Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: Zb29CtlL6tQmhYVl2yubhH0D7nwafO+bhWqCvl2iMDQ=
Subject key identifier: 9B:C6:5C:52:3F:99:04:7A:ED:E2:73:A4:16:F4:EF:14:9B:B9:CF:1D
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019A4EF43ECDA3AE5B3ED6FE5F16BA236823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: yllBf4soyGsZDJaeNb9AOQmp0fwQrGj9XH7hYYmWwXw=)
2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=)
3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3e:cd:a3:ae:5b:3e:d6:fe:5f:16:ba:23:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=9bc65c523f99047aede273a416f4ef149bb9cf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:ac:5e:d0:4d:e3:1f:e3:6f:cf:c4:20:9b:
e6:70:89:48:af:2c:a3:f5:ff:4a:45:31:a7:36:98:
98:5f:5d:22:22:80:08:03:bd:d4:e2:a7:a7:53:8d:
fb:24:e5:5e:05:9d:3f:ec:37:05:d4:be:88:7c:d0:
0d:96:b9:e4:72:b0:f0:20:c2:96:f9:cb:1c:ea:a3:
01:02:91:65:0c:0d:fb:80:13:f9:f2:23:8e:86:a0:
fe:2b:1f:f3:50:75:58:79:54:15:09:96:57:2c:3a:
02:fa:4b:12:c9:da:d5:75:fb:09:19:b2:2a:20:90:
40:50:d5:44:01:54:e1:e5:e4:e3:03:3f:72:74:39:
f3:ab:8f:ee:8a:29:4f:fa:cf:4c:ff:6a:3c:1d:dc:
ac:cf:94:ca:65:a5:62:54:37:65:39:1b:4a:bd:0a:
39:33:bc:b1:8c:5f:22:22:3f:bf:e9:99:d9:ae:2b:
3e:da:44:57:72:2d:be:d5:e1:e5:6f:dc:9d:ae:3f:
55:cd:78:3c:21:de:7a:7d:01:ee:c1:60:24:fb:b8:
8f:f6:a3:94:c2:25:70:5d:0d:53:2c:4c:4e:14:d9:
65:9f:f0:2b:12:c7:1f:61:8d:57:e6:df:f1:85:08:
cb:7d:90:e6:92:4a:3e:6d:c1:62:d5:8f:37:cd:38:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C6:5C:52:3F:99:04:7A:ED:E2:73:A4:16:F4:EF:14:9B:B9:CF:1D
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:67:3b:01:9b:33:1c:0b:64:55:ae:b8:78:ef:b6:3e:fe:a0:
14:22:54:d0:84:d1:6c:b2:44:0f:12:d2:9c:41:4a:46:3f:8d:
36:e7:5e:fc:3e:df:9b:fe:91:b1:95:ce:b4:c4:dc:d1:1c:e8:
eb:39:a5:02:cf:ca:da:52:5c:91:42:7a:1c:91:bf:9c:28:4f:
24:00:f8:6c:69:7d:1f:64:83:43:f5:d8:5e:ae:5d:f8:f0:6c:
c4:55:62:1b:49:6f:dd:88:5e:45:cd:b3:46:13:85:31:91:04:
28:5e:de:ea:b8:2f:84:b4:ba:97:84:af:5c:83:23:a4:22:a0:
4f:3e:07:2b:30:20:39:7c:37:01:5b:b9:7c:ce:a5:f2:7e:50:
01:9e:91:11:59:c3:fa:a6:e6:39:41:a7:2f:de:16:89:69:6a:
af:39:c4:d7:02:b4:44:14:af:a6:7c:77:b7:07:ca:47:9a:74:
2e:43:1f:c0:4b:df:e9:e7:b7:14:3b:f9:b4:e5:47:9d:ea:f3:
bb:e1:8d:31:e2:2f:4d:03:66:a9:20:ea:0d:77:ab:18:68:73:
28:39:d6:65:b9:70:89:7a:5b:18:d5:30:a9:b4:f2:e9:c0:8c:
fe:3f:17:44:22:04:13:f8:97:72:0d:83:77:ed:bd:f3:93:c0:
1f:12:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:07 2025 by rpki-client