Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: CmNvIST+IMpIkEEu8KBoGvWfYkIrGVhvKQ7jw/Cd3gI=
Subject key identifier: 72:25:4F:8B:41:01:B2:13:3E:C4:A9:5D:A7:89:03:2C:45:2E:46:31
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 0198741909A8D52FE4F3D8C723F67BE694EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 0E5B
Signing time: Mon 04 Aug 2025 08:00:54 +0000
Manifest this update: Mon 04 Aug 2025 08:00:54 +0000
Manifest next update: Tue 05 Aug 2025 08:00:54 +0000
Files and hashes: 1: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: +mxMhmR0lwanFyivYIU2YkB5uHxIJ+GIPBZatQWg200=)
2: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (hash: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:09:a8:d5:2f:e4:f3:d8:c7:23:f6:7b:e6:94:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Aug 4 08:00:54 2025 GMT
Not After : Aug 5 08:00:54 2025 GMT
Subject: CN=72254f8b4101b2133ec4a95da789032c452e4631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:e3:9e:a2:4e:ca:ed:12:1d:49:99:34:74:
a3:dc:01:0a:b4:a7:fc:4b:7b:fc:19:ae:9a:91:79:
f6:64:08:59:d6:87:45:ab:0d:46:64:60:46:a6:da:
52:ba:39:47:5c:e7:9f:6c:ce:47:60:2e:e8:db:9b:
d9:80:1d:15:12:3c:57:47:bb:d3:11:58:1a:e2:a6:
37:b7:79:3d:97:99:1e:1c:3e:ca:c6:2a:f2:41:e4:
cc:e4:4a:9b:e0:b8:cd:8b:76:9e:6e:7f:b1:9d:07:
cf:29:21:98:62:8c:a8:da:27:c9:3e:7d:24:00:85:
d1:03:1f:8a:26:b8:8d:00:8a:0e:69:6b:19:72:7e:
bd:6a:93:2f:4d:36:a7:62:d0:c9:7d:d9:39:c8:c1:
03:c5:33:36:77:da:f9:08:65:49:2b:44:1b:7c:64:
85:af:f2:8c:6b:1e:00:dc:cd:2a:0a:20:05:d0:4b:
db:bb:f4:09:6c:9e:fc:cd:1c:b1:93:78:ff:dd:a6:
22:32:88:56:59:88:6e:91:9c:16:f8:ba:9e:57:7d:
c9:79:46:b7:a1:22:15:44:04:41:43:5a:0c:85:06:
9c:51:cb:cd:e3:69:63:3f:e1:92:49:e8:61:00:7d:
08:f5:40:1a:fd:78:bd:7b:e9:e2:09:78:42:1e:87:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:4F:8B:41:01:B2:13:3E:C4:A9:5D:A7:89:03:2C:45:2E:46:31
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:54:4b:00:58:e4:45:81:64:e4:96:5e:f8:41:aa:dd:ce:18:
5f:b9:77:dd:3a:4a:bb:e4:94:69:a2:8e:35:0d:37:f9:dd:62:
ce:e9:4d:1d:b1:b8:ba:7c:68:d9:91:1b:59:da:0f:6b:19:f8:
58:63:2a:eb:72:ce:6e:44:68:98:f1:c2:8c:f3:6f:dc:c2:46:
7c:7f:e6:0c:1f:09:7c:4e:93:3d:04:a3:05:19:ee:60:e3:07:
7a:ad:a8:2a:4f:ed:ce:a0:88:e9:e7:b0:ac:fd:20:21:36:c3:
dd:7c:b5:98:53:6b:e4:1c:42:2e:ee:0d:c0:fd:07:73:af:07:
16:7b:a8:6c:67:24:80:7b:38:c9:17:17:0a:db:dd:15:67:51:
97:f1:bf:aa:32:cf:bb:74:23:55:b7:df:d6:6e:49:57:a2:ff:
6a:94:d7:72:83:1a:de:fe:cd:05:02:4a:a1:4e:3b:db:73:83:
31:ba:07:d7:da:d5:1c:39:f6:52:d4:78:8a:93:9c:2a:9a:42:
3b:99:d3:29:92:44:f6:39:40:a9:5e:27:04:df:7a:c5:28:6e:
74:b2:e4:8b:f4:61:27:b8:55:c9:4c:06:9a:b9:c8:cb:63:58:
8c:38:96:9a:a5:13:6e:d4:0d:30:09:4a:6a:1d:e2:92:c1:e5:
21:93:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:51 2025 by rpki-client