Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: jxxLpeTGijz1ZD8/UT7QU6/QAxEJkex6boNb9zw6Kk4=
Subject key identifier: E7:2C:A5:9B:86:ED:D7:70:A5:FB:09:1F:C7:8F:D1:36:D3:A6:69:D5
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 019A71B8D3AEEC60D944BCDD40FF0A1B0F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: ge08iSH47Sr5rWevGwM0q+AaV2nd0CvlhL9eGLdD9e8=)
3: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
4: rVBQGtYXn7dN7Hzvs99f93cybKM.roa (hash: 8+qIyvEknSqH8tSbuYmjo7zBDDaVOwlEHrt8OpQOnnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d3:ae:ec:60:d9:44:bc:dd:40:ff:0a:1b:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=e72ca59b86edd770a5fb091fc78fd136d3a669d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:d7:57:20:aa:fc:84:a0:c2:de:d5:8a:7a:
ec:7f:f7:bc:52:50:14:40:bc:84:61:24:65:a8:bd:
29:89:9d:bd:5e:ec:70:52:6c:80:e6:7e:b3:ed:67:
4a:0d:50:88:26:89:b8:3b:e1:64:01:c7:b6:50:94:
3a:be:9b:a0:78:2d:96:d2:df:e3:61:07:75:f3:10:
38:c5:13:09:92:98:1f:24:aa:be:f5:cd:b6:eb:4a:
53:09:15:ca:8d:f1:b1:9f:bc:46:9d:01:8a:de:84:
52:2b:07:02:89:68:08:82:7e:37:34:2a:b9:5f:3d:
92:2c:1e:43:13:0e:5b:3b:b8:ed:1a:e5:fc:54:d8:
1a:1f:6c:31:5d:20:21:02:53:11:7f:fd:f7:a3:32:
2e:cd:36:9b:00:8c:1a:e7:40:d6:c2:08:76:27:2b:
ca:52:30:5a:61:98:be:40:b1:3f:88:ce:86:f3:d8:
5e:b2:ff:fe:ea:eb:e0:e0:6c:95:4c:aa:15:8d:58:
ad:5b:fa:ea:03:1e:7f:4a:d3:23:d8:34:8c:18:91:
0e:a3:0b:6e:35:8c:2a:eb:46:94:71:0f:e0:90:87:
fd:4b:1e:e0:db:ba:87:11:15:db:4e:2a:3b:9d:65:
ae:fa:45:dd:e0:11:06:1a:f8:2b:e0:aa:44:44:30:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2C:A5:9B:86:ED:D7:70:A5:FB:09:1F:C7:8F:D1:36:D3:A6:69:D5
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:84:bf:f7:9c:ce:e1:7e:cc:45:37:80:f5:1b:b7:0d:e7:b9:
eb:5d:4d:16:77:b5:4e:7f:5f:5f:69:e1:fb:9e:fc:9c:ed:96:
a5:fd:3e:0d:ad:68:10:67:4b:ee:e6:3b:f9:1c:49:61:3e:18:
82:36:53:cf:fc:e8:b8:32:5b:23:15:90:51:97:19:79:d1:7d:
88:fa:bd:1e:c8:9d:f7:c9:5b:f8:86:f4:02:f9:ab:ac:05:ab:
3f:1f:4f:d4:a5:10:05:22:54:e8:55:83:8a:7f:32:a6:68:4e:
f2:00:6f:b4:6b:9b:ad:0d:e2:c8:33:c2:c7:7d:0e:15:25:3c:
b6:b9:25:26:e7:cd:82:23:69:2b:e5:cc:d3:d1:b4:6f:d7:fb:
20:d0:92:4f:1b:e4:10:c1:55:96:23:1f:bf:9c:8a:d4:fc:27:
29:d9:80:23:39:22:e5:25:58:b5:c5:48:5b:34:b0:86:55:d4:
58:16:e5:ff:d6:b2:e1:86:76:1f:46:53:7c:5a:d1:f7:dd:26:
2d:dc:39:04:ce:4d:f7:18:65:7c:a8:33:51:e6:be:c7:bd:0f:
c5:24:da:3b:f0:b8:6f:09:3a:df:8b:62:25:0f:66:03:f7:1d:
3a:b7:a8:b8:aa:9a:34:df:00:16:d8:47:91:f4:46:c1:68:f9:
f1:09:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:06 2025 by rpki-client