Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: Q4rtS9FaKQfqqP9KENPMmJel6Fu1p9fWL99ExnY/20c=
Subject key identifier: 56:28:F7:47:31:FE:70:35:0B:5A:CE:C3:C6:39:C2:34:53:6E:64:F5
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 019A70A4F14340EB157878ABA12A6A1D905B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0F47
Signing time: Tue 11 Nov 2025 02:00:49 +0000
Manifest this update: Tue 11 Nov 2025 02:00:49 +0000
Manifest next update: Wed 12 Nov 2025 02:00:49 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: IKAy02Z0+f6PkKayBmDUboxN7YtS/qdT0QlhOarmXo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f1:43:40:eb:15:78:78:ab:a1:2a:6a:1d:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Nov 11 02:00:49 2025 GMT
Not After : Nov 12 02:00:49 2025 GMT
Subject: CN=5628f74731fe70350b5acec3c639c234536e64f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:6a:95:11:af:e5:7b:cc:b6:3a:d9:87:af:
97:13:53:09:3a:93:e9:b2:86:0c:9a:21:83:b4:40:
32:55:eb:44:29:83:60:33:b1:25:3b:8c:be:c1:81:
99:2f:5f:6b:c8:fa:30:60:c1:94:c6:ca:2b:d8:ff:
e8:8e:4f:c9:61:a7:3b:ac:d2:f4:62:e3:1e:a0:24:
af:9d:5a:01:16:dd:a2:f5:a0:86:01:83:28:c6:2f:
ed:d4:23:12:25:72:3d:a0:da:ef:ba:06:dc:bf:37:
04:85:d4:db:0e:ec:26:5e:4f:03:67:da:fe:18:66:
39:21:15:c2:63:ce:0a:10:79:fb:e2:7c:fe:9e:6e:
06:91:1e:d4:67:7e:31:41:ef:23:c1:f9:4a:81:1a:
16:9d:86:4c:e8:b6:31:85:16:9d:5c:03:6e:e6:6c:
04:46:f4:27:89:8f:e4:09:81:07:d3:88:8d:38:7f:
63:68:03:0a:29:6d:16:e2:15:5c:0b:4d:0e:28:c2:
d2:8a:a5:e2:4d:d6:13:80:a6:2f:95:0d:29:8a:9e:
ca:44:45:35:67:b1:01:0c:60:b0:1c:7b:ff:d7:8b:
00:1b:bc:3a:46:26:fa:79:75:1b:16:ae:42:1f:6a:
13:d4:fc:ac:05:91:7e:fe:af:8f:24:af:14:05:bd:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:28:F7:47:31:FE:70:35:0B:5A:CE:C3:C6:39:C2:34:53:6E:64:F5
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:6c:40:99:76:d3:c8:17:1e:6f:84:c4:18:0c:4c:ed:ce:
cd:0f:b7:e5:44:7a:47:9c:6d:40:19:c1:1a:76:16:d0:00:9a:
32:c0:8f:4d:34:01:1d:39:b8:4c:9f:23:c9:5b:84:f5:6c:f6:
22:5f:f0:c6:cd:6c:7c:ee:e2:b9:3c:88:5d:f1:08:92:b4:18:
ce:6a:79:cf:7f:a6:8e:73:e2:a0:5c:e7:55:dc:aa:14:56:24:
70:c9:54:48:6a:15:e6:19:26:df:24:63:f2:3f:56:9f:96:5b:
61:d2:27:b4:98:c6:36:cc:dd:06:a5:e4:e8:20:ba:a7:3f:77:
ef:a3:36:ff:ff:30:6d:67:08:40:eb:c6:e4:8e:5c:ea:81:39:
65:98:20:89:80:56:c7:d8:3e:e8:4e:b3:60:56:56:f6:e2:98:
86:ac:73:c5:64:d4:1b:56:fb:e6:30:fe:65:68:86:de:0f:a4:
f2:a3:a3:94:e4:e8:25:a9:ec:df:49:3d:f4:9c:9d:df:7a:fc:
cb:92:30:0a:3c:a4:14:d1:55:35:ff:83:b0:43:d4:65:7f:6b:
32:d1:94:26:e2:00:d3:d3:ec:f8:ab:05:37:05:e4:1e:da:f0:
23:3b:46:7c:f2:16:3a:31:8c:47:47:fd:37:50:b1:40:41:29:
5d:30:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:56 2025 by rpki-client