Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: Bs3tlXWKChnh8jWiNJHXmsfhbOWQiyqCSAaux/ULtnI=
Subject key identifier: 6A:C4:DD:FB:AF:FE:B7:E1:FB:2C:11:DC:5E:FD:11:13:8F:63:CF:E4
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019776AE7D6CD2B7ED233A592A29300C8F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1527
Signing time: Mon 16 Jun 2025 03:00:36 +0000
Manifest this update: Mon 16 Jun 2025 03:00:36 +0000
Manifest next update: Tue 17 Jun 2025 03:00:36 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: UBEHtAudUNlgMOzLRWrlMrZHwn9dWKqiikjIIg2ZOkA=)
2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=)
3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:7d:6c:d2:b7:ed:23:3a:59:2a:29:30:0c:8f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jun 16 03:00:36 2025 GMT
Not After : Jun 17 03:00:36 2025 GMT
Subject: CN=6ac4ddfbaffeb7e1fb2c11dc5efd11138f63cfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:ab:6b:7e:3a:66:81:95:09:10:6f:61:2e:
1f:22:4d:0c:5d:dd:ff:ad:be:b8:8b:09:44:5a:95:
16:3f:a6:38:4f:91:f8:1d:fc:e7:eb:a9:f5:bf:59:
a5:85:c9:31:83:0a:19:ac:fa:55:7f:34:26:f1:b0:
ce:b8:cb:7e:eb:7d:c5:32:f9:17:2d:7d:36:cd:8c:
4e:cd:7c:3d:cf:09:13:2c:64:6a:45:a5:ca:10:13:
21:58:c6:d0:b0:09:aa:0f:2c:7b:02:0e:aa:6a:62:
3c:63:8a:d5:87:cb:6b:f7:45:79:6c:2b:bb:cf:fb:
5b:68:84:2e:eb:37:8e:ff:96:a5:90:6f:ef:af:66:
f7:63:25:d7:51:49:85:4b:12:b2:81:6c:91:53:9b:
ea:2c:98:a9:22:36:be:ac:35:45:b2:89:79:81:e5:
20:7f:8f:0a:18:6a:53:2d:18:d0:ac:79:ae:9a:fe:
9e:b8:87:9c:ba:89:3c:b6:90:50:47:6c:5a:3e:1c:
f7:d4:51:50:fc:18:85:d6:0f:fd:b2:1d:6b:e7:64:
7e:ef:da:92:00:36:a1:30:a8:2f:b7:90:2d:f1:88:
67:3c:8e:6c:4a:44:87:fc:d8:f3:bd:f1:b4:6c:c9:
d9:49:31:7a:99:ce:17:51:91:7f:dd:ab:39:30:10:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C4:DD:FB:AF:FE:B7:E1:FB:2C:11:DC:5E:FD:11:13:8F:63:CF:E4
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4e:93:49:7b:13:a3:91:b1:73:7c:af:34:1c:87:f4:85:11:
fd:08:ee:66:13:b2:52:96:4f:63:e4:ef:04:3f:3e:ab:d6:d4:
b3:41:28:84:11:45:27:a5:56:4c:b0:a8:51:ee:97:3b:5d:a3:
27:2a:c2:7f:4a:4c:cc:9d:62:78:72:a5:11:25:68:f9:0e:46:
32:eb:04:54:e2:54:56:cf:53:6d:34:3a:59:19:bc:d4:b8:c7:
20:b6:d5:2d:29:7c:23:cc:b9:e9:25:ad:99:8f:47:7b:48:da:
17:2f:75:ca:97:ff:a2:46:a6:4b:d5:01:f6:9e:ae:62:6d:f5:
b3:8b:80:65:c6:b6:f7:a3:a4:e6:ce:a4:af:3b:d4:cc:a6:45:
0a:38:fd:63:2b:fd:1b:50:d9:24:98:3c:c4:ad:ee:1d:9d:e9:
99:15:dd:47:fb:6a:0c:ac:f3:76:82:ca:6b:f1:99:4d:35:b3:
e7:db:0d:62:1c:bd:61:56:63:ef:c5:d2:9f:a8:5f:87:0a:32:
ca:13:72:ee:11:4d:cb:b6:19:93:f5:70:5f:06:f2:5e:11:cf:
9d:62:96:85:65:d0:9f:66:28:19:be:d6:32:6d:ee:09:ba:33:
64:6a:34:0d:dc:e4:c6:d0:eb:1b:20:f5:80:cb:76:ba:c9:54:
fd:b8:3f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:57 2025 by rpki-client