Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: H7OzISiMThVaRRebdPWPu7DCRFDrKrUjJ4WP0SYb4cc=
Subject key identifier: 4E:86:53:23:5D:70:84:8D:6E:46:E0:A9:BE:91:6F:7B:30:85:9D:57
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 01988FC7B0EF11E8B9B00BB70FFC5D9EFB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 17:01:25 +0000
Manifest this update: Sat 09 Aug 2025 17:01:25 +0000
Manifest next update: Sun 10 Aug 2025 17:01:25 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: V+28F4WteFguHoQl/Uh+wQNR1bbrdJIdxRuvZWzX/6w=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:b0:ef:11:e8:b9:b0:0b:b7:0f:fc:5d:9e:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Aug 9 17:01:25 2025 GMT
Not After : Aug 10 17:01:25 2025 GMT
Subject: CN=4e8653235d70848d6e46e0a9be916f7b30859d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:4d:dc:4c:cf:82:b5:5e:58:da:71:a1:9a:
c8:0c:96:f4:9c:c8:79:70:1d:47:41:17:85:71:60:
90:02:46:aa:91:2c:76:2a:c9:12:d3:d1:81:05:50:
41:3f:8d:35:35:7a:aa:8e:d1:bb:a7:e8:e5:78:06:
f5:b5:9b:76:9a:d4:a2:d7:2c:68:ab:e3:fc:7e:3c:
6a:41:fd:06:a7:5a:68:34:24:4f:d2:dc:8f:49:0d:
7e:74:5f:e6:d8:6d:7a:37:c5:41:41:bc:68:aa:81:
db:3a:fe:7f:a5:84:48:53:a3:84:60:7d:f8:cf:ef:
c0:a6:82:c7:68:7b:e9:9a:f7:51:77:d9:e9:11:24:
53:88:13:43:45:1b:f0:6f:d7:69:33:e2:44:67:55:
4c:50:83:9e:3d:4e:18:07:3d:84:da:c5:b4:6a:89:
63:38:67:fb:5b:ec:e8:64:44:85:46:10:ee:43:ac:
6d:67:d5:27:03:b7:60:9c:51:04:5b:59:d8:07:4b:
20:1d:78:97:b4:a5:c7:cc:da:fa:2a:68:01:64:1c:
83:96:a4:30:87:69:72:8f:67:3d:f7:f1:3f:0f:54:
08:70:15:57:1c:53:25:b2:7a:d1:40:f3:80:d9:a4:
fa:2d:24:1b:fa:77:31:e2:49:46:e0:95:b7:44:2e:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:53:23:5D:70:84:8D:6E:46:E0:A9:BE:91:6F:7B:30:85:9D:57
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ab:72:4f:6c:05:ce:50:c6:c6:c5:23:18:1b:18:22:97:33:
6d:86:96:b9:12:17:aa:1e:0d:cd:b9:12:89:2b:5b:76:7a:1a:
fd:a9:ad:75:ec:16:fe:40:c9:a0:f2:06:7c:2f:9d:df:f6:61:
79:f0:ff:c3:18:6a:c4:f7:f4:5a:f6:9d:26:e2:f7:8b:88:5c:
40:d6:52:14:50:55:c0:52:e2:63:65:84:30:99:a1:06:1b:20:
9a:b0:a3:d4:1f:ea:29:0c:4b:a3:99:ad:9c:64:cb:58:27:1a:
e4:83:e9:52:0a:1b:cb:f5:e6:0c:4a:de:57:df:74:7e:14:fa:
e1:54:7b:be:d6:17:79:95:40:7d:37:20:59:ac:de:ec:5f:63:
6e:61:b4:d8:2e:f6:55:67:5c:be:be:d6:92:40:83:29:a9:ed:
2d:ee:29:8b:74:c2:a7:e0:86:22:a0:cf:11:50:44:81:f1:47:
2e:bf:cb:93:5a:35:f4:7d:3c:38:0a:67:3c:11:2d:e2:01:3a:
26:46:13:a5:3a:50:8d:fb:4b:95:3c:08:31:ad:0e:b3:8f:7d:
c1:3a:28:88:3d:af:e2:e0:41:5f:6a:54:e4:a7:55:94:dc:62:
0b:88:0f:e1:32:9c:e8:38:bb:74:4f:72:c1:7a:6a:13:ed:3c:
b2:3b:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:28 2025 by rpki-client