Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: X3cmw0BMdSOj+deSgxu1z5+WE99FXdGJ2RLHSzpQFOE=
Subject key identifier: 78:8F:FF:C9:F7:E1:A2:4C:20:05:C4:A6:57:1B:98:BF:A4:38:AA:AA
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0199228CBEF1F18EBCCAB76FD0EEAF323F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: kEtmdTCKvRSXJYkw6w2twkYmfCEG6WbvSpK281KZj7g=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:be:f1:f1:8e:bc:ca:b7:6f:d0:ee:af:32:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=788fffc9f7e1a24c2005c4a6571b98bfa438aaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:ec:98:8b:13:69:e1:90:01:d5:69:b5:a3:
a7:56:95:4b:4c:64:02:e2:af:ec:db:17:22:c2:75:
e0:0b:0c:01:5a:60:b7:60:87:11:b3:4b:be:77:ad:
b8:f1:48:dc:7e:54:aa:40:6e:68:02:3b:62:ee:17:
10:7e:5d:1e:59:b5:28:09:c3:73:aa:22:0f:9c:44:
fa:55:0b:20:97:07:86:78:a7:fc:2e:96:ae:e6:53:
f7:2c:4d:41:0c:52:a1:cd:00:92:90:16:70:de:51:
71:30:05:4a:33:94:5c:ed:4a:d5:f7:39:ca:00:4c:
24:6f:f3:d3:78:ea:37:08:de:71:02:90:64:27:09:
fe:e1:3d:35:83:b3:7e:ac:0a:3f:c3:c6:03:25:9c:
7c:a5:bc:de:16:ba:18:2e:61:2e:8f:a3:59:aa:3e:
7b:c5:df:bc:45:a9:28:60:a6:f3:45:cf:48:66:ee:
a3:36:fd:e7:5f:f9:5c:b8:27:23:52:76:88:78:7c:
e6:ed:67:e4:bf:aa:6b:8f:08:b3:3a:b8:6a:50:29:
91:8b:08:0b:3c:38:48:e6:63:cf:a6:ab:be:b9:54:
44:25:b2:c2:db:b3:3c:5e:9b:1a:f2:d3:0f:d0:08:
d3:e4:0b:b7:94:28:d3:d7:67:88:6d:e0:cc:3a:3d:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:FF:C9:F7:E1:A2:4C:20:05:C4:A6:57:1B:98:BF:A4:38:AA:AA
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:27:3e:fb:df:cc:6f:1e:1d:67:7a:40:ff:a4:29:bc:d2:ab:
aa:85:a2:73:77:f7:8b:ca:04:f9:25:78:bb:d1:08:1e:1c:e3:
b0:14:6b:03:1f:3f:49:02:e6:b9:5b:cf:22:b4:16:04:33:3a:
53:e1:b9:7f:12:f0:e0:ad:d5:d6:be:7d:26:c0:3f:25:ac:9e:
fc:c6:6d:70:c6:6f:84:42:12:cf:a2:45:eb:50:7c:53:88:30:
f0:6e:c9:07:2d:1b:1e:df:1e:3d:b6:58:c9:e7:08:e3:c4:06:
d9:4f:13:c9:c2:b1:0e:4e:05:b0:8a:17:6e:c0:c1:5a:57:a6:
31:ae:03:99:79:6c:5b:2b:95:f2:a6:d3:3b:25:0c:8a:5e:6b:
9c:1d:a3:f0:04:dc:2a:3b:07:6d:cb:e5:28:cf:7c:52:09:0a:
a5:ac:00:e9:6e:e0:85:e9:57:0a:24:27:ae:ab:7c:2d:fd:ba:
f5:07:45:91:ce:2a:9f:ee:db:02:d0:2e:bd:fa:01:b7:6d:15:
1f:c2:8e:95:64:63:72:13:22:da:9a:cd:3e:47:56:8a:56:a2:
13:c0:c8:59:cc:dc:67:c9:a0:4f:bf:35:a7:31:da:bb:e6:23:
17:87:8b:37:17:64:66:ae:54:91:7f:ac:70:2c:c1:aa:de:72:
91:56:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:19 2025 by rpki-client