Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: tYi4n51qJ470axiKWoVFBUzq9XWXdg89jgA3WSVZL1M=
Subject key identifier: E1:03:CA:BE:2F:BF:64:1E:F6:E9:C4:D7:59:B7:C7:C5:84:90:C0:B7
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 01992D473E69CD59CD765183723949375DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 160A
Signing time: Tue 09 Sep 2025 07:01:07 +0000
Manifest this update: Tue 09 Sep 2025 07:01:07 +0000
Manifest next update: Wed 10 Sep 2025 07:01:07 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: TsGPWd0fWlO5mJ2fABpcvgjWQhzUr8m8eST41v7j12U=)
2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=)
3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:3e:69:cd:59:cd:76:51:83:72:39:49:37:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Sep 9 07:01:07 2025 GMT
Not After : Sep 10 07:01:07 2025 GMT
Subject: CN=e103cabe2fbf641ef6e9c4d759b7c7c58490c0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:39:9a:8d:cb:6b:4f:8d:af:f2:07:fc:26:
0d:6d:43:25:91:3c:f4:05:70:eb:40:12:f2:ad:2e:
4d:94:83:d4:16:d0:fb:af:6d:83:c5:b1:c9:17:c0:
81:cf:1c:1d:76:50:61:9f:cf:57:e5:d2:07:5e:b2:
bd:e2:5d:0a:ad:e9:8c:36:a4:de:6f:b5:d3:fc:d1:
6c:b9:36:90:29:4b:c5:15:d8:88:9b:a4:db:94:a7:
44:0f:0b:35:a9:d7:46:ac:61:9b:29:1b:65:22:bb:
87:52:2c:b0:ce:62:6a:6f:c0:bc:cc:eb:21:b5:1b:
39:64:ce:0e:68:0d:94:e8:0c:50:73:fc:04:ae:c6:
d7:a4:68:c8:c2:a8:9b:de:2d:c1:7c:48:dd:51:97:
1c:f3:51:b1:a1:ee:e0:63:13:50:6e:fd:05:fb:cd:
07:62:40:0b:6c:e4:45:79:51:09:7c:0f:11:71:ef:
8d:45:9f:1b:b0:4d:c8:42:d4:7e:71:0b:00:a7:d3:
be:2a:7a:5e:70:17:9b:bc:9e:27:f1:10:47:ee:74:
34:75:77:d9:71:83:a8:20:8d:07:3c:26:1b:40:c0:
0d:a1:1a:7f:9d:56:39:d2:3a:5a:17:3a:b9:3f:02:
43:2d:d7:fa:1d:07:f2:8c:d9:24:88:48:cf:73:67:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:CA:BE:2F:BF:64:1E:F6:E9:C4:D7:59:B7:C7:C5:84:90:C0:B7
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ad:52:15:7d:11:bf:84:cf:60:2b:87:9e:1b:9f:6b:24:43:
98:34:ea:80:b2:66:16:18:86:aa:cb:cc:7a:9f:45:58:a7:6d:
c5:01:08:5b:e4:65:81:4a:c6:0b:e7:68:c4:e9:ef:34:65:7b:
19:e8:ea:3b:f2:24:e6:7c:f8:c5:28:41:9c:fa:f5:9f:f6:90:
5a:b4:78:52:2f:08:1b:30:e2:c5:71:bb:90:28:c4:99:df:7f:
bd:e6:11:07:ea:c1:42:fc:3d:84:f2:23:0c:1b:5d:1f:17:bd:
d8:39:45:a1:14:93:78:c6:85:22:a7:40:71:21:54:c9:41:50:
c1:b6:5b:81:b3:3c:d5:6f:36:21:c2:5c:07:81:c0:06:69:e7:
c6:12:57:e6:40:cc:80:07:97:16:da:48:3b:e4:5f:d6:07:2c:
dd:69:fb:ba:7c:a5:f3:ff:06:94:83:49:8e:8c:ba:a3:0a:98:
7f:a4:39:3d:8c:94:08:0f:66:97:09:b6:43:45:d3:70:ca:23:
95:67:97:33:ef:0d:72:7c:35:8a:7f:78:ac:ca:ce:e1:1d:ee:
8b:0c:a9:95:a7:3a:48:73:04:3f:db:a9:f6:f5:df:a7:6d:b4:
af:df:f5:30:26:9a:2e:a4:dc:ab:77:cd:27:0a:a3:06:13:5e:
72:04:4c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktRz5pzVnNdlGDcjlJN13FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx
MWUyMmEwHhcNMjUwOTA5MDcwMTA3WhcNMjUwOTEwMDcwMTA3WjAzMTEwLwYDVQQD
EyhlMTAzY2FiZTJmYmY2NDFlZjZlOWM0ZDc1OWI3YzdjNTg0OTBjMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ac5mo3La0+Nr/IH/CYNbUMlkTz0
BXDrQBLyrS5NlIPUFtD7r22DxbHJF8CBzxwddlBhn89X5dIHXrK94l0KremMNqTe
b7XT/NFsuTaQKUvFFdiIm6TblKdEDws1qddGrGGbKRtlIruHUiywzmJqb8C8zOsh
tRs5ZM4OaA2U6AxQc/wErsbXpGjIwqib3i3BfEjdUZcc81Gxoe7gYxNQbv0F+80H
YkALbORFeVEJfA8Rce+NRZ8bsE3IQtR+cQsAp9O+KnpecBebvJ4n8RBH7nQ0dXfZ
cYOoII0HPCYbQMANoRp/nVY50jpaFzq5PwJDLdf6HQfyjNkkiEjPc2fXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEDyr4vv2Qe9unE11m3x8WEkMC3MB8GA1UdIwQY
MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt
MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0
LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAra1SFX0R
v4TPYCuHnhufayRDmDTqgLJmFhiGqsvMep9FWKdtxQEIW+RlgUrGC+doxOnvNGV7
GejqO/Ik5nz4xShBnPr1n/aQWrR4Ui8IGzDixXG7kCjEmd9/veYRB+rBQvw9hPIj
DBtdHxe92DlFoRSTeMaFIqdAcSFUyUFQwbZbgbM81W82IcJcB4HABmnnxhJX5kDM
gAeXFtpIO+Rf1gcs3Wn7unyl8/8GlINJjoy6owqYf6Q5PYyUCA9mlwm2Q0XTcMoj
lWeXM+8Ncnw1in94rMrO4R3uiwyplac6SHMEP9up9vXfp220r9/1MCaaLqTcq3fN
JwqjBhNecgRM4w==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:57:47 2025 by rpki-client