c2:8b:c5:d4:d4:7b:0c:3c:
00:25:ce:86:e1:48:a0:e5:a8:cc:4c:ce:b8:66:8b:
f9:8b:db:4b:3c:3b:57:60:0d:a7:09:2c:0f:16:55:
71:72:86:de:d0:49:c4:68:b5:fe:75:17:88:5c:3c:
4f:c2:a3:ba:6b:6d:07:07:43:4d:93:65:16:aa:28:
32:35:23:d3:c7:ce:6e:c0:88:ea:f1:b4:6c:2a:7f:
3f:56:d1:9d:08:ef:78:28:e2:11:94:16:65:39:58:
26:1f:cc:9c:46:47:e4:4e:3d:38:04:3c:ee:e1:30:
b3:d0:69:81:cd:eb:22:9a:28:0f:34:63:06:28:da:
c9:e8:2c:1a:47:f3:33:f1:39:91:2a:bc:f0:8d:63:
00:37:36:f7:c1:00:66:a7:58:a8:a7:5c:3a:e9:28:
a2:a8:06:ea:1f:c8:9f:38:ed:6b:cd:c4:71:b9:a6:
17:38:28:e0:47:cc:32:02:eb:a7:e8:6f:86:75:ca:
db:1c:52:d8:4b:b0:84:f6:38:da:99:e4:14:be:21:
43:ec:3d:17:0f:af:d5:76:6e:8d:db:32:e4:5c:08:
e4:d3:89:b1:a3:24:1e:02:dd:86:58:da:81:6a:a0:
f8:e4:ce:f6:6c:8b:d0:f3:71:91:f7:19:2b:8a:a5:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:3E:32:2F:06:72:85:48:75:4F:19:9E:D2:6F:06:97:00:52:DF
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:89:7d:0b:62:31:21:f7:a2:c3:44:31:d5:96:96:27:be:f3:
ad:c1:b3:c9:81:0b:7c:5c:8f:7c:65:46:4b:ba:a4:5b:99:9e:
f9:e2:f6:43:0b:53:46:4d:42:ae:1f:6c:23:24:74:aa:fc:fe:
fe:cb:db:e3:50:93:e2:53:62:a7:ab:88:8c:09:cd:bd:1a:96:
11:c1:4d:5a:43:93:68:9c:3b:fe:61:8b:cc:fa:b4:d3:c6:58:
40:44:5a:25:be:4f:5b:25:80:b1:4a:11:33:d6:da:9d:0a:3f:
73:05:09:38:67:e8:8b:6c:10:94:0e:31:aa:63:3e:89:07:4b:
f2:a4:75:92:ad:8c:fb:b8:1e:fb:55:14:f8:8c:54:ea:47:34:
5f:8d:14:c7:61:8b:bb:a8:02:cd:76:a0:4b:31:d6:a5:9f:4b:
4c:e6:44:9e:9a:24:e8:4f:5f:e6:ea:7e:4a:ed:49:41:c1:ec:
9a:70:e7:c4:f6:b9:4b:2d:fe:23:90:87:e2:81:9d:0a:5b:12:
29:de:a8:c9:57:44:9a:d1:b0:c1:4f:66:fe:d6:0b:3a:47:21:
1d:bd:dd:d5:7d:f2:63:8a:51:ae:96:35:f7:76:2b:c6:f6:6d:
fb:17:ab:4c:b8:23:93:52:43:51:f3:f9:34:ce:ab:3e:ee:9f:
7d:12:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:09 2025 by rpki-client