Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: 1o+196g+bqJfnFUBKuWQ9NJTbj3dhrZ1+sHYba91oi0=
Subject key identifier: 98:63:D2:54:93:A0:E7:7F:DD:08:D5:FA:2D:D2:1B:16:5C:E9:12:5D
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 0199228CA2ACDE9AAFEC5013E952A53F5F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0E9A
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: j1D5uAGE2z3XwECKw/Nw4xNkkEOa6JMVg1Xz3UwAYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a2:ac:de:9a:af:ec:50:13:e9:52:a5:3f:5f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=9863d25493a0e77fdd08d5fa2dd21b165ce9125d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:35:b7:0f:7e:66:0b:4d:b3:39:0d:fe:96:
41:dc:1b:58:2d:2b:0e:07:67:32:25:72:7b:21:1c:
8d:56:fb:e4:ea:63:85:f8:e4:f7:2c:b2:35:e5:9d:
88:1a:92:a5:d3:0f:1b:43:d8:a2:f9:4d:f9:bf:5f:
45:d8:3e:36:11:89:30:1e:26:e5:20:92:7f:95:3d:
99:ed:1d:4d:9f:5e:a6:f1:b5:c4:bf:4f:e0:32:4c:
0c:72:2e:a0:3b:40:8b:cb:dd:65:d3:c7:71:70:c9:
85:9b:1a:31:a3:12:c8:72:a2:87:4a:40:23:62:35:
71:8c:d2:39:21:31:5d:6a:18:57:47:6a:ae:1b:a1:
9f:99:92:82:9d:e5:e0:fb:8e:73:e4:b5:15:c7:e6:
5f:ae:49:02:45:27:01:12:ee:9e:53:a3:e4:d5:c3:
0e:7f:1d:01:52:d0:bc:21:e3:05:ec:01:de:40:06:
59:10:f7:d7:bc:3c:49:e2:e9:aa:d3:87:f3:5c:26:
ed:4d:9c:61:a4:a4:cd:77:af:9b:c3:99:79:47:8b:
bf:9d:79:53:bd:90:2f:33:25:9a:51:55:a7:51:0f:
5c:a9:e9:64:9d:f7:f7:bf:f0:84:3c:df:d1:55:25:
4d:a2:3c:58:42:fb:61:7e:b9:dd:6a:f2:68:5f:f3:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:D2:54:93:A0:E7:7F:DD:08:D5:FA:2D:D2:1B:16:5C:E9:12:5D
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:59:69:e0:86:2f:39:9b:46:f7:a3:c8:2b:66:78:ec:28:4d:
6c:dd:71:8a:e8:b0:31:18:88:6f:aa:9d:82:e8:ff:92:e8:36:
6b:04:ae:70:49:3a:de:82:f7:9a:4f:8c:22:73:66:4d:5b:97:
c9:3f:d5:d1:7f:b9:22:67:be:a5:bb:cf:96:eb:27:a1:22:dc:
b5:9d:1e:85:40:ac:9f:b4:52:42:ce:29:59:dc:1a:bf:db:1d:
d8:e5:06:b5:e1:80:92:e3:16:39:91:59:3a:fa:2b:19:d1:cd:
62:eb:ca:21:17:15:f9:31:0e:5b:05:6b:cb:08:5b:d4:f4:1b:
e8:31:6c:a5:88:43:1d:87:bd:6c:21:1c:9c:59:f1:07:0a:d5:
2c:04:e9:86:9d:8b:f2:a9:a2:4e:5a:27:96:44:0c:20:d8:36:
cf:bb:8c:e0:57:41:e6:82:69:67:51:82:d0:ff:5d:ab:98:04:
aa:ec:2a:e4:38:d4:a1:91:59:53:eb:7c:d6:6d:67:7e:56:5b:
93:0e:fb:0d:ff:3f:d6:2a:e5:a7:0c:b1:0a:aa:f6:8f:14:b7:
1a:ea:6d:12:3f:42:b2:68:7e:5f:ad:54:e2:0e:52:8a:0c:c2:
9d:1d:23:b5:75:4e:63:0a:6a:0e:cb:c9:3c:8b:7e:50:56:23:
b5:64:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:59 2025 by rpki-client