Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier: qNaQpOTMPhmKWbvSMKrvC0VA0v78/8wTXFVq//0bVDg=
Subject key identifier: 07:61:D7:21:47:F8:7A:D2:93:78:00:22:B7:21:E2:0F:55:DA:EA:E7
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial: 019A1D2C8B5DD3C99718703D3B0D9A0B44CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number: 10
Signing time: Sat 25 Oct 2025 21:00:49 +0000
Manifest this update: Sat 25 Oct 2025 21:00:49 +0000
Manifest next update: Sun 26 Oct 2025 21:00:49 +0000
Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: YgLShsMRI+ZwEMUhOwHfhm4xBF92jrW6Rub/3dduSNc=)
2: jf136iTXxi12Hjt-tW87j6RLunU.roa (hash: Y2zqrXOARQyWLcKRC6gUKA6rctKZc3uE4RdzoYUkrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:8b:5d:d3:c9:97:18:70:3d:3b:0d:9a:0b:44:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Validity
Not Before: Oct 25 21:00:49 2025 GMT
Not After : Oct 26 21:00:49 2025 GMT
Subject: CN=0761d72147f87ad293780022b721e20f55daeae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:7a:b8:fc:5c:eb:22:85:73:4b:4a:1a:35:
b1:7f:7b:a6:a8:b4:d1:51:f8:ab:e9:d6:14:78:b8:
c0:eb:46:af:79:f1:a4:2d:2f:3c:5d:05:b7:92:01:
a7:d7:ad:e1:80:85:43:3f:da:02:ee:40:4b:c7:00:
76:4b:73:9d:dc:12:72:00:7a:df:7d:e7:96:fb:bb:
c0:c3:2e:98:51:47:f4:2d:70:d4:74:ea:a2:7a:13:
22:f0:64:a8:59:36:fc:ca:11:d4:45:1d:a1:fa:5a:
96:b9:26:b4:8c:56:d7:41:a0:3a:a4:44:d7:59:e0:
0f:be:b6:61:ff:5d:d5:51:38:95:5e:be:02:21:ba:
0f:17:27:f0:ee:5a:2a:bf:3f:97:c6:f3:b3:99:3a:
fa:40:44:c7:96:e0:7a:71:87:21:19:76:e5:ba:2b:
ee:04:fd:35:cf:b0:d4:f4:44:fc:2c:65:6f:10:12:
9a:90:b7:ff:62:51:bb:0f:e8:9b:d0:64:5d:5f:00:
e1:a1:f9:0b:6c:95:0d:67:25:6e:cb:c3:cf:5b:8e:
42:4a:26:41:3d:38:e4:27:40:1c:bc:be:f5:26:6b:
e4:4f:c8:1a:dd:41:bf:0c:e0:56:06:54:e1:df:ab:
2f:15:e5:af:02:01:39:b4:e8:4f:d0:f1:ce:5c:88:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:D7:21:47:F8:7A:D2:93:78:00:22:B7:21:E2:0F:55:DA:EA:E7
X509v3 Authority Key Identifier:
keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c3:4e:c1:da:41:51:e6:9e:40:60:db:a5:63:fc:7c:c2:3b:
4e:ba:28:fa:fa:77:dc:46:37:bf:91:06:69:8f:6d:59:d6:d1:
02:29:e9:50:11:e5:ab:c6:2c:c6:e4:6b:38:4b:e4:e5:ef:b0:
6e:29:36:7f:ec:bf:64:12:62:cf:df:d5:10:dd:69:0e:34:65:
bc:b0:da:35:9e:58:11:e9:95:67:48:e1:4a:67:06:6f:6f:e0:
7e:c4:55:9b:20:da:39:3c:19:90:66:70:51:94:82:da:b7:49:
04:29:5f:9f:1b:fb:3d:02:ab:51:8e:c4:e8:29:d9:a5:9e:9c:
c1:b4:5c:83:7a:b2:38:11:5b:5c:aa:cc:71:cb:ec:2e:86:1f:
08:5a:a0:a5:1b:30:ed:8f:0d:1f:01:1c:a1:06:6c:a2:60:f3:
c3:0f:a6:e0:d6:c8:15:0c:46:a3:6a:f9:90:b7:21:14:39:4c:
0f:0d:a0:ab:a3:83:0d:ff:f4:03:20:9a:02:bd:bd:6d:2a:b6:
ad:95:43:94:5e:20:54:aa:fb:f1:31:c5:01:f9:47:6a:94:92:
82:8a:ed:37:3b:ea:1e:c5:bc:37:bc:5f:c2:18:74:27:51:c6:
2f:45:2f:aa:27:1a:ff:1c:90:7a:ee:bd:bf:3e:5e:eb:5f:b2:
6f:ec:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:08:34 2025 by rpki-client