Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: H2S7nL7o5nkwYaEuL3M3zmKJLI5uT4NbPqd/YCzcWWo=
Subject key identifier: B4:4D:4E:59:FB:98:B7:D3:7E:BB:7C:03:16:0A:34:E5:B4:88:06:43
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 01984AAF3FA12B8467C2AB1D47D066292C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 120D
Signing time: Sun 27 Jul 2025 07:00:55 +0000
Manifest this update: Sun 27 Jul 2025 07:00:55 +0000
Manifest next update: Mon 28 Jul 2025 07:00:55 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: bGbVpaObbMw+nRUZnJoLqUrpFOsEMd3JxiMIWn3+Vmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:3f:a1:2b:84:67:c2:ab:1d:47:d0:66:29:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Jul 27 07:00:55 2025 GMT
Not After : Jul 28 07:00:55 2025 GMT
Subject: CN=b44d4e59fb98b7d37ebb7c03160a34e5b4880643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:3b:55:87:a2:4a:6b:4a:ef:8a:45:05:d4:
ef:6e:11:8f:39:fe:b9:17:56:af:6f:e9:82:e9:0c:
0e:d9:e2:bf:c4:81:d9:2c:3f:62:cc:72:c9:a9:31:
57:97:c0:98:54:b6:3b:72:27:19:bb:bd:1a:12:bf:
2b:28:12:2e:39:75:45:23:56:2c:55:77:cc:a4:2b:
b6:64:dc:1d:53:26:40:50:80:7b:3c:0a:59:c0:2f:
5f:f6:dd:e7:69:41:12:91:03:27:38:6d:55:f2:7c:
eb:c0:5c:06:3c:11:b7:d8:cb:44:5e:f5:2a:63:de:
7d:47:e5:bc:2e:98:f5:8b:87:1b:61:cc:63:a7:2f:
76:e5:e8:e0:21:cf:df:3b:d9:8b:29:be:f1:f5:52:
87:76:5d:ff:05:87:85:2e:5b:de:af:ad:ef:7a:f6:
ca:2c:dd:0e:8d:84:33:af:10:24:57:c1:68:fd:c7:
60:f4:a3:97:25:2f:e5:78:9d:93:65:cb:96:84:b8:
36:5f:f9:54:12:c0:9d:75:46:65:7f:de:cd:9d:0d:
61:5f:e8:c8:9b:bb:47:60:d0:e4:87:d4:5f:d5:5a:
0d:f6:ba:e3:bc:80:20:63:91:93:3b:a6:d0:5f:a7:
7a:9a:c4:a8:2d:97:68:73:b3:f8:48:d4:5e:1b:52:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:4E:59:FB:98:B7:D3:7E:BB:7C:03:16:0A:34:E5:B4:88:06:43
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:b7:5d:21:64:da:63:bb:0b:05:a6:8c:2d:ab:1d:78:b2:
bc:32:3a:a7:0d:90:b9:49:1e:86:2e:33:b8:f3:40:1d:ce:1d:
bc:29:ff:c8:90:70:ab:d9:84:2a:d5:6a:57:72:cb:e7:1e:3a:
cb:cb:15:d7:1a:8d:0d:cd:a1:0f:e5:12:97:88:0a:6f:27:5c:
75:91:de:80:3e:0c:97:38:44:b0:11:57:66:21:e8:39:9c:7d:
40:44:87:b6:e0:8f:20:3b:c6:50:bb:b9:6e:a9:18:44:37:b2:
cd:bc:ad:d6:5a:f2:ca:ee:13:72:04:0f:93:96:4c:cd:1c:c9:
65:0f:ab:a7:fa:d0:bf:78:8b:c8:7b:58:84:f1:e6:82:5d:c6:
73:cb:52:c1:ee:c4:7f:fc:20:97:8a:03:01:2b:bb:46:ae:2d:
90:1d:31:94:03:b1:60:58:e3:3d:49:7d:46:d2:10:a4:7b:49:
72:f4:e6:80:20:31:7e:67:98:87:28:c3:c9:66:b3:8c:22:e9:
fc:db:2b:98:c0:3a:b4:7d:5b:61:d6:d1:16:4a:28:e2:f6:f0:
73:83:96:1e:2d:e2:9c:e4:82:ba:4d:ca:e4:32:b7:77:90:9a:
a5:29:11:93:cb:a3:d7:74:7e:17:6c:b5:91:f6:3f:63:3f:65:
69:a8:12:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:24 2025 by rpki-client