Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: DrCYlMunPYaegMbkwWS14wL0kl21VOPW0a0B+qA10NQ=
Subject key identifier: 38:F6:3B:BB:F0:FB:D0:11:7A:17:1E:D0:1C:AE:1A:48:3A:84:E0:88
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 019A1EAD66D227CE211D0E15DFA6EA970B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 170E
Signing time: Sun 26 Oct 2025 04:01:11 +0000
Manifest this update: Sun 26 Oct 2025 04:01:11 +0000
Manifest next update: Mon 27 Oct 2025 04:01:11 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: H9hwLnpWwqTX3+jv4Kgv10Jc6v8iCUVV3luVt9v51lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:66:d2:27:ce:21:1d:0e:15:df:a6:ea:97:0b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Oct 26 04:01:11 2025 GMT
Not After : Oct 27 04:01:11 2025 GMT
Subject: CN=38f63bbbf0fbd0117a171ed01cae1a483a84e088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:c1:ec:f4:42:cb:e8:45:95:16:ca:f9:fa:
8e:0f:d8:e3:55:36:e8:c6:eb:3e:2f:40:32:8d:96:
0f:e1:62:15:6e:21:d8:6c:6e:70:8a:b6:1c:7a:23:
e6:8e:ba:e8:0f:4b:dc:8e:96:10:8c:35:ae:f5:14:
67:24:4e:cd:30:7f:ef:51:32:44:aa:c1:29:93:1a:
c9:1f:0e:2e:7f:7f:9d:60:20:5b:2a:ea:04:a1:39:
ba:36:88:ed:f9:71:34:0b:06:bd:e4:00:37:3e:ee:
62:1d:96:73:61:3e:f5:1a:23:bd:12:a6:12:b2:d4:
4b:83:f0:1c:36:ac:f4:24:02:45:61:fd:a3:e0:3a:
64:e6:14:ec:a5:3c:4e:73:22:64:be:2d:24:5e:83:
aa:af:37:df:a5:29:22:3e:27:79:94:32:48:c2:06:
69:25:a9:69:43:59:03:78:a9:6b:c9:f1:23:41:26:
1f:7d:42:39:d3:d6:e3:0d:d5:4f:5c:48:97:15:dc:
76:bc:fd:02:6a:7b:37:d9:98:28:47:24:50:d1:ec:
b2:19:73:7b:ad:d5:74:7d:ca:14:30:98:f6:dd:29:
c0:24:b7:4c:7a:b1:ed:6a:c4:4c:ab:45:e2:34:96:
d8:52:21:32:6c:59:8d:12:fe:fb:ba:a1:10:ff:b1:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:3B:BB:F0:FB:D0:11:7A:17:1E:D0:1C:AE:1A:48:3A:84:E0:88
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2b:a1:2e:fc:16:62:6b:d1:97:d4:ea:27:bb:a6:f0:cf:14:
30:a9:67:b1:84:6e:15:1d:a2:d0:6c:6f:b5:65:37:dc:3d:28:
3e:24:f6:89:b2:db:e8:b4:af:cf:ea:87:4c:6c:be:ce:8f:42:
d7:91:21:1a:0f:ca:50:ef:f4:ac:7c:a4:d4:f3:0b:63:4c:b1:
75:13:f9:23:32:21:02:0c:f4:ea:c2:42:56:0a:1b:aa:3f:03:
ce:72:5c:bf:b8:cb:55:c9:b8:44:4b:a5:26:38:1e:2e:2a:37:
18:af:fd:7b:b7:58:3b:fc:b0:cf:76:5c:f5:79:be:2c:d2:b9:
a4:58:1d:d9:99:c5:3f:8d:89:40:28:22:7f:83:62:a9:48:6b:
47:d2:8a:5b:2c:1d:82:0b:b1:35:87:c5:d2:48:80:8e:04:6e:
5d:08:ec:25:3f:5e:b0:71:81:dc:4a:ed:a8:0e:70:57:b6:b6:
bd:32:09:72:6d:62:79:29:74:35:15:71:4b:2d:db:b7:c2:98:
3a:35:61:20:a0:38:1b:42:a9:3c:c4:74:d4:70:a4:76:38:c7:
6c:81:bd:c2:60:e6:97:44:a7:c0:1a:24:17:7e:c5:d0:8a:9c:
65:bd:24:00:c6:2f:31:db:f4:8d:98:43:21:76:f0:84:db:f2:
60:d1:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:07:07 2025 by rpki-client