Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: LNkWKr41TU32dAER5zi4nGhdftCYTvSunNiHYvHN9OE=
Subject key identifier: 42:AA:0D:D0:0D:D0:92:10:90:91:EC:F0:25:DD:89:6B:FD:23:9E:AC
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 0197B5C515593F51E7F8F894274185AF435C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 054F
Signing time: Sat 28 Jun 2025 09:01:21 +0000
Manifest this update: Sat 28 Jun 2025 09:01:21 +0000
Manifest next update: Sun 29 Jun 2025 09:01:21 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: d4GkygKXn99WKECXv4G5RRPOtkb8qHYVBbvJN1wnb6c=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:15:59:3f:51:e7:f8:f8:94:27:41:85:af:43:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jun 28 09:01:21 2025 GMT
Not After : Jun 29 09:01:21 2025 GMT
Subject: CN=42aa0dd00dd092109091ecf025dd896bfd239eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:25:32:73:aa:63:50:56:76:77:51:b6:07:
50:76:e3:66:3b:c5:d3:b2:17:35:5f:4f:49:cd:a4:
19:81:62:48:f2:1b:e9:05:43:fb:fc:eb:b5:8f:ec:
3b:25:34:86:04:a9:f3:a0:91:d2:ad:65:96:8b:00:
a1:53:f9:01:88:cc:24:04:a4:73:71:4b:17:2c:b0:
8b:59:d9:67:5b:4e:ff:4c:72:0c:e0:b0:23:22:db:
91:eb:7a:28:2a:6f:2e:c9:ac:21:fb:ce:45:2b:42:
1d:f8:f1:59:b1:b3:39:7f:08:67:29:d3:bb:20:c8:
d1:12:c9:6f:24:c9:f9:de:26:07:aa:64:10:3d:99:
ae:fd:db:39:47:35:50:b5:21:7a:1d:e7:39:70:08:
dc:7f:1e:34:a7:81:2d:38:13:c0:82:68:67:ad:66:
2a:b1:80:36:b4:92:d1:99:70:d1:8d:42:48:a6:bd:
ce:ae:18:54:30:ff:66:8c:0d:3b:96:80:d9:59:04:
9a:7f:d0:0d:bf:b0:0d:71:f6:f2:3d:d4:94:45:ac:
a5:bc:64:0c:8a:36:25:08:82:f2:3a:54:2e:96:03:
6a:52:0f:e7:61:84:49:20:db:a8:6d:71:81:5d:b9:
12:a2:3c:e2:e0:91:4e:f4:a9:97:6e:54:27:fe:e2:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:0D:D0:0D:D0:92:10:90:91:EC:F0:25:DD:89:6B:FD:23:9E:AC
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c8:5d:8f:bd:ad:bc:61:4c:40:04:9a:f4:fe:4d:5e:96:70:
8d:ef:29:ef:a3:a0:a2:90:4a:ac:35:92:aa:48:9d:7c:76:54:
fd:80:4b:66:b8:3e:a5:61:71:d4:d1:75:69:4a:90:bc:c6:63:
8f:00:d9:0d:43:05:2b:1c:02:05:a0:25:a2:42:58:90:5e:e8:
70:c2:6c:4b:c9:9e:39:41:4d:9d:01:ed:ea:c3:4a:ad:69:cf:
76:f1:e6:7d:87:83:da:47:ab:b6:a3:50:cc:f7:db:46:0a:70:
0b:99:cb:0a:57:8a:39:0f:66:ef:fd:03:fb:34:97:9d:da:5f:
22:28:7f:b8:18:90:17:87:05:bb:f6:69:03:44:8a:77:9d:8a:
61:1e:64:e7:e4:79:04:4b:e0:05:9d:2b:39:a8:2d:2f:2b:ac:
8a:42:87:fe:74:a2:71:fc:64:97:f6:49:8d:50:f3:56:cf:44:
be:c8:15:b2:38:44:4e:fa:47:73:3c:22:d7:26:d4:92:20:ea:
90:a8:95:34:52:8b:05:18:30:71:cf:b9:02:48:24:30:7a:13:
b7:a7:43:b9:50:4c:30:b8:82:c6:b9:6e:78:91:e2:24:6c:7b:
a0:e4:d6:7b:a7:eb:05:aa:08:e5:95:82:e2:08:06:b1:76:50:
46:74:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:24 2025 by rpki-client