Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json)
Hash identifier: XjyytTKOCXe9c8ywzk7ADlyAsq6YnOSyveTwQ+LTp/E=
Subject key identifier: 9B:5C:4F:E3:1C:CF:70:64:AE:D7:0F:A4:74:17:EA:D7:AE:06:E3:96
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 0198D472E870E285C9E2B4752BA80EEF1AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: IIuHqrIfD0DenHd5XEzFhZnytYH66oiE2RnYxXtFoBQ=)
2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=)
3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e8:70:e2:85:c9:e2:b4:75:2b:a8:0e:ef:1a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=9b5c4fe31ccf7064aed70fa47417ead7ae06e396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:66:8c:c1:c6:36:91:e0:5c:ae:65:ff:d6:b9:
37:f5:bc:fa:9c:5e:e0:ea:b7:c8:52:98:84:44:a2:
6d:e4:d0:a2:5a:b9:04:e0:ed:cc:74:e7:f4:ec:44:
ae:a2:77:e7:f8:6a:f8:e3:82:69:83:5f:04:18:c5:
d3:fc:7d:2c:73:c5:46:db:02:fb:42:8d:b3:e7:e7:
83:69:85:db:97:9f:9b:8f:2d:5b:1c:15:da:1a:ae:
2a:15:ef:59:77:eb:6d:fb:81:07:df:4c:f5:70:28:
e8:7e:95:a3:27:9f:d1:f2:95:e2:92:38:2c:fd:db:
f6:3b:16:04:25:36:29:96:d5:b9:fe:25:d3:32:85:
46:06:6f:bd:6e:fe:7a:05:46:5a:29:76:11:8f:67:
91:84:7f:24:89:dd:4e:26:34:37:d4:b5:98:95:f6:
99:da:42:8c:03:48:93:a7:7f:88:5b:fb:29:b4:54:
90:4f:6c:e4:d2:d5:8d:aa:58:b6:80:af:dd:c0:45:
fd:8d:fc:7e:fe:5b:40:81:45:47:8e:d3:e6:32:4c:
26:bd:1f:fc:dd:64:e1:96:2a:f6:66:c8:66:07:9c:
b7:40:46:57:db:ef:e1:5d:2c:04:3a:46:b4:07:54:
8d:0a:42:18:22:ab:70:b8:4a:39:8c:86:21:7f:f8:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:4F:E3:1C:CF:70:64:AE:D7:0F:A4:74:17:EA:D7:AE:06:E3:96
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:54:2a:15:a3:46:8e:eb:c6:d2:fb:a2:7b:94:c5:d0:e6:07:
cd:3c:e3:ec:63:47:66:45:d0:00:06:a4:ad:18:fb:f6:a7:09:
7b:e7:a7:97:d1:ac:36:c2:6e:78:ee:93:a1:2a:b8:40:f1:3e:
25:c5:e6:c0:8d:0f:6b:82:a9:11:76:97:7f:df:a8:03:6c:79:
de:26:e7:bf:31:70:dc:c4:7f:e3:e8:bc:8a:33:50:34:2d:f9:
28:a1:56:9a:a8:95:27:fe:fe:a2:06:65:bd:b7:aa:08:6f:6d:
6c:ec:58:a2:d8:ca:e0:b9:d8:2b:4e:ec:30:66:2b:54:cc:fd:
4e:bc:92:a2:a1:70:0c:ce:ec:c3:c6:0f:b0:90:8e:11:0b:a6:
35:06:31:cf:44:45:d3:fa:1e:11:0c:1d:09:97:b0:42:b8:9a:
5b:18:da:87:9b:3f:3e:a8:55:8a:41:d5:76:fb:3b:97:86:c2:
c0:d6:40:f7:0c:60:8b:e5:1f:31:b9:ea:1a:44:dd:ad:6d:63:
d4:2c:47:fc:a9:b3:d7:cd:43:c2:ed:b0:6a:e6:67:5b:af:86:
40:7c:db:c9:fd:8b:e9:c8:61:7c:4a:dd:4f:89:5d:38:4a:e0:
2e:5f:4d:a6:c9:14:a3:b9:29:0b:10:23:a0:a8:52:f0:bc:1f:
ef:35:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:23 2025 by rpki-client