Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: 9cjfB2P9LUxWE7+mG2A6lFMjyB4NyYZQEj+zxmLvl+U=
Subject key identifier: BA:69:8E:7D:71:F9:1C:32:B4:E3:36:F6:08:93:44:C1:06:18:2C:BE
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 01987B9C30B8D7BF1FC8A2F8512DC0A8F12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 15AE
Signing time: Tue 05 Aug 2025 19:01:30 +0000
Manifest this update: Tue 05 Aug 2025 19:01:30 +0000
Manifest next update: Wed 06 Aug 2025 19:01:30 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: roZo/1D9bw5errJyEZSCIDNKhvRvzJcJ1u21TJWb1c0=)
2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=)
3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:30:b8:d7:bf:1f:c8:a2:f8:51:2d:c0:a8:f1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Aug 5 19:01:30 2025 GMT
Not After : Aug 6 19:01:30 2025 GMT
Subject: CN=ba698e7d71f91c32b4e336f6089344c106182cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:f9:e6:a8:13:4b:f3:a7:eb:51:5a:29:9e:
d3:a6:12:f7:8a:61:9e:ef:d1:c0:91:8e:c8:ab:e3:
52:a3:48:8f:89:e4:e6:ee:2b:b3:c0:92:d3:9d:19:
67:04:4e:3b:19:25:37:8d:64:41:82:b7:6f:ff:bf:
c9:9c:8b:a1:58:65:67:b5:f4:9d:e1:80:ce:c1:71:
1d:66:e5:35:d4:7a:3c:45:a5:c3:f2:e5:c1:3d:3a:
45:15:a0:d6:bf:02:36:59:b4:98:88:aa:21:00:16:
86:68:aa:73:65:f0:dd:04:47:38:5e:d9:cb:85:21:
27:3e:b9:b1:4a:8a:2e:6f:86:3d:fa:2b:7e:33:73:
7c:46:d0:d2:40:a4:9e:a4:27:b3:15:06:33:29:5f:
f0:8c:22:60:e2:f7:44:52:7d:15:03:02:d7:d4:58:
5a:48:7c:70:08:a8:1b:93:66:10:2a:b4:0f:d9:76:
fe:b5:00:b9:81:56:a2:37:f0:9b:64:64:d8:1f:d3:
ea:46:d0:ce:de:77:27:be:9b:fd:e5:15:f4:c8:87:
27:5f:22:11:97:68:c1:7a:02:3d:33:c0:7a:f3:70:
8c:64:82:21:01:06:9d:31:1c:64:cd:14:f3:b8:20:
aa:6f:2b:bc:79:b3:4f:b9:b9:5c:2b:d6:1b:b7:94:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:69:8E:7D:71:F9:1C:32:B4:E3:36:F6:08:93:44:C1:06:18:2C:BE
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:c1:0e:1e:81:1f:fa:d9:68:44:50:2d:12:98:7a:5d:5a:
00:7d:1d:cc:91:49:4b:a9:9e:49:80:c6:ef:39:75:64:d9:ea:
6b:47:b0:63:67:5c:7d:b8:d8:d1:11:41:00:9b:e8:5b:99:82:
8b:37:cf:63:1f:dd:d9:f9:01:cb:4e:1e:d6:e3:02:c6:8b:e7:
18:86:f5:1f:8d:d7:2f:29:a9:f6:38:a1:fc:37:7f:17:05:51:
5a:69:e8:2a:13:44:c4:5d:d2:59:98:97:df:3f:b9:ab:33:30:
45:99:46:89:9f:80:c8:ea:97:3b:a0:a0:7b:5f:45:33:b5:f8:
fb:d2:69:5e:b0:27:90:7e:4b:41:ff:48:0a:19:8b:79:13:ba:
d8:b5:73:7e:8c:6f:fd:cf:b1:4a:14:0c:d5:6b:5e:25:19:01:
63:0e:41:6b:74:0a:45:18:44:a5:1a:0c:93:92:4b:26:c8:50:
d7:02:99:24:f8:f6:67:7d:d8:c1:b1:47:36:8e:2f:02:c7:4c:
fe:3f:62:df:ff:91:5c:0e:b7:f6:32:9b:29:28:4c:7f:fd:6b:
1d:4e:ff:da:72:03:5d:71:91:09:43:38:da:83:60:ea:51:8f:
67:42:5f:b2:08:f8:9a:08:36:95:72:07:0f:30:bc:f3:34:8f:
a1:94:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:38 2025 by rpki-client