Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: O+rx47ZjQGeCCXubYYtYwDvLkrGg9w9GuvV1/4eT+Oc=
Subject key identifier: 03:EF:69:6F:FB:9D:72:9A:E4:84:3F:71:C5:86:BA:96:B6:CE:69:75
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 01992179598117EAE3A53AABDF06CDAF09B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: 42
Signing time: Sun 07 Sep 2025 00:00:24 +0000
Manifest this update: Sun 07 Sep 2025 00:00:24 +0000
Manifest next update: Mon 08 Sep 2025 00:00:24 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: C2C43ConRUuc6JE2XSvFH6shggIEMVGc+Kq+M2TING0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:79:59:81:17:ea:e3:a5:3a:ab:df:06:cd:af:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Sep 7 00:00:24 2025 GMT
Not After : Sep 8 00:00:24 2025 GMT
Subject: CN=03ef696ffb9d729ae4843f71c586ba96b6ce6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:cf:d0:09:36:bd:b4:28:6c:6d:15:aa:5b:
43:a7:ad:8d:48:54:a7:a2:cb:38:ed:9a:48:f2:1e:
0b:9a:2e:02:b2:50:8f:8d:a0:bb:98:43:59:71:47:
ac:85:58:e9:ea:88:42:ad:ea:10:97:eb:24:67:48:
1a:aa:67:b7:05:fb:a3:33:95:60:13:a5:af:09:62:
49:08:6c:1b:b2:87:29:79:74:bd:c5:87:01:cf:eb:
d6:43:f6:5b:64:99:dc:3f:63:eb:49:56:2c:70:ad:
dc:7f:18:30:7a:45:12:83:e6:81:9e:fa:93:55:f1:
4f:cb:f7:65:5b:1e:be:a7:b5:a2:8c:4c:8b:5f:be:
7c:3b:48:76:3a:a3:66:9a:67:81:44:2d:2a:da:51:
0f:4a:ab:3a:da:8f:09:23:03:28:2f:4b:8f:73:4f:
cb:e5:9f:c9:5a:6d:4e:55:9d:09:22:bc:09:5f:c8:
90:92:cc:ae:85:e6:4c:fe:88:5d:fc:1d:6a:ce:50:
14:0c:74:77:f0:e3:99:b6:df:7b:81:92:40:fc:10:
1d:db:44:7e:97:bc:9d:25:34:76:8f:20:3e:3e:eb:
9b:7d:33:70:d2:b9:e2:0d:d7:97:29:e9:0a:0b:b8:
1c:9c:ea:6f:9e:d5:52:e6:f8:87:4a:5d:8f:4d:73:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EF:69:6F:FB:9D:72:9A:E4:84:3F:71:C5:86:BA:96:B6:CE:69:75
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:a8:a9:84:8b:0a:8a:d2:78:37:f9:32:70:d2:74:c5:85:
2c:0e:78:92:c6:b9:78:5d:e1:79:af:5d:92:37:8c:fe:18:ce:
c9:b7:ad:23:3b:9a:5e:74:cb:b4:7c:15:fa:5d:41:8e:cb:ef:
09:b8:53:12:14:78:9f:86:28:69:d5:79:ec:d7:1a:0b:a5:aa:
1b:b7:eb:77:f4:8c:f0:cf:cc:b5:07:6c:e6:55:9f:65:27:34:
58:95:46:87:88:31:26:6d:9f:a3:72:cd:e2:c0:0e:fe:bd:86:
be:9d:6e:0d:cb:ff:b1:14:e6:5f:03:59:ed:01:ee:72:9a:81:
fb:9f:29:7c:fb:9d:b8:ef:d0:94:cf:63:f2:f7:f8:69:7d:43:
2f:88:0f:d2:23:d9:99:71:93:b0:a4:d8:1d:5d:d9:94:e0:45:
1e:24:60:e7:79:8c:67:04:db:ff:ac:b7:17:15:b5:b7:c2:bd:
43:6d:28:d2:37:96:46:7e:a0:f2:66:85:12:22:9a:ac:11:33:
a8:45:27:7b:fb:22:00:dc:eb:fb:18:5a:b3:c8:f7:41:9e:ec:
7b:b9:09:e3:1d:6e:a6:bf:40:cf:54:92:fd:84:65:69:78:a1:
4c:4f:6a:c8:0e:a8:85:14:0b:6e:1b:ad:b5:20:98:23:fe:f6:
32:ea:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:50 2025 by rpki-client