Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: WC9NXkPOteSycMlDP75CI+cr/xaV6sNyjrjVkMhsdjs=
Subject key identifier: C1:81:C6:56:91:62:12:30:D1:7D:EE:96:C9:14:3F:91:29:9B:8E:08
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 0198D5BBB3A796156093D8F72CC8BCB10908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 1255
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: sOf5poWnfyX424nYb07wpxS4h42Qudv3+h+IHMX5fZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b3:a7:96:15:60:93:d8:f7:2c:c8:bc:b1:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=c181c65691621230d17dee96c9143f91299b8e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:97:7c:f5:4d:64:db:f7:46:f3:97:c3:12:
44:8a:14:97:ef:12:99:11:74:58:a6:09:e6:0a:b0:
bd:97:16:29:ca:c6:28:66:e2:25:47:d0:50:2e:33:
49:03:66:a2:07:fe:59:ca:10:49:8f:2e:41:0f:51:
32:93:09:70:57:81:fa:2b:d3:e6:e6:2c:56:b7:06:
b4:85:49:09:2a:13:54:b5:6c:e8:b5:c2:f5:4d:a0:
05:46:2a:18:4f:9a:d9:9a:e4:4b:71:9c:2e:8d:5d:
82:bf:4b:da:60:44:93:e8:dd:1a:9a:56:4b:71:03:
60:6d:ae:a5:ee:e9:c2:42:97:6f:36:dd:5f:b9:36:
ff:28:cb:0d:a3:37:f3:fd:06:92:c7:7d:f7:f9:94:
8b:1f:af:c4:db:ec:73:3c:e9:fc:54:18:25:be:0e:
52:81:a6:3d:7f:ab:dd:a7:dd:8f:81:f8:2e:54:1c:
42:74:f4:1c:c1:84:58:31:f9:b3:8e:df:b5:90:1e:
a8:64:ca:84:0d:a4:53:c9:f9:08:7c:d6:96:ac:18:
a6:58:01:55:30:b3:30:fa:e0:08:44:e1:25:43:4d:
c3:55:c7:34:f3:74:94:48:96:89:31:44:81:bb:8b:
ce:f9:73:78:ae:e7:15:3e:55:74:b3:0e:93:6c:b1:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:C6:56:91:62:12:30:D1:7D:EE:96:C9:14:3F:91:29:9B:8E:08
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:53:cd:78:0d:94:c2:40:49:bc:ef:38:a8:f4:21:d8:e2:
ed:24:25:e1:8b:d8:58:07:25:0a:40:57:90:44:08:02:ae:47:
a2:d8:9e:96:ab:fd:dd:e3:22:c5:fa:51:37:7b:23:42:d5:c5:
07:36:38:d6:f5:f5:97:a1:9d:59:3f:71:56:e0:5a:29:49:7e:
f7:88:12:4a:7a:6f:48:0c:d0:2f:3d:5f:6b:9c:61:89:d1:43:
e2:5c:1f:66:a7:cd:44:a9:46:2e:e9:2c:4a:a7:26:c1:3e:fb:
f7:c7:11:fd:53:cc:24:e4:28:a3:88:5a:14:a5:34:11:ec:cf:
96:3e:2c:b7:15:82:43:4b:c4:c2:a0:81:70:fa:37:94:da:48:
68:34:99:bd:b7:1c:f4:01:45:2d:cc:8d:fd:1f:dc:85:8e:e1:
c5:d4:91:c9:e4:e0:cb:bb:dd:09:14:93:96:e8:b7:a5:94:c7:
d3:15:65:1e:6a:8f:cb:00:73:56:46:14:09:90:15:3c:ff:cf:
2d:40:56:39:1d:d3:d2:13:8b:ee:ec:bb:f2:a9:df:0e:90:40:
97:06:35:a5:7b:03:52:8e:ee:f0:b3:0d:a2:b1:c7:f0:32:1d:
20:e4:92:d0:4b:5b:39:74:d8:5b:c5:7e:3a:27:f1:3a:2c:44:
dc:fb:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:15 2025 by rpki-client