Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: pZJ+0uR7Mo7Q+oLevYfMJraHaRBHd2dyjy9HkzEGbUU=
Subject key identifier: CB:53:72:A6:38:19:81:08:5E:4B:9A:F7:3C:5B:51:E1:B5:D6:19:64
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 0198D773D43EE2CF1636C593FFBE8CA30691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 160C
Signing time: Sat 23 Aug 2025 15:02:28 +0000
Manifest this update: Sat 23 Aug 2025 15:02:28 +0000
Manifest next update: Sun 24 Aug 2025 15:02:28 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: Li9ff5huMgMH3GZ6Fxu7UAWXqYfG8s5an5IsvQ9DOOI=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d4:3e:e2:cf:16:36:c5:93:ff:be:8c:a3:06:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Aug 23 15:02:28 2025 GMT
Not After : Aug 24 15:02:28 2025 GMT
Subject: CN=cb5372a6381981085e4b9af73c5b51e1b5d61964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:20:1a:62:9e:eb:54:b3:0f:bc:cb:f6:75:
0e:46:5f:04:cd:59:7f:81:77:c8:6f:d8:d7:9c:96:
1a:a1:4f:35:5e:ab:67:a4:dc:dd:0d:48:eb:8f:68:
1b:eb:ef:e0:e9:61:c2:a0:52:57:9c:27:38:a7:62:
78:90:59:a9:35:9d:62:10:5d:21:79:22:1a:c8:1d:
7f:35:f7:bf:37:46:cc:48:11:1e:49:ce:0f:3a:44:
e5:34:1b:75:80:a3:e0:94:1a:e9:84:3c:06:2f:70:
fb:6e:0a:7b:73:32:9a:ef:cd:68:5a:d2:cb:e6:b2:
3b:b6:a3:8c:3d:07:b6:e7:06:04:35:3a:3c:27:08:
76:ac:a2:d3:0c:bc:37:3b:2f:c3:75:8e:d2:95:d9:
23:ec:77:04:7a:e6:8a:73:6b:ee:c1:8d:98:23:ee:
6a:04:ff:d3:23:c4:fa:2c:35:68:74:5d:dd:cb:2b:
c7:95:f5:36:bd:39:8c:a3:e0:b7:73:0f:e7:e4:78:
bf:d4:95:e6:61:5c:a8:b8:01:75:0a:4a:8e:97:95:
6d:52:96:02:3c:9f:22:8f:c3:22:f4:dd:ba:e2:77:
77:b0:87:b1:5e:18:69:f7:21:5f:92:99:08:c7:7a:
1c:48:d7:cb:81:73:74:6f:df:1b:d0:d1:41:ca:79:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:72:A6:38:19:81:08:5E:4B:9A:F7:3C:5B:51:E1:B5:D6:19:64
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c1:03:a7:ec:20:a6:48:00:cd:d0:d2:a1:25:9d:d2:d2:2b:
0e:88:53:b7:98:cc:d7:08:3a:93:5d:86:2d:c8:44:06:4e:06:
fc:63:5c:3a:bd:95:9c:4d:a5:06:65:c7:c6:eb:44:f6:16:07:
d5:ba:df:c5:d0:2e:78:45:0e:0d:f3:83:fe:9c:0a:3b:6a:43:
b8:25:af:d7:f4:8d:d2:2d:2b:bf:8e:33:30:57:5c:73:fd:8f:
4f:9f:02:a4:d8:ae:51:12:51:9f:49:04:9b:3c:07:d1:74:fe:
da:d7:b1:ec:a6:24:ed:34:42:16:cd:81:99:f7:a6:05:fc:e0:
05:83:ae:f2:b2:f8:ff:a9:2f:2b:e7:80:3e:f7:3f:47:10:d6:
8a:c6:a7:78:53:01:69:1b:66:9a:39:83:82:e9:50:1e:7e:bf:
fb:e8:56:f3:d1:2b:5d:cf:e5:04:08:f2:07:4b:46:cc:8a:d5:
49:7f:ea:6a:da:8f:4e:49:35:5f:99:83:00:ce:25:39:d5:c7:
13:e9:39:36:1a:bb:dc:09:26:c7:f4:6c:54:5f:9c:b4:ea:6b:
ed:09:33:47:89:0e:b3:3b:46:19:86:68:16:f0:db:8e:4b:7e:
1b:e4:78:c8:a4:ae:cd:5a:e5:16:bf:05:d2:9f:b7:b5:48:8d:
be:70:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:01:53 2025 by rpki-client