Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: +oULSob+IHb4B7aiJiJi1/+5lFfMGFUhOWThLKn8mxM=
Subject key identifier: A0:4B:63:B3:FA:80:4C:F6:02:34:E5:8C:78:72:DA:FD:45:D6:50:23
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 019A718096AD7BCB627B40580301176DAC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: F0
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: 8bjyQ8v86HhA2+JxCy3dw61YO+S3MLodcIzppcdjcmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:96:ad:7b:cb:62:7b:40:58:03:01:17:6d:ac:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=a04b63b3fa804cf60234e58c7872dafd45d65023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:d0:db:24:a7:47:c5:63:86:59:c1:48:d8:
ae:77:29:7a:0d:7b:a4:c6:5a:02:48:08:50:de:dd:
aa:9e:2e:fe:c0:f5:aa:56:46:3a:02:85:01:7e:9e:
c7:66:bd:6b:5a:f4:d8:b2:fa:cc:fa:2e:5e:56:f2:
16:f0:ae:1f:ff:94:90:54:af:a0:07:99:7c:62:0c:
06:bd:25:8a:ae:c3:d1:59:ed:ff:93:f9:88:f8:3d:
0b:a2:74:b5:ef:7d:79:49:a8:c1:0a:85:34:40:5b:
56:e4:33:73:51:28:af:6a:ec:45:89:a0:ec:b7:8a:
41:00:69:32:ae:87:76:90:10:3e:eb:94:00:1c:88:
08:2e:40:be:e2:ce:61:6a:9e:6f:a1:5f:47:70:ec:
c2:04:e9:04:94:15:dd:11:d5:34:3a:6e:86:62:ce:
f8:c7:11:fe:b1:38:d5:bb:b5:bf:da:2b:7e:af:87:
a9:77:eb:61:83:7c:f7:bc:d8:f8:52:b5:72:01:66:
f1:40:ff:4a:70:ca:2c:50:77:bd:69:fd:1e:b9:c0:
90:78:80:f2:06:2b:52:7d:59:95:83:17:1d:e9:04:
34:b9:d4:53:ac:d9:31:83:93:b9:fb:1e:d9:8c:71:
53:22:a5:43:c4:b2:86:71:3d:e9:e5:17:c6:02:00:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:63:B3:FA:80:4C:F6:02:34:E5:8C:78:72:DA:FD:45:D6:50:23
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:37:35:3a:96:0d:0b:61:34:51:c4:2b:7b:aa:4c:e1:a5:58:
bb:2a:36:9b:71:d5:c4:d0:da:6c:92:0d:46:85:cc:c8:32:7f:
a7:40:e1:6a:48:8b:1f:1e:71:11:15:c8:68:31:f5:93:b0:2a:
29:2c:21:19:55:d6:84:b4:2b:4b:79:dc:4c:68:3b:a9:34:b3:
d7:65:31:f7:ca:ff:1c:f0:4f:c3:ad:fd:7d:bf:98:3f:98:ff:
6e:f7:ef:fc:d4:30:19:b7:9f:fd:b7:ae:de:70:2b:3a:e6:d7:
7f:17:ac:0b:4a:b5:74:59:a7:16:eb:9f:bc:c5:d0:30:97:5c:
98:10:66:95:07:0b:88:05:b8:90:dd:14:e6:62:80:d8:4a:9e:
59:bf:2f:19:25:e2:bb:d5:13:1b:bf:89:83:c9:13:2a:6c:89:
a6:c8:1d:00:15:fd:00:9b:fa:81:34:1c:0b:2c:d3:4d:ea:11:
aa:6c:f0:9a:40:75:8c:08:1a:da:9b:3f:fd:56:1f:4d:03:db:
93:35:e1:37:f6:3a:87:37:b8:d7:ae:36:07:33:c5:de:65:7f:
ac:c6:f5:52:7b:c2:ef:20:f4:9a:20:b1:b9:c2:1e:6d:ea:1d:
65:38:34:65:69:02:b9:e4:46:a1:08:f3:6c:a1:a9:ed:db:a1:
2e:f9:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client