Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: 17667STWTKaUkXm4+LCbFmzax4FKLgf9S6De8fcmfAo=
Subject key identifier: FA:F0:9A:AF:9C:83:3A:50:B0:A6:C7:6F:7E:48:BF:52:3D:F0:81:0E
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 0198D583AFC21C9D84451AFEEC5B78F89890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 05E4
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: OEEsJ4SmaAWmdq6/acy+T5lyT7xtC/8/H4a2zZWbYiU=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:af:c2:1c:9d:84:45:1a:fe:ec:5b:78:f8:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=faf09aaf9c833a50b0a6c76f7e48bf523df0810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:b2:47:17:39:0c:a7:2d:a1:e3:7b:4b:e4:
62:5d:5e:a2:74:a7:92:4e:8b:72:b3:bc:3d:a4:86:
41:42:f5:85:85:5c:30:6f:66:d6:f0:a2:08:15:6e:
b4:f9:2f:45:a7:e7:03:ec:73:c1:a8:e0:09:37:74:
b5:d3:2d:32:99:94:4d:fc:e9:ca:df:c4:d2:54:f9:
6f:cc:f4:df:ce:94:22:07:bb:a3:49:d8:5a:f6:02:
d9:c7:fb:50:8a:41:ce:b2:22:1b:cd:16:5d:fe:fb:
46:eb:6e:28:8f:24:e7:61:2d:8b:34:1d:77:af:6a:
6e:d1:a7:d2:9c:a6:ef:a7:f2:f2:95:b9:7a:45:14:
ef:ef:03:2f:bc:ff:01:8b:6e:8d:c5:57:8e:ab:7e:
68:5d:a5:0e:c3:0e:3c:48:2c:b5:75:0f:dd:7e:73:
64:1f:e6:0d:cf:02:04:6f:a5:99:39:ac:50:e3:ed:
39:9c:c5:9f:f4:91:19:d9:67:25:83:29:a2:9b:70:
7f:b3:fa:38:39:7a:cb:87:7e:02:98:ee:2b:7d:10:
72:ea:1f:ae:ee:81:7f:94:60:53:17:19:1f:44:c9:
cc:ed:10:15:ee:ac:a7:3a:1b:20:ff:54:ab:49:77:
8b:5e:ce:37:75:c4:6e:a3:cb:b9:f2:cf:37:5d:ca:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F0:9A:AF:9C:83:3A:50:B0:A6:C7:6F:7E:48:BF:52:3D:F0:81:0E
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:38:4a:88:69:cb:b5:de:1f:de:d6:4d:46:79:80:dd:dc:03:
4b:61:4d:5d:90:fd:44:f6:54:bd:3a:90:8b:c5:c4:6a:d8:eb:
92:cb:32:2e:60:55:27:e0:5c:35:0f:57:cd:0e:6e:3d:81:0f:
f6:9f:f4:bc:3c:89:4b:37:29:19:ab:10:a5:7a:c6:0d:99:72:
3e:f7:75:60:39:35:24:6f:3f:48:32:d1:59:58:c2:a3:63:ab:
ba:05:17:23:7a:62:55:a2:1a:a0:50:35:7c:f6:c6:a3:3c:cc:
c2:13:a6:91:4d:20:c4:74:ac:b7:c0:55:15:23:bc:78:3c:58:
16:94:79:de:4e:1f:c6:f9:a0:6a:52:bc:56:c9:c0:07:57:06:
3e:e0:64:c5:1a:c0:08:73:ed:20:3d:f9:55:e9:8f:f9:36:9f:
e1:96:3f:9b:2c:b1:9b:81:09:cb:d2:4d:ac:3b:34:2b:b2:0f:
a2:ad:fa:2a:9e:6a:1e:4c:2f:11:09:2a:02:70:f5:b9:e6:2f:
f3:c2:17:6a:7d:2a:0a:3c:f5:4c:9e:dd:1d:3b:a2:65:ab:09:
99:86:cf:ba:52:29:d2:ad:5f:b4:85:7b:8e:01:15:3c:71:99:
f6:88:d0:a8:6b:24:0d:4e:2d:1b:34:6f:d6:51:b6:34:bf:2f:
a2:39:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:12 2025 by rpki-client