Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: Pc3pk2q2mL6lwTvgHc4NQ2crVQd+QNdXsgzcCZl6Gqc=
Subject key identifier: 11:7C:0E:69:86:8F:13:A6:DA:E6:A5:00:7A:B7:93:10:AF:34:82:8C
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 0198D6985ECB4EA1D123E9AAB08BEB1708A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 0E8E
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: MV4VxKLgYmmowfCqF0S8rnEErEvbH2GGfVpAGZOgCKs=)
2: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (hash: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5e:cb:4e:a1:d1:23:e9:aa:b0:8b:eb:17:08:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=117c0e69868f13a6dae6a5007ab79310af34828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:8a:c0:60:16:36:9a:2e:63:52:2e:3d:9b:
25:ef:12:23:3f:73:bf:f0:dd:91:70:64:e2:1e:28:
1e:8e:40:b8:83:46:c4:84:79:5d:5f:49:1e:5f:26:
40:fb:47:f2:fa:f3:33:53:73:ea:7c:98:01:25:38:
88:25:ee:a8:cd:f5:ef:56:58:fd:de:40:13:eb:86:
43:8b:45:c8:05:44:06:59:3b:3f:d3:3c:62:20:7c:
c8:c8:2b:c8:f4:f7:77:a8:3f:00:4f:d6:db:31:67:
21:b0:e1:35:ab:1b:6e:b6:56:75:de:58:28:e4:6d:
5a:94:9a:d4:66:fc:86:28:3e:30:18:f8:91:de:18:
51:0a:2f:df:21:18:61:c5:dd:48:55:40:ca:38:1b:
7d:04:8b:20:3a:36:c2:e4:99:a8:46:76:dd:69:42:
3e:c0:36:ff:70:ae:c2:0e:78:42:66:d9:1c:d8:ce:
de:e8:19:80:f3:d1:7e:31:7a:96:92:cf:26:4f:d8:
cd:2b:93:dc:60:08:9d:ea:86:48:b3:75:80:1b:78:
90:92:93:7d:98:5e:48:da:73:95:3b:5c:3e:40:9b:
c6:5f:34:21:23:5c:70:7a:45:a1:55:9f:5b:8d:22:
80:b4:4e:30:50:31:e2:8f:97:b4:ed:e2:dc:48:ea:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7C:0E:69:86:8F:13:A6:DA:E6:A5:00:7A:B7:93:10:AF:34:82:8C
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b0:af:05:14:8b:a5:ef:c7:56:b4:1e:66:d1:86:c8:78:f3:
12:15:cd:f4:4d:30:5f:c4:f2:07:32:99:d1:43:1f:b1:f8:33:
f6:af:74:91:b4:9a:b0:21:6d:50:48:4e:c3:57:20:ef:a5:30:
73:21:59:95:a1:fb:d3:61:38:ea:bf:9f:3b:b3:b0:cb:4e:80:
e8:ac:c2:61:9e:da:80:a5:3e:ab:a8:6a:b1:7a:f0:a4:f2:63:
69:17:fe:8a:d7:be:9a:7d:b2:fd:82:74:81:f8:06:97:21:7c:
b9:09:e2:5f:40:1c:f0:5d:48:9b:5e:0c:27:02:71:13:dc:fb:
f0:14:97:8c:a6:82:0e:51:3d:fa:5d:19:fc:d8:24:a6:c5:89:
fe:2f:4d:de:c6:0f:7e:eb:be:d5:7b:f1:ea:35:72:8d:ff:45:
2c:e9:6f:28:ae:5d:3c:21:8b:70:ce:2e:38:24:46:52:3c:7d:
71:2a:6d:65:ee:a6:93:aa:93:e0:fe:15:25:96:de:b5:2b:26:
ac:ac:3c:ac:f1:88:35:15:54:42:f8:2e:ff:a6:ca:31:04:5a:
b3:6c:1c:bf:1a:96:e3:0d:a3:c0:6c:1a:17:6c:1a:bd:2c:d4:
c3:bd:b1:25:c3:04:cb:87:2b:c9:68:8e:de:65:09:3c:ad:d6:
51:68:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:47 2025 by rpki-client