Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: 3pVOMUiUDUs5HoyNldCJTV4oMLFHkO6aVPGkgYBQx7Y=
Subject key identifier: 32:BA:20:9D:81:A4:93:94:17:9F:97:1B:E3:C5:CD:4A:D1:99:2C:B4
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019A26D43A6979854ED50AB77929BFEC35E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 18:00:33 +0000
Manifest this update: Mon 27 Oct 2025 18:00:33 +0000
Manifest next update: Tue 28 Oct 2025 18:00:33 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: OuK2+teuPMxwm/i/h2y30hCR0eZUal1rx1nyG/4UIHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:3a:69:79:85:4e:d5:0a:b7:79:29:bf:ec:35:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Oct 27 18:00:33 2025 GMT
Not After : Oct 28 18:00:33 2025 GMT
Subject: CN=32ba209d81a49394179f971be3c5cd4ad1992cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:1d:b3:1b:a7:9b:df:f1:83:e0:43:99:43:
bd:3b:fc:d6:ff:b9:89:6d:8a:c6:b0:ed:ab:2a:e8:
e9:0c:a1:74:ad:18:f5:ee:8f:d9:19:57:dd:a9:a8:
64:0d:ab:33:63:e6:f5:3b:f2:63:12:74:8e:21:cf:
2a:e5:c5:02:21:b7:75:2d:fb:8f:38:b3:3b:ac:f3:
5c:17:16:fa:8f:7b:cd:aa:4c:39:11:68:6d:65:9c:
d3:2b:28:5f:48:87:9a:8c:90:d3:d2:07:39:92:51:
84:09:2a:16:3d:f7:73:09:c5:04:2e:58:dd:69:db:
d3:d9:57:18:fd:4c:75:e9:ed:95:ee:99:ad:20:29:
74:6e:d9:90:6f:73:55:98:b5:96:fe:b6:72:3a:19:
50:b2:4d:df:d4:18:bc:2a:e8:c1:5a:12:e3:45:4a:
13:d1:5b:c9:f8:f9:9e:34:18:fe:6b:83:3c:e4:ec:
5e:ac:d7:80:07:03:31:c2:28:bc:19:56:b6:84:8f:
9a:32:62:06:ce:f2:ca:35:6b:f3:ca:d9:9b:a0:82:
06:94:10:12:c1:6d:06:46:fe:15:45:f0:50:0d:c8:
72:3b:4e:11:d9:ad:2d:96:33:16:4c:b0:2a:89:38:
dc:d0:c9:6a:b8:93:20:73:95:cd:cb:57:9d:24:20:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BA:20:9D:81:A4:93:94:17:9F:97:1B:E3:C5:CD:4A:D1:99:2C:B4
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:28:e7:a5:05:3f:ac:ec:0a:fd:9b:b9:1e:71:1b:70:97:d9:
c9:6a:fb:83:f6:62:98:09:90:1e:42:27:da:3a:b0:1e:fc:20:
16:9d:e2:16:44:d4:bd:9c:a3:aa:3e:83:18:3a:4d:5c:27:bd:
3c:04:a4:13:c8:47:19:0d:bc:e8:14:4c:62:4a:d8:70:3c:86:
6c:fc:0c:76:98:cd:09:2d:42:a6:7b:06:72:db:42:01:3c:78:
1a:7c:05:fb:4b:07:58:1f:9a:2d:39:ef:d0:c3:58:13:cd:13:
57:40:bf:03:92:f1:d4:f4:9d:f3:02:d6:b6:33:6d:be:35:29:
78:45:9b:97:eb:f9:86:dd:c4:88:09:e3:4f:f5:83:6a:bc:bc:
0e:d7:3a:f9:51:16:c2:2e:df:93:fa:25:65:75:d7:c5:fd:3a:
fb:a2:68:80:b5:02:41:c5:6b:21:db:db:0d:76:8a:78:85:8a:
46:7d:a1:64:e0:7d:0f:75:5a:f4:f4:fd:8b:7b:5d:da:3d:94:
b4:75:dc:35:52:10:b8:f0:1a:fb:be:20:1d:73:ff:51:a2:ce:
e1:5a:f1:ee:24:fa:66:27:9a:b8:1d:bc:df:be:e7:c5:9b:9b:
a8:af:18:75:3b:c0:24:45:03:1f:63:6d:69:a6:ee:e4:6c:21:
44:9b:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:31:32 2025 by rpki-client