Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: bjQ88WIQgJ96QSKJhiohH9uKVvMj2VRhONR5RulF26w=
Subject key identifier: 30:95:A9:A1:68:D5:60:17:7C:B6:56:0F:EF:68:01:89:61:46:4E:DA
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019A51BEC7B5099040540DCF2C33520EDFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0F37
Signing time: Wed 05 Nov 2025 02:00:48 +0000
Manifest this update: Wed 05 Nov 2025 02:00:48 +0000
Manifest next update: Thu 06 Nov 2025 02:00:48 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: Y2zPBP1tra+cEAndQS50Srhc4mJarUAwCwE0PfzmZl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:c7:b5:09:90:40:54:0d:cf:2c:33:52:0e:df:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Nov 5 02:00:48 2025 GMT
Not After : Nov 6 02:00:48 2025 GMT
Subject: CN=3095a9a168d560177cb6560fef68018961464eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:c3:b9:da:3d:24:18:9d:41:08:e6:7f:3d:
15:d3:b3:e4:fa:b8:49:32:eb:0e:21:8f:03:31:2f:
40:c2:0c:d2:e8:f8:2a:ba:4f:75:14:5e:4c:71:30:
b2:e1:7d:44:98:93:3b:d2:7f:f7:1d:e4:38:10:51:
0e:02:55:2d:d6:60:4a:e1:02:e3:8b:80:68:be:63:
ff:8b:60:1e:3f:72:0c:3e:0d:a0:6e:7d:b6:67:ea:
b5:23:28:bc:b2:ee:a6:ee:ab:0a:5b:bc:e8:7e:9d:
51:a3:4d:f8:62:6a:d6:fe:80:17:3e:ac:3d:7a:e0:
c4:56:0a:6f:3b:5d:c8:ea:89:cb:7e:31:01:58:9a:
df:94:a9:48:7b:6e:06:84:ff:21:ec:bb:67:b9:03:
31:25:31:1c:1f:9b:af:32:5d:29:58:9b:44:3c:3c:
54:5d:29:8d:68:5e:e7:cd:f8:a5:11:96:7c:44:2f:
ef:10:5f:2b:e2:aa:e2:c8:cd:ec:1e:6b:c3:04:62:
18:6b:e6:05:6c:22:ee:ca:cc:d2:5c:e8:e5:f5:61:
95:f3:8d:d2:07:1b:59:2c:b6:cb:f8:c2:9b:9d:6b:
98:c0:7f:0d:ed:a7:43:e6:6f:e4:d3:77:cc:bd:d0:
b6:cd:14:82:db:41:56:71:41:a7:4b:42:27:83:ab:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:A9:A1:68:D5:60:17:7C:B6:56:0F:EF:68:01:89:61:46:4E:DA
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c5:6e:cd:1b:95:5d:a1:3b:23:e6:7e:d3:d2:b4:f8:67:e6:
d8:af:52:81:e2:5e:19:9b:9f:9a:64:42:4c:79:04:aa:c7:e6:
ff:71:34:c1:4f:78:fb:b1:69:89:c5:ea:c3:89:a0:d2:41:8a:
ff:cd:ed:8b:dc:57:06:c9:8b:c9:1b:34:77:92:dd:72:51:7e:
92:9e:3e:86:5e:db:a3:c0:a5:1a:ff:7f:78:bb:72:70:90:ca:
33:bd:d8:6e:d9:2f:4a:15:5c:99:71:8e:49:8d:33:41:98:e6:
f6:16:0f:35:e6:98:2b:13:01:99:7a:1c:8e:bc:80:3e:70:4e:
58:7e:ed:f0:5a:26:47:37:f5:95:14:47:22:36:bd:4c:82:92:
a4:c6:64:f4:f3:5d:f2:ce:ff:b1:ad:ac:8b:1d:5f:04:ab:57:
77:b6:5e:ec:3e:28:30:bc:07:6c:2f:49:d1:07:eb:6e:fd:dd:
92:9a:36:09:7f:59:a1:76:8b:6d:4f:6c:48:d9:e3:9a:e9:9c:
84:12:8e:d8:37:cd:a2:30:a5:07:8a:93:39:50:98:85:0c:95:
e4:aa:05:64:7f:ea:8f:28:e2:45:2a:8c:23:c0:52:9b:86:e5:
83:24:a6:2a:87:dd:b1:d3:89:53:cd:e4:08:6f:c0:ff:51:20:
e9:9b:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:17 2025 by rpki-client