Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json)
Hash identifier: QCdgt/hsEtRuJzMG4VhSIOnQtiOjhEGGsc1uf+ScGWM=
Subject key identifier: 10:2E:E8:19:B6:80:F8:12:C1:D7:E6:0D:DE:AB:07:98:3E:B8:BD:9E
Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Certificate serial: 0199FBB35CC3B596D7EC73A329D3BF649A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
Manifest number: B3
Signing time: Sun 19 Oct 2025 09:00:59 +0000
Manifest this update: Sun 19 Oct 2025 09:00:59 +0000
Manifest next update: Mon 20 Oct 2025 09:00:59 +0000
Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: eLrFWocBhCaIUxJoG1ZNLrWUtIbPMUBkvqJr5Z0BlNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5c:c3:b5:96:d7:ec:73:a3:29:d3:bf:64:9a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59
Validity
Not Before: Oct 19 09:00:59 2025 GMT
Not After : Oct 20 09:00:59 2025 GMT
Subject: CN=102ee819b680f812c1d7e60ddeab07983eb8bd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:9f:c0:eb:c7:be:d2:44:43:da:d1:40:08:
43:f6:86:b0:89:3f:72:20:f9:9c:02:96:6e:7c:a1:
fd:5f:c1:4b:c6:08:0e:38:27:b5:fd:28:b4:66:4a:
bf:6d:85:8a:7f:de:56:0c:5b:ee:c7:15:b9:ae:c3:
11:14:b2:8b:bd:47:d5:ee:e1:0a:9f:cf:c7:63:ad:
39:22:aa:98:3d:cc:47:3f:81:9f:99:fc:ff:e3:42:
de:6d:cd:08:61:f6:65:70:ce:f6:9e:98:78:f2:91:
42:a5:2a:29:74:36:3e:cc:48:08:26:2f:4e:b9:19:
86:32:a0:f6:4d:72:46:ef:f4:bd:1a:d1:1e:d3:32:
49:42:d5:19:e1:0d:87:75:ee:7a:88:c7:51:ee:9a:
5d:3f:82:ea:4e:b2:91:fd:3e:e4:db:de:00:43:46:
0e:06:f8:ab:e1:44:4d:f8:ff:bc:c2:ea:89:26:18:
de:7c:bc:76:f3:2e:9a:80:29:b7:8b:3c:da:1c:bd:
1b:1e:f4:bf:93:48:43:f4:ca:70:2d:8e:fe:0f:11:
61:01:e7:72:00:b1:d1:84:94:51:65:26:12:ac:72:
da:4b:8b:1b:77:e0:4a:e9:c1:7a:b4:a6:6c:71:e0:
81:c7:1d:c6:8e:2d:2f:a5:11:97:8e:07:2e:d7:a9:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:E8:19:B6:80:F8:12:C1:D7:E6:0D:DE:AB:07:98:3E:B8:BD:9E
X509v3 Authority Key Identifier:
keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:0d:c6:c6:49:d0:07:50:2a:9c:2f:00:9a:7b:6c:99:f5:
22:75:d9:a7:15:00:ae:58:89:49:43:2b:24:5f:9f:e7:d0:2b:
61:0f:24:76:dc:8c:03:4f:26:a2:87:0e:1f:96:6b:23:c8:69:
49:fd:c7:bc:d9:11:29:05:12:2e:68:99:aa:ad:46:52:ba:a5:
81:90:91:ce:1d:4d:a8:70:33:9c:5f:64:73:57:d4:81:5a:aa:
3c:8b:8e:97:ee:19:c8:48:c3:ac:b3:f0:a1:0e:05:f7:71:79:
88:66:3d:ae:ed:8a:9a:00:a1:bc:b1:68:8f:76:03:55:cc:58:
0f:e1:12:60:2f:c3:c1:0e:1f:c9:7d:13:3e:d1:12:94:7a:eb:
25:c0:de:8a:33:24:67:f4:da:fd:10:e6:c2:5f:50:22:36:51:
0b:7c:af:03:d9:bf:26:6f:3b:7a:36:41:bc:aa:6b:63:1a:45:
2e:d2:b0:7a:0a:89:b7:38:95:89:e2:3a:7e:77:4d:e9:3a:b5:
43:c9:32:e0:8d:6a:aa:da:a3:65:ad:d8:5e:93:42:f3:6b:56:
46:d9:6e:fb:41:72:de:28:f3:51:1a:5b:87:e6:5b:b4:cc:ab:
5a:a2:f5:ce:c2:8e:ea:6e:03:75:e1:0f:6d:f2:7e:9f:96:c8:
dc:d2:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:20 2025 by rpki-client