Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: 3cn0IpS/9i9biviUE/oxam8aGjpvjyZp9RlGyuyiqRY=
Subject key identifier: C1:D3:6A:A7:DC:5B:45:45:CC:09:AF:CB:E2:68:19:6A:CD:6A:DB:98
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019922C35D72C2CB09564726554427B93BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 060C
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: DeE2YXE3GTJqY8c/RKQSz/E7vubh5HMbSYwUQ9ZVYC0=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5d:72:c2:cb:09:56:47:26:55:44:27:b9:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=c1d36aa7dc5b4545cc09afcbe268196acd6adb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:f3:1b:02:56:c8:9e:1f:a0:93:16:5f:7a:
78:0d:4f:73:c8:ab:cf:2d:6c:99:b3:dd:75:b4:cc:
ec:24:7c:9c:81:31:b8:9d:da:ba:00:cd:f8:32:e4:
0e:57:22:76:93:1d:cd:0b:44:48:b1:9b:2f:db:ce:
fc:53:2f:62:4a:01:46:b1:ad:78:32:3b:c7:31:ff:
c2:4e:31:75:c7:ce:bd:83:fb:4d:3d:64:25:76:30:
01:e6:c7:ce:b7:cd:f4:50:ec:e8:a6:53:96:32:fd:
82:be:2e:cf:db:98:f5:8d:f9:5c:07:b5:3a:b6:98:
93:e5:67:14:5c:03:a4:0c:cb:08:0b:91:4a:56:c8:
8e:5f:4c:b8:d7:68:63:4e:dc:bc:7b:bf:e7:86:73:
2d:9d:54:8d:c8:e9:fd:1a:80:79:f6:70:5f:b7:35:
12:6c:64:c0:03:28:0d:db:d2:e1:24:50:34:c2:6b:
2c:08:b8:6b:3e:d6:ab:36:06:ee:93:0e:3b:fd:cd:
43:ac:0c:e6:49:17:b3:b0:95:63:28:24:06:57:7f:
d9:d9:ef:9c:d7:80:a0:f7:23:b8:34:34:a8:e6:18:
91:53:47:9c:12:bb:52:49:fc:fe:ec:c0:f3:35:1d:
f4:38:b4:57:49:9f:8e:c5:8c:f6:1c:1d:cc:0f:19:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D3:6A:A7:DC:5B:45:45:CC:09:AF:CB:E2:68:19:6A:CD:6A:DB:98
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:72:23:57:3b:06:cd:11:1b:68:bd:d7:aa:b2:f6:3b:c1:
96:15:d5:18:00:01:b5:61:9e:2a:33:ab:30:6c:2e:e9:dd:65:
3f:52:72:76:9b:d7:f8:db:b1:d9:64:2f:73:d8:6d:28:83:79:
50:5c:d3:86:23:8d:31:fe:3c:5c:5f:46:18:06:d5:bf:7d:b2:
4a:1d:55:d4:d3:59:d4:21:38:63:0b:15:2a:3e:86:5a:87:8e:
ef:1f:76:1d:37:20:9d:ad:55:57:c7:9a:a7:d6:5c:f6:77:35:
87:48:9a:f0:47:59:df:cb:a0:08:61:8d:4d:4c:23:ff:61:d2:
cc:d5:14:ab:0c:06:c7:8e:04:06:80:fd:f7:ff:96:4f:0f:79:
78:b1:32:05:26:ad:b4:1a:6f:83:b4:9a:72:57:b0:36:58:5b:
d3:72:78:6b:15:7c:a2:6b:11:7b:c1:da:dd:12:57:e3:fd:c9:
d4:bd:8c:f1:b5:79:22:65:3e:e0:0b:c9:86:13:f4:d3:94:3e:
f2:a3:a0:82:12:a3:7f:a2:ad:79:d2:ab:8a:b7:30:ad:a4:3a:
22:c0:e7:e6:c2:54:13:00:01:03:81:45:80:a6:1f:b9:91:aa:
07:19:73:a7:01:9d:72:55:3b:bf:0b:55:3c:e0:f9:b2:7f:ca:
c5:54:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:36 2025 by rpki-client