Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: 8yL2wL57Qx6CB4EEjc1Jb3xqXOJ/66X+QuWKg9EnU84=
Subject key identifier: 7B:DD:F6:31:6B:DD:2B:C4:A1:EB:08:54:FB:68:2A:59:22:C8:FB:44
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0197BB594AB6A01B1B4470CA4E9EF3143922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 11:01:20 +0000
Manifest this update: Sun 29 Jun 2025 11:01:20 +0000
Manifest next update: Mon 30 Jun 2025 11:01:20 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: JBmZ8455qRwl6ZpDcS7UCL4DzwjTiLWX4Q4qR06YGVQ=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:4a:b6:a0:1b:1b:44:70:ca:4e:9e:f3:14:39:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Jun 29 11:01:20 2025 GMT
Not After : Jun 30 11:01:20 2025 GMT
Subject: CN=7bddf6316bdd2bc4a1eb0854fb682a5922c8fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:d1:b3:aa:20:37:95:8e:16:b4:d9:f7:c1:
e9:52:66:d9:fd:77:c8:66:db:16:07:97:9d:f3:35:
95:24:86:6e:6f:3f:eb:14:fa:bd:54:a1:74:d8:22:
9c:80:b5:bd:70:0b:bb:29:4d:cf:76:f3:47:d3:71:
55:dd:bd:14:23:b5:95:fa:67:39:b7:6b:1b:10:31:
37:0d:3d:8a:37:eb:ad:bf:79:73:b5:e7:b7:c5:67:
a9:cf:7b:f8:6c:1f:9c:70:99:1a:4f:29:fa:bd:b9:
11:55:9b:a6:cd:50:80:41:90:15:71:55:e9:2e:c5:
9a:eb:15:bd:31:6e:99:96:70:f8:e7:bb:bd:95:d4:
b2:2e:b1:ec:3b:e8:ac:ba:d1:49:89:da:40:6d:bb:
cb:e4:86:e7:ae:6e:f8:4c:a3:df:a1:52:4e:1a:b7:
21:84:99:63:b6:21:44:bf:bf:77:0c:12:13:aa:e3:
a7:a1:dd:03:c6:ed:9e:bf:eb:d1:4f:4c:2c:d4:75:
42:c4:4e:cc:34:94:d7:50:12:51:61:15:a2:db:3f:
29:b6:35:59:3d:b0:60:49:05:47:2a:b6:cb:54:5a:
11:84:4e:6f:7d:7e:e6:c5:c6:09:8b:64:53:1b:12:
fc:a8:b9:3b:e9:6a:ec:32:e9:eb:fa:c9:fa:5c:5b:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:F6:31:6B:DD:2B:C4:A1:EB:08:54:FB:68:2A:59:22:C8:FB:44
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e5:57:63:6b:e2:1a:8a:f2:63:f3:2c:98:b9:5c:ca:1d:47:
29:40:1f:cd:0a:93:05:ca:0e:b5:ad:4e:36:f8:4d:55:70:d1:
bd:3d:25:80:00:ed:81:78:c6:a0:2a:f6:31:52:c3:ae:98:88:
53:73:86:2b:c3:9b:14:24:f9:ae:52:84:fc:85:6f:32:70:52:
15:90:82:ed:b5:b0:f8:fd:52:68:ee:d5:87:a2:93:3f:bf:9f:
63:45:d0:dd:1a:9b:74:ad:bd:d6:fc:b3:a2:8a:0f:d8:00:45:
79:cb:91:4a:9b:78:0c:52:70:e9:37:09:9f:a6:d4:c9:e0:76:
8d:c6:12:3a:89:17:fb:d8:58:c2:97:d6:e3:e6:0d:d9:56:de:
81:d0:76:17:9c:36:0e:2b:76:81:27:d7:af:56:6a:2f:1a:50:
28:6e:5e:95:c2:db:ee:83:e8:5e:75:7a:8e:b6:12:9a:6b:27:
9f:cf:37:0a:43:62:3d:04:05:6e:9d:50:cd:33:17:db:31:97:
84:79:a1:0e:fe:6e:4b:26:ba:33:9f:59:9a:a2:e0:8c:3d:82:
81:9c:cb:04:3a:24:40:f1:1a:76:e3:2c:02:10:90:8c:9b:49:
ed:e2:00:78:b3:46:41:87:8d:0e:49:72:71:27:e2:3b:8d:3f:
8a:6b:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:33 2025 by rpki-client