Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: TWPIvLcICbe1GMkUVCS/uyEUkUjZyDrvrrVOHY+Fmds=
Subject key identifier: 05:2F:FC:19:E1:54:41:05:60:B0:60:7A:80:9A:78:F8:B5:FC:B4:6D
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 0197B77CB772B4D9CF8CB5C31A9B73D7A65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0DDE
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: F/1K6myZhzb9Umsg5lhU3p3YjsQd3R2oEJPkJuT6mOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b7:72:b4:d9:cf:8c:b5:c3:1a:9b:73:d7:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=052ffc19e154410560b0607a809a78f8b5fcb46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:32:33:67:54:55:f8:c5:6f:75:41:4f:d7:90:
e2:0d:b8:56:34:70:63:2f:dd:1b:e2:a3:5c:6b:01:
bf:ba:c3:8d:70:0b:85:b7:ca:03:8f:b1:cd:03:4e:
bd:f6:7b:9d:70:88:fd:44:04:a6:75:14:06:64:5c:
0e:b5:56:fc:85:30:32:86:10:a4:60:d6:f9:bc:a4:
ae:66:b5:09:2c:c1:0e:ac:11:61:3e:4f:dd:7e:be:
b1:92:41:1f:b9:e3:b3:42:f3:73:22:dd:93:1f:69:
ab:98:bd:3e:fe:89:49:6e:d4:5d:c1:f9:52:6c:ba:
67:1f:51:51:6d:d5:e1:e9:d4:d7:e3:6d:90:26:38:
da:c1:c7:5d:a1:5f:2c:36:b4:cf:4f:93:9f:ee:12:
1f:d2:8c:87:4e:2a:fe:23:da:72:fd:f5:6f:d3:c1:
69:5f:14:47:a1:5d:ac:8a:fe:6b:b0:26:27:1a:6f:
5c:18:0c:88:a9:8b:41:25:47:6b:36:c4:86:2a:30:
6d:f5:58:6c:b2:42:76:10:f4:73:da:cc:6f:93:3f:
54:34:87:2e:88:c4:8c:5e:b9:ad:5a:7a:a9:ba:3d:
04:a2:42:2d:d4:67:1b:77:87:ae:e4:41:7b:c2:0a:
d9:ad:b4:53:f3:dd:7b:bf:5c:df:f8:83:35:fb:23:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2F:FC:19:E1:54:41:05:60:B0:60:7A:80:9A:78:F8:B5:FC:B4:6D
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:45:30:5c:aa:4a:a1:6a:b9:6e:de:42:13:dd:2b:15:16:
01:7d:98:f5:c2:b2:31:b6:63:41:4b:37:06:71:a8:56:d6:72:
e3:96:dd:b9:1f:e5:3b:dd:05:86:54:bb:48:39:68:d9:b7:b8:
47:7d:4f:d4:da:d1:21:0d:db:20:5a:14:c5:cf:e7:ec:30:ee:
a3:05:80:8e:9d:1d:27:71:5c:a9:5e:e7:33:8d:61:cf:2a:6c:
13:7c:f1:0e:49:00:a2:8f:45:88:b5:ac:16:0c:f6:95:01:b8:
94:f0:7a:e0:b2:ce:3e:c9:b6:df:3b:7f:bc:8c:ed:3b:31:11:
c3:23:f7:d1:9c:e6:a6:d7:e0:12:dd:05:90:28:41:41:23:e5:
fd:fe:cc:3d:05:47:2d:23:04:e8:ef:f4:70:30:76:1e:93:95:
24:ce:af:82:b7:cf:f1:b6:a4:3f:39:00:0e:7c:e3:c5:1b:09:
e9:25:b6:e9:37:2e:8e:2e:78:fa:30:00:2d:3f:21:63:77:50:
45:88:e2:2c:a4:2f:0e:b9:43:c9:de:cb:20:a7:87:78:b4:78:
2b:19:27:03:84:24:72:85:d0:03:17:f8:04:5b:44:78:64:32:
77:2e:3d:40:d9:70:c8:1b:00:33:0e:ae:42:4e:30:c0:08:7f:
d7:36:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client