Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: Gp7RIjvmdYW+UqTqbs+fztbTD2UtX8qNtyCW0S3qSC4=
Subject key identifier: 12:F9:6F:00:C9:33:8B:02:BC:E5:C5:FA:AB:6D:9B:7D:BC:AE:C8:19
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 019A228A2299F31252685CA7511FF1A08F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1689
Signing time: Sun 26 Oct 2025 22:01:09 +0000
Manifest this update: Sun 26 Oct 2025 22:01:09 +0000
Manifest next update: Mon 27 Oct 2025 22:01:09 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: cxa5XrO5nn8gctzvRJD5cGEZIqPceFve9rXj36hs72g=)
2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=)
3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:22:99:f3:12:52:68:5c:a7:51:1f:f1:a0:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Oct 26 22:01:09 2025 GMT
Not After : Oct 27 22:01:09 2025 GMT
Subject: CN=12f96f00c9338b02bce5c5faab6d9b7dbcaec819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:87:da:7e:28:c4:fc:df:c3:f5:03:95:eb:
0a:65:9d:44:ba:e1:05:2b:25:9d:66:af:7e:23:f6:
95:81:9b:d0:df:26:81:5f:6d:00:c9:ca:f9:ab:c8:
b4:4f:9d:fd:23:21:0c:07:9c:41:1c:a8:1c:04:cc:
ff:7f:0f:27:c0:33:53:cb:e4:d4:10:99:17:2e:b5:
99:cf:dc:bc:25:b4:11:08:be:89:bb:e7:34:5d:0b:
36:43:3e:dd:52:38:28:62:f2:06:c2:e3:22:e0:73:
36:a3:d5:24:e2:00:0e:23:88:f9:e3:1b:7e:c5:3a:
67:1f:17:97:20:cf:33:00:99:fe:2a:f3:eb:4f:4e:
d1:59:76:d3:aa:70:aa:93:f0:e5:7f:49:7d:6c:7c:
65:12:b4:2b:da:c0:a4:9c:82:ce:12:07:82:cb:ca:
e3:28:dc:fb:98:41:10:49:82:ee:06:fa:7e:17:d2:
e2:ed:ee:23:1c:74:12:21:77:bd:94:b3:ee:a8:96:
2d:27:13:50:61:04:4a:21:a8:2f:8f:d5:9f:a8:79:
2e:2a:d0:1b:9a:7b:dd:30:e2:41:e4:d0:b0:ba:63:
a1:b4:23:7a:41:f3:61:2f:2e:98:f6:dd:c3:f0:ca:
52:76:ca:21:14:44:5e:d9:77:a0:3f:ba:ad:0a:16:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:6F:00:C9:33:8B:02:BC:E5:C5:FA:AB:6D:9B:7D:BC:AE:C8:19
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:75:b0:ea:39:9b:95:d1:77:11:68:e0:52:9e:37:28:de:fd:
be:2f:93:a5:4a:bd:2b:79:18:89:34:14:c5:9d:02:49:e2:2e:
82:c4:f9:b4:29:f6:3c:3d:10:25:e2:8f:a1:fa:28:79:ce:c7:
a9:7e:69:dd:34:2f:61:b8:bd:f8:f5:dc:bb:49:b0:f8:8e:9e:
9d:83:6f:0f:45:aa:dc:4a:30:f3:7e:20:8e:f7:43:34:93:f3:
9b:c1:74:cf:bb:bf:0b:8d:9e:4d:6c:8b:f1:ec:62:fc:99:bc:
f5:8a:73:d3:b9:98:3e:d8:01:6f:ac:80:36:72:41:82:1b:3c:
84:9d:a9:a1:63:9b:94:fc:11:a5:55:7a:16:68:d4:40:ff:a4:
44:09:6d:a2:8a:38:ca:46:6c:39:db:a5:87:40:bb:75:fa:12:
73:14:8f:fc:75:8c:c2:93:18:c0:60:57:c0:3b:9f:1a:6f:46:
61:23:fd:5a:29:5b:ee:80:d4:1c:dd:ab:b8:79:3e:44:11:3c:
c8:4c:fb:e4:50:67:be:92:74:0b:33:db:16:35:bd:26:f3:87:
8b:ce:2a:0e:ba:bf:5f:58:5f:86:c6:cd:d7:7d:b6:ce:83:ee:
a2:4e:80:83:74:24:9e:9f:d6:e2:b4:dc:70:52:47:ba:9b:c6:
93:16:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:17 2025 by rpki-client