Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: mnDfmQuLPjrQqcjQFd8GPGZJ+KLcfCPG80YcOicEw8k=
Subject key identifier: 94:A8:9A:91:6F:5D:2F:6F:AE:DD:67:19:A2:18:EE:07:01:BA:DE:AC
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 0199FBEB7A2B153AFCB4B0C905188927D4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: Pam8MkJH/43iBW6Uxm2U8JwLO8nlj35+IrJtMFB7bSE=)
2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=)
3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7a:2b:15:3a:fc:b4:b0:c9:05:18:89:27:d4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=94a89a916f5d2f6faedd6719a218ee0701badeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:5e:e0:9c:7f:6b:e3:d6:48:ba:c2:56:16:
c0:53:49:fe:1e:9e:8b:67:b2:ea:94:6c:7f:2d:3a:
c8:4a:88:5e:0e:bc:7a:50:d0:6f:9a:6b:53:b1:25:
5e:dc:30:e8:9f:b1:0f:a5:de:7b:c9:07:1d:e9:00:
03:c8:25:23:d1:ef:8a:65:f1:b2:95:2d:30:0d:c3:
ab:71:10:4b:38:3a:a2:6d:80:35:3d:88:3d:02:86:
71:ec:3a:8b:b0:1d:0f:9d:84:c4:29:4d:73:d1:9f:
71:7d:0d:de:df:85:1d:d6:cd:3a:20:34:07:18:46:
c5:4d:35:25:69:69:69:92:83:71:32:30:42:84:a1:
7e:57:56:77:eb:bb:cd:38:13:01:e7:f0:5d:3a:3a:
ac:57:43:7f:24:08:e5:6d:f8:01:c6:af:af:f4:9a:
ce:e3:15:44:a3:f1:07:a6:ea:22:61:c0:3a:b9:b8:
fc:5c:32:9c:9e:a5:40:ba:5c:2d:f8:34:01:f2:2e:
ae:50:b2:df:1e:d2:25:8c:e5:dd:6c:d6:98:8d:23:
5f:43:41:ca:c2:63:89:2e:62:18:9f:ca:73:69:64:
11:8f:65:dc:91:b4:1f:d9:4f:cb:c5:60:ac:a6:a4:
74:49:f5:67:b0:5c:39:3f:ae:93:b2:fc:6d:cf:9d:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:9A:91:6F:5D:2F:6F:AE:DD:67:19:A2:18:EE:07:01:BA:DE:AC
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a2:d5:e9:fe:ae:f3:3b:0e:93:c3:37:c9:b5:07:90:58:24:
57:a5:a1:24:ba:19:b5:39:4f:13:f3:f7:6f:88:e0:a8:78:6f:
bd:c3:41:9b:96:0e:2c:64:cc:ce:53:a8:b3:7b:c2:72:de:b8:
dd:6b:c9:69:80:fe:e6:2f:50:2d:64:4b:f2:8e:f5:0e:8e:32:
5c:46:5b:a2:e6:75:d7:a1:84:33:c7:96:ec:81:12:fb:f1:6f:
1b:2e:e4:f1:6a:67:6c:63:16:a3:e5:cf:1e:f5:a8:d4:0f:ed:
cc:d2:73:8c:51:7a:5e:9a:ab:38:56:bf:0a:45:1d:a7:4a:45:
e4:8d:14:0c:b6:03:c6:1a:cd:e0:c6:e0:e2:a1:e4:5b:22:f3:
f3:ef:64:75:95:8f:19:b5:31:53:3a:4e:8f:94:d5:42:e2:6f:
17:2e:34:c3:97:6b:c3:bc:32:aa:8d:fc:8b:d3:fa:b2:fe:0d:
5d:49:ae:cb:f3:c5:14:b6:7b:ae:e0:54:10:d5:0b:a8:b5:ee:
cc:f4:03:3d:bb:ec:7f:7f:a3:5a:2a:2b:59:a3:2c:94:73:c2:
09:ef:4f:c9:cb:26:59:ce:0b:f0:a9:28:f1:bd:b0:53:86:a1:
f1:64:01:6a:23:14:fc:18:d4:64:b7:fd:8e:ae:68:93:d4:74:
e9:0c:24:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client