Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: F5/pFcZTlzi9SYSeX3KPbbEQGWQ5BD3fcrX9f5idkA8=
Subject key identifier: 38:B8:41:19:5D:53:B7:BF:15:E6:4F:CD:6F:6A:A3:88:E4:30:12:0F
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019827B52921DDCEDD8ED42BB3196969F22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 058A
Signing time: Sun 20 Jul 2025 12:00:40 +0000
Manifest this update: Sun 20 Jul 2025 12:00:40 +0000
Manifest next update: Mon 21 Jul 2025 12:00:40 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: JXPSVgjvdu/jJwK6ZBTnF3xp2beuEXmESnm+aJYNzo0=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:29:21:dd:ce:dd:8e:d4:2b:b3:19:69:69:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jul 20 12:00:40 2025 GMT
Not After : Jul 21 12:00:40 2025 GMT
Subject: CN=38b841195d53b7bf15e64fcd6f6aa388e430120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:de:94:ae:0a:0b:f5:c6:14:ec:35:d1:70:61:
5b:07:39:d0:73:41:48:fd:82:60:e8:9d:52:c9:c3:
4b:09:30:70:13:e4:76:1a:3c:78:19:9f:e4:e5:56:
7d:64:c1:2e:81:90:41:8e:3c:c1:a2:f1:97:c5:a7:
be:a6:ed:17:24:ab:5f:f1:bc:29:c8:b1:0d:51:da:
f3:fb:06:bc:5b:22:8c:cb:f1:3f:dd:6d:ba:54:ea:
70:33:11:ab:f5:bd:d1:2d:b3:9d:0e:c1:4e:05:12:
54:98:d1:3c:83:6a:4f:7f:da:21:8b:80:d5:70:b8:
8b:c3:9c:6a:bf:d5:cf:73:e4:72:32:0a:21:70:56:
1d:33:6c:b2:fc:01:da:ed:11:67:e2:91:77:0e:a4:
35:61:cb:6c:29:e5:43:e5:96:06:71:c9:c5:5c:a7:
d1:fd:98:ca:ed:83:28:89:99:a8:e6:85:8d:86:1c:
91:d3:7b:29:94:59:1b:b5:a0:1c:89:1a:55:c7:ad:
97:69:b1:09:42:7b:5c:e3:e9:7f:97:5c:38:c4:9b:
1f:b7:5f:ad:52:05:7b:19:e2:7c:e8:5e:a8:c9:6a:
7d:a2:fb:b5:2c:9b:6b:2f:74:bd:93:98:7e:72:64:
5f:f0:6d:f6:8e:ff:9a:96:dd:2a:a6:f9:b7:eb:06:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:41:19:5D:53:B7:BF:15:E6:4F:CD:6F:6A:A3:88:E4:30:12:0F
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8c:23:c4:91:72:0c:2b:30:fa:06:4c:27:46:07:4c:db:ea:
d6:e2:17:02:d6:e3:64:6f:fe:c6:4b:17:9d:b9:4e:e0:e7:50:
a5:a6:8f:c0:10:0b:76:4d:38:39:ee:8a:e0:af:e9:87:8b:59:
52:b4:3b:52:67:02:9e:7f:f6:02:bc:6d:bc:4c:df:89:7d:bc:
3b:31:e9:3a:52:9d:e9:e2:8e:3e:11:a2:f6:27:19:69:7c:76:
a3:1d:af:04:9d:80:b9:fe:ec:21:14:b4:55:69:2f:60:18:f9:
2f:47:3f:50:ae:b1:20:3f:f7:c2:63:74:af:96:01:f9:da:f6:
01:05:d7:68:8f:bf:ca:1f:fc:33:36:11:9a:c7:c7:cf:52:64:
4d:d6:31:46:41:52:93:36:1d:5c:a7:43:64:a9:9f:85:1e:34:
2a:9f:a0:d5:f6:89:b7:b2:da:2d:5e:a6:8e:d5:3d:45:9b:53:
a4:90:b1:39:7b:6d:b9:91:f6:e6:e3:f1:46:df:e5:45:ad:e5:
1a:b7:75:52:73:77:32:a5:dc:d0:b3:00:f1:43:c1:56:4b:8d:
62:ce:3e:82:2d:26:29:a4:10:98:61:4b:68:3a:54:0f:c1:2f:
12:38:96:94:20:8a:52:40:29:ac:6e:15:c2:17:2d:8a:7e:b4:
8f:ce:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:36 2025 by rpki-client