Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: 3MRRdoBRb+smTXZdnwujC7Fk/8q72S3uk3tjdixr85c=
Subject key identifier: AC:18:E6:F1:36:DE:9E:9F:01:A0:D2:B1:C9:C9:49:B1:56:BA:49:56
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 0198530CFF4E40057CCADF45D39159D6E6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1620
Signing time: Mon 28 Jul 2025 22:00:17 +0000
Manifest this update: Mon 28 Jul 2025 22:00:17 +0000
Manifest next update: Tue 29 Jul 2025 22:00:17 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: 8ak3KuG7IDrPo+/FSWBRjl2yqVbHIwLD5fpj2hOjPdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:ff:4e:40:05:7c:ca:df:45:d3:91:59:d6:e6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Jul 28 22:00:17 2025 GMT
Not After : Jul 29 22:00:17 2025 GMT
Subject: CN=ac18e6f136de9e9f01a0d2b1c9c949b156ba4956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:7b:b4:56:ce:33:e4:71:a7:94:fa:22:0b:
09:3a:b6:eb:44:12:c6:c2:bd:fa:83:a3:15:e1:ab:
cd:b6:d4:fb:ab:87:d3:4c:33:b1:40:02:2f:b4:2f:
5e:8d:60:c6:87:95:84:34:87:6f:68:2e:38:ff:ca:
3c:86:e8:fb:07:72:34:2d:1b:8e:a2:38:67:88:1e:
60:19:66:23:8b:84:8b:fc:d3:27:0f:21:0e:5a:71:
0c:8f:cc:09:fc:d0:d3:31:cf:97:d9:69:a4:ad:5b:
19:dc:53:19:08:79:2e:f1:42:cd:64:a5:b9:f5:da:
ff:63:95:0d:69:9b:6e:3d:cf:1a:12:9d:26:2f:01:
8a:f1:eb:c6:1f:74:8c:d7:29:16:ab:77:6f:c8:97:
3d:e7:5f:f9:18:02:84:e6:35:09:67:31:b6:a4:eb:
48:78:b1:29:45:a0:24:57:37:52:ad:0b:d7:a9:fb:
8e:d5:2d:29:34:ea:66:d3:b5:75:67:c0:53:28:c4:
0c:47:cc:b1:11:52:f7:46:8a:9d:06:7e:61:90:2c:
6c:9f:94:d2:50:f9:54:ca:7d:c4:1b:2f:b4:76:ee:
ef:18:07:6a:e8:64:26:f1:ed:93:98:c1:a0:3d:5f:
91:79:4c:41:5f:c3:d3:d7:8c:54:5a:79:87:1c:cd:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:E6:F1:36:DE:9E:9F:01:A0:D2:B1:C9:C9:49:B1:56:BA:49:56
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:bb:73:84:58:f9:8f:9b:2a:bb:a7:f7:52:9d:e1:43:fb:
c4:c9:90:7e:a2:f9:dc:5a:9d:fd:32:c8:de:c3:e4:df:12:35:
cf:39:bd:a0:d7:d3:93:b7:4a:5f:af:22:e0:8d:e9:23:7e:0e:
3c:49:8e:e2:53:2b:cd:34:db:7c:67:f5:3d:3d:79:f8:03:4e:
ff:29:e6:13:7c:fa:8e:8d:85:c5:19:92:29:1c:39:1b:2e:5f:
8e:3f:5f:5b:f6:c3:62:45:98:b0:42:1b:91:4d:76:98:6f:99:
a2:6c:5e:37:7e:22:2d:36:5f:0c:2c:c7:73:f1:51:98:31:12:
cb:ae:21:20:2a:ca:1c:73:c5:7c:ca:9d:f2:b9:5c:e8:9b:de:
42:26:e2:c0:8d:a2:46:05:4e:d2:b5:15:a4:d5:74:db:9b:c0:
3a:c0:95:1e:cf:79:36:19:8f:fe:51:85:da:70:de:8a:6d:66:
6b:26:52:85:87:ae:d9:1c:ce:2f:d0:1c:34:39:00:e4:6d:2e:
2b:c1:15:14:cc:b9:1c:8f:20:52:8d:13:bf:43:c9:22:4e:8a:
60:ab:35:61:ba:10:c7:7a:72:b7:fd:b9:60:a8:c8:06:3b:74:
12:a0:3c:42:c4:ae:a9:dc:2e:89:88:27:51:f5:0f:50:d8:ef:
fe:be:69:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDP9OQAV8yt9F05FZ1uaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2
MGMwNTQwHhcNMjUwNzI4MjIwMDE3WhcNMjUwNzI5MjIwMDE3WjAzMTEwLwYDVQQD
EyhhYzE4ZTZmMTM2ZGU5ZTlmMDFhMGQyYjFjOWM5NDliMTU2YmE0OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvN7tFbOM+Rxp5T6IgsJOrbrRBLG
wr36g6MV4avNttT7q4fTTDOxQAIvtC9ejWDGh5WENIdvaC44/8o8huj7B3I0LRuO
ojhniB5gGWYji4SL/NMnDyEOWnEMj8wJ/NDTMc+X2WmkrVsZ3FMZCHku8ULNZKW5
9dr/Y5UNaZtuPc8aEp0mLwGK8evGH3SM1ykWq3dvyJc951/5GAKE5jUJZzG2pOtI
eLEpRaAkVzdSrQvXqfuO1S0pNOpm07V1Z8BTKMQMR8yxEVL3RoqdBn5hkCxsn5TS
UPlUyn3EGy+0du7vGAdq6GQm8e2TmMGgPV+ReUxBX8PT14xUWnmHHM0TEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwY5vE23p6fAaDSscnJSbFWuklWMB8GA1UdIwQY
MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt
YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1
LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAK7c4RY
+Y+bKrun91Kd4UP7xMmQfqL53Fqd/TLI3sPk3xI1zzm9oNfTk7dKX68i4I3pI34O
PEmO4lMrzTTbfGf1PT15+ANO/ynmE3z6jo2FxRmSKRw5Gy5fjj9fW/bDYkWYsEIb
kU12mG+ZomxeN34iLTZfDCzHc/FRmDESy64hICrKHHPFfMqd8rlc6JveQibiwI2i
RgVO0rUVpNV025vAOsCVHs95NhmP/lGF2nDeim1mayZShYeu2RzOL9AcNDkA5G0u
K8EVFMy5HI8gUo0Tv0PJIk6KYKs1YboQx3pyt/25YKjIBjt0EqA8QsSuqdwuiYgn
UfUPUNjv/r5p9g==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:54:25 2025 by rpki-client