
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: R+gzk6tvF7CNCMpHVcfnIz5PiEKI3sRrZREyu95QQqM=
Subject key identifier: 68:DA:75:18:2B:7A:C6:7E:25:40:C0:3B:90:B8:74:89:38:8B:3A:62
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 0199FB0F38A527F8F834A5589860F8B820E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 067C
Signing time: Sun 19 Oct 2025 06:01:42 +0000
Manifest this update: Sun 19 Oct 2025 06:01:42 +0000
Manifest next update: Mon 20 Oct 2025 06:01:42 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: DzxejZW09mb1oM6PkEFPln4bPJyY8aVHcoCUSj7QIQA=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:38:a5:27:f8:f8:34:a5:58:98:60:f8:b8:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Oct 19 06:01:42 2025 GMT
Not After : Oct 20 06:01:42 2025 GMT
Subject: CN=68da75182b7ac67e2540c03b90b87489388b3a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:28:87:df:f1:70:2b:b4:5d:fc:a2:11:38:
ad:61:48:95:93:1b:34:f9:b6:73:eb:66:4b:4f:07:
ed:38:d2:a7:74:62:4c:ee:3c:ce:be:59:f6:5f:66:
73:99:2b:76:99:32:0c:b9:83:d4:1a:b0:0b:c5:2c:
0c:3d:a3:07:91:e6:f7:b1:fe:28:94:f8:89:01:04:
8a:0b:bd:f5:c1:10:01:07:c1:a8:2b:97:4c:8b:15:
fc:07:b0:ff:c0:41:8e:94:78:9d:a4:61:ae:77:6d:
68:e9:a8:2f:2a:b3:83:8f:40:90:e1:26:9f:c8:8e:
7e:8c:d8:82:cf:cc:10:37:2f:a9:0d:c7:a8:26:40:
a2:af:8c:02:de:06:36:0c:f3:2b:a9:9c:dc:37:0c:
88:d9:1f:99:09:59:6e:5d:5c:ea:60:dc:93:96:08:
b3:b6:8a:4c:61:c6:42:38:93:ea:ab:4b:a7:8a:a5:
44:5d:e8:61:1b:bf:26:8d:89:29:86:05:49:3a:09:
e1:5d:e8:37:27:4e:7b:ec:ef:93:e3:ec:bc:7e:b9:
f7:b1:a1:b2:59:71:04:0c:9b:3e:8f:90:6d:ca:01:
78:b4:49:aa:4c:93:93:30:28:bb:04:b0:05:ef:67:
ea:57:64:f7:b3:b3:3f:7b:96:be:2a:5e:66:83:9b:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:75:18:2B:7A:C6:7E:25:40:C0:3B:90:B8:74:89:38:8B:3A:62
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:22:78:d4:01:dc:e3:67:a6:93:34:e8:7d:65:c3:29:fa:a9:
ee:36:d8:60:fc:dc:ee:81:25:3f:56:2f:81:6d:c3:90:9c:3c:
cb:f4:8a:86:18:3f:51:b0:38:06:c0:00:bc:de:bb:4f:7e:dd:
f9:f9:ef:29:41:a8:a7:66:2f:70:64:f4:d3:2e:8a:dc:9d:c4:
33:16:4a:bd:38:c9:ac:e8:fa:20:f5:e2:1f:b7:b9:dc:d3:b5:
0c:67:1b:9a:ef:da:bc:6b:5b:55:fe:d2:78:9a:1b:50:6c:16:
0e:6f:62:fd:ab:2e:a4:b7:42:a6:66:a3:3d:c4:c0:77:dd:d5:
47:2b:48:0e:a5:1d:5e:40:67:d9:df:37:6c:8d:e0:01:78:48:
13:20:e6:72:5d:74:51:77:f5:cf:04:35:07:dc:60:16:7e:e9:
6a:5b:e1:44:3e:a7:c7:ae:c7:30:e6:d2:82:c1:53:cf:cf:78:
ca:b2:d8:ad:f9:30:ff:7d:a1:6d:00:86:88:0c:eb:9a:b0:18:
41:ae:c3:3a:04:7d:55:17:00:9c:df:b2:0e:5e:4c:f5:b0:e5:
10:9c:da:a3:8d:fb:2c:13:3b:6c:e2:75:41:92:e2:97:d3:11:
e7:52:a7:12:e6:fc:a3:3b:f7:d2:df:ff:22:1c:93:61:57:20:
a0:cc:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:07 2025 by rpki-client