Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: b1B+DS5P9o+AWRJ24QJAzS5Y0d/8nxEA+l2Ihj4xgtg=
Subject key identifier: 57:5A:46:03:31:C9:05:C6:DA:43:80:0D:13:79:B1:50:E3:CA:A3:04
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 0199FCFD9572F4FE9D0F584E94AE72E58DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 16A4
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: 3tDWoeHicJtTQjoeG2o3FPGShtmCd9XOVG1uaVN7sxU=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:95:72:f4:fe:9d:0f:58:4e:94:ae:72:e5:8d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=575a460331c905c6da43800d1379b150e3caa304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:48:64:46:18:ed:69:5f:66:59:83:a9:92:
61:72:21:30:89:9d:f7:6f:b8:be:66:a0:06:06:52:
9d:0d:6e:bb:f6:8d:99:7b:58:d6:e3:51:7c:98:07:
b9:d7:bd:dd:22:77:89:2f:c5:28:b3:3e:bd:6a:93:
0a:32:52:fb:df:ac:26:2f:51:33:31:82:2c:f2:8b:
4c:24:92:f0:4a:e5:3a:d0:42:b8:fd:c3:af:0f:2a:
72:a5:01:f9:35:d4:c8:4a:fe:24:2e:32:6b:1d:f8:
42:e1:c0:84:bf:8b:12:40:92:30:76:98:75:99:7d:
20:7e:b3:6c:37:62:b9:94:c0:04:80:78:1f:da:82:
12:e1:cb:d0:de:ee:1a:68:c6:95:76:92:9f:b4:00:
16:f3:c0:18:6d:11:76:a0:76:5c:dc:10:f4:39:5d:
f6:35:ed:0d:aa:a6:d2:68:a1:0c:c6:05:6d:9c:c4:
0b:22:bf:18:9b:c5:61:63:d9:03:3d:0e:6a:cc:d7:
61:87:d0:a6:99:72:82:63:a1:de:3d:1b:b9:f6:0a:
ff:5a:d5:d5:f8:68:04:85:f4:57:5a:8b:3f:73:25:
15:e3:b2:30:c8:7f:42:18:42:2d:df:0a:bf:4c:cf:
3d:da:c5:84:6f:41:a9:90:66:ee:95:25:67:22:09:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:46:03:31:C9:05:C6:DA:43:80:0D:13:79:B1:50:E3:CA:A3:04
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:02:b9:45:38:08:b7:81:8c:a5:f5:7f:1a:ff:4f:90:a1:b9:
33:c2:76:85:38:f9:83:bc:d2:86:d3:6d:36:d7:18:da:b0:51:
35:e0:08:76:33:55:8d:38:f9:28:39:6c:d1:36:b7:f4:a2:e0:
b4:44:76:e8:4e:e2:b9:38:9a:87:24:d4:0d:f2:05:37:06:10:
c2:ce:cb:64:61:41:41:69:29:47:5e:63:96:70:2b:30:66:33:
74:87:ab:e2:38:90:58:a9:dc:3d:07:fe:3e:e9:c9:99:c1:da:
a5:29:17:99:e8:3a:1c:01:ed:51:c2:41:5c:57:ee:41:a1:54:
d6:d1:7f:3a:5c:f0:bd:5d:52:e8:69:89:9c:82:65:0e:52:e3:
21:6c:fe:a9:6a:2c:1e:d8:c5:18:32:6e:9c:ec:59:de:35:f0:
28:12:4c:b4:b0:bc:cc:4f:1c:b0:3f:30:96:7b:94:0e:a0:55:
90:0a:0b:36:b8:0e:90:5c:e4:fa:b4:aa:6e:5c:5c:bf:3c:1f:
be:8b:97:63:2c:d3:33:42:65:6f:93:f3:a6:6f:a2:4e:70:cd:
fb:1e:b4:a2:9a:a1:3f:b9:98:a6:8e:68:74:62:f2:6e:f7:42:
d6:13:88:23:70:e7:9d:0f:84:8f:2b:41:76:fb:d6:d9:44:41:
cf:3d:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:37 2025 by rpki-client