Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: GP/46BhyzSvLMeDpH/TFOW3KUaKedgs1MVP1UxBcJ4U=
Subject key identifier: 6F:F9:BB:BC:5E:76:A6:14:CA:E1:40:96:99:85:91:86:FC:F8:F0:48
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 0197B77CA4B2C4D5FDACF62D93D7A07DFEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: kA0APs/zCE8I0NyWOKTW/z93BFOqUbeWX9lTXjOmyK8=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a4:b2:c4:d5:fd:ac:f6:2d:93:d7:a0:7d:fe:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=6ff9bbbc5e76a614cae1409699859186fcf8f048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:8c:70:af:1b:22:5a:2f:64:2c:a7:6f:f6:
61:3e:46:b7:9b:20:70:67:61:40:54:99:13:c1:89:
12:96:97:9b:bf:2e:00:51:2c:91:ad:98:29:18:4f:
a2:8d:be:73:52:1b:a8:f1:da:89:b0:c7:1a:8d:3e:
7b:12:42:19:f8:78:c0:0f:c7:12:83:bf:bf:3c:42:
64:9d:2f:85:bc:0d:d1:9e:f1:6b:84:fa:44:b8:01:
b0:5e:41:b1:0a:d8:15:3d:55:d0:0f:69:7b:8e:3d:
80:b0:ad:6b:c5:0c:e5:32:28:2f:ea:e8:e5:6e:2f:
03:42:23:50:e9:cf:60:38:0f:f9:b2:11:22:a5:52:
40:a0:4e:aa:70:9e:5d:3e:11:cc:6c:26:b6:fb:3f:
86:08:1f:59:f8:ad:1e:59:14:74:c4:bf:e0:63:81:
8d:b6:d0:db:95:95:e3:f8:fb:32:a6:34:4c:d5:7a:
8f:d7:e1:a3:42:4b:39:6d:20:7c:3a:8b:88:ed:97:
58:58:a5:24:d5:4b:f8:b4:90:c8:53:dc:30:70:c8:
28:96:a0:a7:b1:a5:44:b6:42:15:53:d7:01:80:1d:
f4:1d:e3:05:d3:43:f8:bd:45:09:6a:ce:de:78:89:
39:08:e8:49:43:94:9b:96:46:35:88:37:8c:3c:ee:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:BB:BC:5E:76:A6:14:CA:E1:40:96:99:85:91:86:FC:F8:F0:48
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e0:71:60:f1:da:e7:9d:46:17:97:2d:3c:9d:1e:6a:4c:04:
f7:87:32:6a:73:24:36:f9:67:a6:b2:2f:06:88:cd:ea:fd:29:
4f:5e:05:47:e9:e2:99:38:b7:f9:ed:b4:84:5e:cd:33:07:c2:
be:81:d6:1c:25:d4:99:51:e4:63:7d:64:f7:89:8d:9b:96:1e:
a4:ee:cc:3b:4f:38:f7:96:da:9f:bc:2d:f6:76:ed:e6:2d:3c:
5f:07:f0:80:4a:55:04:47:54:71:12:a3:95:f4:55:59:e1:53:
03:43:43:7e:fa:91:70:c1:6a:80:4a:75:c5:ba:4f:44:2b:70:
5c:0a:e3:42:87:8a:fd:b3:24:e0:c4:62:20:f3:b4:1f:9b:75:
51:5b:ae:8d:2d:0f:1b:ae:08:a7:c4:20:a1:26:ff:00:63:6b:
ef:3e:58:a8:69:78:3e:14:f9:6b:92:0e:f2:1e:41:1f:5a:ec:
c9:bc:21:4e:d6:d9:b1:9e:9b:de:64:4e:6b:e3:33:90:92:1a:
5e:76:c8:69:63:89:8e:53:86:fc:58:be:18:21:f3:76:e2:45:
43:cb:a1:92:b5:c0:dd:97:a1:60:da:9e:f6:9f:80:1b:36:b5:
d8:bd:30:a6:ac:cf:b4:32:71:0d:18:d3:58:ec:65:9b:38:28:
4b:57:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:59 2025 by rpki-client