Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: 6CjXWxmYprI1Ow67i0n20fLXxUwYkg3T4Lhz5lrIQ4I=
Subject key identifier: D1:EE:AE:2B:CC:08:42:E3:C9:43:D2:4B:88:2C:87:E3:B2:06:D0:64
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0199FBEBD609E70F9C94AD82B60CB3482E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: yeivipEDpSdR29zqEt8i/C10ekWGQ+ipLfKWI+P4f5o=)
3: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
4: rVBQGtYXn7dN7Hzvs99f93cybKM.roa (hash: 8+qIyvEknSqH8tSbuYmjo7zBDDaVOwlEHrt8OpQOnnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d6:09:e7:0f:9c:94:ad:82:b6:0c:b3:48:2e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=d1eeae2bcc0842e3c943d24b882c87e3b206d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:4e:e3:d3:c8:00:85:43:b4:59:62:18:f6:
1e:b7:9c:34:cb:2b:02:3c:36:86:23:18:b2:aa:74:
96:6d:2a:c7:5d:d1:78:7f:c2:63:79:1a:be:21:b2:
bb:db:1c:d0:3f:cc:96:1e:3b:6f:36:2e:b0:4e:da:
35:54:70:a6:52:69:98:39:0f:77:7e:84:0d:dc:cc:
4c:37:c8:46:e8:9b:78:f5:f5:bf:eb:7a:4d:f3:a9:
ac:d4:41:35:1c:7f:83:02:d4:44:3d:dc:f2:e1:1f:
a3:9d:12:e4:e3:cd:9c:f1:39:b0:81:5f:e6:99:ad:
42:b5:59:36:36:ed:64:26:a7:92:ad:82:60:90:e4:
bc:3b:7f:5b:62:56:64:8a:79:bd:99:70:ea:81:bb:
88:b4:75:89:f2:f3:67:f9:56:fb:03:98:a7:f8:d5:
81:22:64:95:0f:38:94:ff:e8:2a:26:4f:6f:5b:08:
07:7a:bf:95:58:dc:94:83:74:3d:ce:1b:2b:56:06:
b0:89:d8:2b:11:2c:91:5c:b8:a8:2d:b6:e2:0a:4b:
73:9b:a8:06:f1:d3:a7:37:a0:de:2e:24:01:51:b5:
50:a2:d2:d8:f3:96:5a:7c:2e:6d:b7:22:7e:7f:b4:
fe:ca:d0:81:02:a4:1d:4b:55:40:b3:a8:53:2b:f4:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:AE:2B:CC:08:42:E3:C9:43:D2:4B:88:2C:87:E3:B2:06:D0:64
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:11:88:fb:55:bc:9e:64:1b:8a:fa:76:70:f2:35:0d:e0:c0:
25:88:41:41:89:aa:dd:92:03:46:8e:e6:d9:da:e4:23:d2:01:
0e:8d:13:3b:54:7c:53:ec:48:d2:41:9a:5c:af:14:fc:96:a1:
07:c7:66:d4:75:74:18:ba:8a:1a:bf:16:c5:88:5d:af:d5:1f:
d0:bf:32:2f:b4:e5:08:e9:c0:4d:fa:63:0a:37:a3:60:86:d3:
ba:96:39:8e:60:8a:7b:d0:4a:df:72:c4:3c:5b:05:df:32:14:
0a:1c:39:39:dd:4d:ec:4c:5d:97:59:27:f7:66:d3:10:ea:17:
03:d3:23:f9:8e:34:95:f3:55:8f:9f:57:d5:6e:4c:38:4c:c7:
76:29:8f:a8:46:07:ba:f5:0f:fe:77:79:53:58:e8:98:c2:b7:
8e:1b:bd:6e:e5:a4:3a:ef:79:fd:9d:e1:b8:3e:eb:b7:3f:5d:
02:d7:a2:16:b9:d0:5f:b7:35:e2:ed:88:68:38:ba:2d:e4:e8:
8e:a3:0e:e0:b2:f0:e2:d4:5c:bb:ac:ff:5c:e3:db:b1:ac:03:
9f:9d:83:bf:b5:c3:ab:da:ce:de:5f:88:91:7e:20:b1:8a:a6:
e6:d6:fb:8a:f1:4d:a3:2a:70:d9:58:2c:65:9e:5d:cc:23:09:
b4:be:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:35 2025 by rpki-client