Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: E04ZebRPl0Rf6wHfU297i51aiQCGCrvHiMT4boKzl8I=
Subject key identifier: 1E:BB:76:2C:1C:17:F9:FE:74:43:F6:FF:3C:B5:E3:9F:E0:5C:57:7E
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 0198D54E9B4E8EB641810BE9EB826B14ECA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0E72
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: Sr7MeidwYSYbgTB6Fqnp4YbEloLwW5LVXBCHhSilk2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9b:4e:8e:b6:41:81:0b:e9:eb:82:6b:14:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=1ebb762c1c17f9fe7443f6ff3cb5e39fe05c577e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:19:17:29:20:48:ee:0d:c6:21:b4:5e:fb:
53:d6:f1:66:92:57:32:6f:2d:4f:eb:a5:d1:3b:46:
a0:a7:99:16:4f:c8:1d:e5:dc:50:d0:04:75:12:a6:
2b:16:48:d1:ff:34:19:f6:8a:c4:49:b5:99:90:f1:
6b:bb:cb:15:1d:20:43:11:31:7d:b8:b5:35:ba:b9:
4f:52:b4:75:9a:31:44:a5:75:7f:9b:35:85:14:e0:
c8:fb:80:7a:0f:c1:60:2a:36:f4:78:25:5a:02:d3:
c5:22:40:41:c5:82:aa:11:8e:99:4d:06:14:fd:65:
10:d3:c2:08:03:48:99:c9:9b:43:6e:ea:03:27:84:
96:a5:db:71:64:6a:cb:c9:62:a7:f3:bd:07:22:91:
f6:1e:3a:be:76:4c:5e:b4:5a:39:fb:51:3c:7d:a0:
19:64:9a:78:5c:63:d2:9e:00:78:8f:43:89:5b:56:
27:b2:6d:ac:69:59:d8:49:a6:26:b5:09:93:4b:d4:
6c:8f:37:37:80:7d:00:81:b0:a3:c1:40:f0:72:d8:
b1:9b:1d:7d:18:de:2a:f2:a1:a5:ef:af:4f:08:19:
13:35:23:a6:70:5d:ed:5e:9c:90:2d:5d:0b:db:9c:
c7:2d:8d:a6:d8:80:8e:a4:de:ec:a4:e1:a3:9e:f1:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BB:76:2C:1C:17:F9:FE:74:43:F6:FF:3C:B5:E3:9F:E0:5C:57:7E
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:db:d7:94:7d:d5:f1:e2:15:52:bd:b0:5d:86:33:21:30:03:
94:fe:be:6c:50:d5:6f:a4:be:fe:ce:42:9a:92:4a:a6:d9:b3:
89:7e:6b:08:9d:0d:4e:3b:c7:cc:67:7a:86:2f:47:96:c7:b7:
61:84:27:ad:a2:3d:bb:a5:25:ea:34:03:0e:36:06:fe:6b:a8:
db:19:0c:98:b5:2e:4e:0a:48:80:be:7b:3a:24:78:f6:89:15:
46:e4:47:57:8e:17:99:39:55:69:97:7b:59:93:ec:30:fd:16:
0b:6c:4c:7f:f0:35:84:df:0c:d8:80:fc:d0:59:3c:43:ad:bc:
55:18:a3:6f:bf:33:4e:4a:d4:68:9c:7f:92:9d:d2:49:c3:6b:
cb:26:c2:fd:f5:6d:21:c4:76:5f:53:3d:11:c2:a5:51:3d:6b:
5c:e1:63:72:f0:67:69:96:d0:c6:32:a2:20:59:1d:a6:39:3f:
50:a1:96:bb:fb:ae:6f:b2:9e:c0:8a:12:66:3c:8b:f5:c5:bf:
21:21:43:1b:56:fc:6c:d2:47:5a:83:38:62:5e:35:d0:48:45:
bd:a2:6e:4e:49:57:c3:ba:04:64:62:7e:f0:75:77:fb:56:be:
e3:36:ab:5a:fc:37:2f:06:a2:d7:be:2c:64:5d:d8:98:88:f0:
fe:9c:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:48 2025 by rpki-client