Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: 9eZMaVb2/IAwopTsnSgKugdmrfqy0yJYqAi4cmN/X6E=
Subject key identifier: 3F:D2:84:40:50:C4:6E:7A:C2:90:9C:AB:32:D4:99:A3:AC:1D:EF:B0
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019A4E18CB7846AAE561C6F4A32DE10046E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 06A7
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: 1lEQj80dF2sSDRxur1ah5QYJUKBrqiT4oxL4glHelN0=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cb:78:46:aa:e5:61:c6:f4:a3:2d:e1:00:46:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=3fd2844050c46e7ac2909cab32d499a3ac1defb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:e6:dc:5d:ed:7b:d8:54:e3:4c:a0:e8:68:
5c:44:dc:c2:c5:cb:87:ff:93:83:f2:82:c7:68:c2:
0f:47:18:35:16:52:53:32:9f:18:20:c3:c3:d7:4d:
07:fe:ed:0c:74:1a:94:c2:dd:70:d3:f9:48:a5:41:
49:f7:68:27:c1:97:f7:62:a7:e3:66:67:3a:02:67:
cc:78:3a:62:28:88:38:79:c2:56:aa:60:5d:bb:06:
94:72:2c:23:70:6a:97:68:e6:8f:a6:20:2d:af:6f:
69:c9:a3:13:97:7a:f4:b9:39:f1:6f:05:94:d8:84:
ae:c7:a8:0d:e7:f4:12:0e:7d:95:ea:76:d0:9e:ff:
65:ef:60:73:43:7f:25:cd:3b:05:ba:ab:cc:8f:66:
68:b1:e2:fc:87:eb:77:7a:bc:f3:e4:bf:39:f9:de:
f3:59:18:0f:db:a7:58:a2:5e:96:ac:99:c8:4a:2b:
a8:72:08:98:81:05:06:10:2a:15:c1:40:61:43:9a:
0b:36:78:95:5b:2c:35:00:3e:e4:fb:31:68:aa:34:
4b:75:f8:c9:8f:0f:3d:3a:10:4c:5e:c8:82:12:87:
ce:77:72:9c:74:26:f7:1c:68:a6:73:05:91:ee:e5:
81:04:e7:5a:e0:6c:03:6b:3b:20:5a:0a:dd:ce:a1:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:84:40:50:C4:6E:7A:C2:90:9C:AB:32:D4:99:A3:AC:1D:EF:B0
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:23:d4:e8:32:25:e1:16:5f:b1:8f:cb:24:6c:89:c2:24:
84:04:f7:02:d0:60:c3:c2:41:51:47:3d:98:40:48:38:66:65:
38:51:5c:cf:2d:07:2e:35:cc:2a:78:da:8f:1d:68:4e:04:5a:
70:dc:79:95:9c:f6:65:6e:85:68:46:0f:be:a0:9b:2b:10:6c:
7d:ce:74:22:fc:95:d5:3a:d0:f2:11:b4:f8:fc:43:10:8a:02:
16:c4:79:a8:59:f0:81:65:b6:95:8a:a7:2c:6c:e8:5c:c2:31:
84:61:9a:01:dc:b8:36:f6:28:e8:47:0c:52:bc:4e:0f:84:80:
73:6f:a4:ba:cb:f4:90:65:ed:54:7f:ca:63:66:92:d7:4c:b4:
f8:9a:35:07:b7:f4:41:8b:4e:60:2c:59:03:dc:59:be:c9:3c:
28:1f:3f:cb:df:9b:ac:5c:e2:de:51:59:12:b1:b0:ab:19:4f:
a4:fe:05:e6:f9:cc:32:28:26:a0:cb:1a:b9:0c:c7:f9:2b:df:
32:cc:7f:90:3a:93:19:8c:f0:ac:b8:1f:c9:77:4f:3d:f1:93:
b5:3e:0a:72:e9:a8:ac:3e:73:b5:92:8c:ae:33:61:b4:25:0d:
05:b8:24:98:2d:44:d8:d1:65:36:b0:6b:08:74:c4:28:5c:6d:
f5:0b:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:25:56 2025 by rpki-client