Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: mrWEg+BIxFnXIu8ttu0TZ4we9MNPtawm6U33YFLpkKM=
Subject key identifier: 7D:D3:79:59:CF:AB:76:2D:90:68:D5:05:5F:C5:EE:C8:7A:D4:DC:74
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 019A4F2B97C819DD10F7B9CD304B1E58A026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 0F51
Signing time: Tue 04 Nov 2025 14:00:48 +0000
Manifest this update: Tue 04 Nov 2025 14:00:48 +0000
Manifest next update: Wed 05 Nov 2025 14:00:48 +0000
Files and hashes: 1: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: 2ntiUDHQGZfJID9zvnD1xyC3MKGNQrDau6gStJmIvKk=)
2: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (hash: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:97:c8:19:dd:10:f7:b9:cd:30:4b:1e:58:a0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Nov 4 14:00:48 2025 GMT
Not After : Nov 5 14:00:48 2025 GMT
Subject: CN=7dd37959cfab762d9068d5055fc5eec87ad4dc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:8f:f5:a7:19:11:b8:6a:60:4b:0d:a1:14:
20:ea:fc:97:19:a3:9c:6a:b0:1f:5d:87:4f:28:3c:
e0:ce:29:41:b9:fd:88:bd:5b:23:67:0b:fe:8b:8a:
ac:60:b3:55:88:5a:43:9e:09:76:b1:24:8f:31:65:
65:48:4f:84:c1:eb:53:98:91:54:02:86:06:67:32:
ef:36:71:4f:c3:d6:8e:54:aa:80:f1:91:7c:e7:bc:
72:4a:5a:39:1c:f1:67:f4:60:00:42:0c:13:e7:d8:
42:5a:49:82:46:81:9a:80:ff:4b:d5:92:8e:02:e0:
3a:2b:4d:db:db:19:74:21:97:fb:d4:72:64:e9:5a:
ce:f2:6c:a8:4b:e6:9a:8e:9c:a5:fd:ef:ad:a8:cf:
e3:de:ec:c8:a9:79:c7:09:de:5e:ff:71:ff:c1:19:
b6:d4:ef:a6:f1:1e:6a:76:6e:da:80:e5:91:1e:01:
b6:5e:25:7e:f4:3e:a7:3d:14:f3:95:7e:3f:92:64:
43:58:c9:e9:22:6b:10:6c:31:fc:c7:10:7c:cc:2e:
d1:51:84:ad:a7:ae:97:aa:05:f4:1a:0d:45:68:8e:
12:81:f8:9e:1d:33:b1:68:c8:8c:47:66:01:7d:c9:
5b:43:5d:13:0a:92:ec:d5:20:ce:f9:3b:26:24:6b:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:79:59:CF:AB:76:2D:90:68:D5:05:5F:C5:EE:C8:7A:D4:DC:74
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:16:48:be:cf:29:0f:e8:55:62:61:d5:b0:7c:ad:2f:3e:64:
2b:e6:6a:bd:17:c6:91:0a:49:d4:4c:66:15:22:d8:35:c3:76:
1f:b8:f2:51:0b:82:ce:a1:3d:0b:31:31:1e:82:49:5d:a0:24:
ce:21:de:1b:f0:02:8b:be:25:66:4f:69:df:7f:59:41:1f:b8:
39:4b:53:00:85:5d:20:a0:0c:2f:54:0f:19:26:c7:4e:1e:7c:
cc:23:f8:e8:9f:7a:b3:5c:3a:5e:be:dd:26:ad:b1:ad:53:37:
22:aa:75:ed:45:be:24:8c:4c:8e:ff:a0:1b:48:ca:89:a2:b3:
0b:34:a9:df:01:00:8f:86:90:24:a2:16:71:0b:79:15:3b:40:
83:12:81:00:27:2a:b2:89:66:b0:e2:79:de:68:c2:f4:34:20:
a2:8d:92:fe:1d:0b:c2:ac:18:5e:bc:63:28:16:4a:78:52:1f:
49:51:58:79:58:35:f9:dc:8f:9d:4c:a1:4a:e5:93:f7:fb:d0:
d4:34:d1:4b:0e:b0:c6:9e:27:31:d1:c6:89:b4:84:a7:0a:c2:
06:63:87:32:dc:fc:b6:99:f8:5d:cc:3f:6d:0d:06:cc:62:72:
e1:a4:3f:de:80:c6:56:59:08:ca:f9:32:49:c3:14:14:a5:ce:
32:ff:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:55:50 2025 by rpki-client