Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: B6+tzxPqpiYO03iRrp4A3srp8WaM9UT0DRrdazfnQKg=
Subject key identifier: BD:1C:85:11:A4:36:D4:B6:27:22:2B:06:39:37:85:88:42:4E:12:52
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 019846640B37C28E294E3B412ACBA61637E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 11:00:18 +0000
Manifest this update: Sat 26 Jul 2025 11:00:18 +0000
Manifest next update: Sun 27 Jul 2025 11:00:18 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: 2Ag1BI659NBTZJ97JWG5dURN6X1pCW4dzShROxrEjBE=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:0b:37:c2:8e:29:4e:3b:41:2a:cb:a6:16:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jul 26 11:00:18 2025 GMT
Not After : Jul 27 11:00:18 2025 GMT
Subject: CN=bd1c8511a436d4b627222b0639378588424e1252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:fc:ef:13:85:9d:8a:6c:8d:f4:3c:b4:2e:
48:9c:e8:06:16:4f:1c:a7:7b:bb:1a:67:48:0d:ef:
af:ed:ad:59:fa:f6:53:c4:10:6f:5a:66:b9:56:29:
8f:b0:fb:f9:12:d3:19:32:3a:d4:00:c9:9a:da:13:
ef:dd:64:58:ed:c2:7d:25:0d:44:86:d0:13:45:15:
72:3c:99:3c:ac:44:7f:41:66:16:a1:0d:1c:e4:6e:
8c:eb:6f:0b:df:12:bd:a8:d5:5a:2c:d6:47:8f:f3:
d3:23:30:ba:df:1a:17:97:1e:ea:b3:46:90:48:09:
c8:bb:cd:6e:6a:4e:1f:1a:a2:7e:71:84:04:fc:e1:
49:c9:e1:c9:06:78:82:77:0a:17:6b:21:9b:65:03:
95:bd:8d:9f:83:fb:71:83:39:8c:4c:5d:ee:1b:da:
23:a9:b2:39:db:76:d4:d1:3c:89:37:e3:c8:d7:c9:
3c:47:76:c2:47:5c:4e:2f:06:5b:9e:4d:97:50:73:
78:87:d2:c8:bb:6b:7e:b4:5d:e8:15:99:93:c2:7b:
91:58:a1:ff:09:65:fc:f0:6a:11:90:86:a3:41:dd:
27:a5:78:65:05:b3:cd:11:76:85:7e:98:4f:d8:ec:
72:10:23:f2:c4:39:36:22:60:69:ae:e3:da:af:71:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:85:11:A4:36:D4:B6:27:22:2B:06:39:37:85:88:42:4E:12:52
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4c:15:fc:2b:8a:99:32:de:99:f4:eb:50:79:34:e2:44:1d:
fe:21:e5:41:83:ce:be:dc:e8:12:f8:90:95:8d:92:f2:85:31:
f1:a0:52:d8:e3:ba:5c:e3:b0:94:02:26:92:04:e3:61:72:a9:
bc:f3:96:05:1c:24:10:e1:3e:65:6e:71:10:0d:d9:0d:a8:4e:
27:5a:99:a8:b7:04:4d:9d:3b:28:68:93:ec:b5:5d:5a:7b:0f:
2a:0f:48:f5:04:92:1a:8c:9a:6a:ac:1a:a1:1a:2c:11:f4:fe:
2c:d6:7c:90:d5:e0:06:0d:52:99:bc:69:f6:1d:f5:04:8d:b3:
1c:51:bd:f4:3b:1e:d1:5b:a3:8c:c0:7f:4c:9f:c5:a3:8a:c5:
b4:38:42:2e:24:b8:fc:2b:e0:04:58:ca:3d:94:92:00:43:49:
a7:b0:ef:8e:cc:3f:1a:c9:e0:ed:77:cb:ba:66:47:da:2c:c4:
5e:32:fa:7e:bf:4d:31:12:05:6b:97:44:c4:1a:5d:58:00:aa:
d8:33:79:d4:b4:ff:91:22:d2:91:8b:6b:53:98:7f:7b:2d:81:
07:fb:a5:24:7e:25:30:e2:93:2d:f6:fc:0e:5d:f9:2b:be:10:
c9:a2:ec:66:72:7f:9b:a7:27:bd:40:cf:fa:94:12:f5:75:7d:
40:e9:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:32 2025 by rpki-client