Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: X9kopyxljm2C0wsQELwZFmyPooW4Y6vFVZuQ6tMH1C8=
Subject key identifier: 84:B9:9D:EF:87:85:16:63:4F:1D:69:FD:02:B7:80:DD:2A:55:E8:E3
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 01992DEBF7733B3D7850573736D85C01E5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 0FDD
Signing time: Tue 09 Sep 2025 10:01:02 +0000
Manifest this update: Tue 09 Sep 2025 10:01:02 +0000
Manifest next update: Wed 10 Sep 2025 10:01:02 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: S88EXrbu2/Sjg6kTjt98+sUVwZadDipWMnAEzvafGkM=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:eb:f7:73:3b:3d:78:50:57:37:36:d8:5c:01:e5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Sep 9 10:01:02 2025 GMT
Not After : Sep 10 10:01:02 2025 GMT
Subject: CN=84b99def878516634f1d69fd02b780dd2a55e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:0d:3d:08:25:da:02:6b:f3:a6:3d:9f:79:
b3:2b:85:e8:0a:6b:7d:68:e6:8d:86:71:e2:4b:82:
5a:7a:0f:b1:d1:a0:37:e5:e2:00:09:ae:0a:ad:bf:
4a:cf:ea:1c:21:a5:5d:29:38:61:22:3c:96:e1:14:
ce:1d:9b:6b:64:81:3d:e1:86:78:ef:ce:7e:fd:fe:
6b:2a:98:a5:8e:10:46:55:c0:17:b9:88:2e:47:b2:
4d:2c:5d:54:23:f7:c0:fd:3c:62:58:cd:ab:12:a2:
34:2f:d9:a3:f1:1d:26:e3:c1:12:e6:f5:f1:f4:d1:
0e:98:9d:fc:a5:bb:90:ce:3d:11:68:4f:a2:36:46:
46:86:fd:d5:1b:2b:ce:bf:e9:44:3e:88:41:24:ed:
1a:27:a4:d3:0e:96:4c:ec:67:2e:60:6c:68:53:c8:
59:54:76:30:1e:3a:bb:84:b9:50:02:47:5f:70:b1:
64:bd:18:dc:2d:2b:3c:1d:fc:2b:57:7c:7e:30:a5:
e4:10:c4:45:4d:4d:f4:76:3b:a1:66:0f:1d:26:3a:
20:a7:1a:98:2f:bd:60:13:e8:13:62:81:2e:3b:f6:
9d:9d:9f:e5:ec:0d:1b:bb:3c:69:5a:71:ee:41:71:
a1:fb:66:79:53:60:10:2b:f9:51:c7:63:12:cf:f2:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:9D:EF:87:85:16:63:4F:1D:69:FD:02:B7:80:DD:2A:55:E8:E3
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:e8:9b:6d:9f:3b:ec:21:24:69:7b:7b:2d:cc:4a:63:33:
cf:99:f9:55:e4:6b:f7:5a:14:a4:9a:84:bc:87:4c:56:5d:e2:
53:91:f4:03:e7:23:06:a8:fe:5a:b7:34:d1:20:69:c3:bb:85:
f4:96:77:c2:d0:34:84:25:9a:a4:4a:49:88:38:70:05:88:19:
07:9d:ef:3e:1c:0a:db:11:49:96:b5:59:48:34:40:e3:26:ef:
fe:4e:5d:69:d2:b9:39:b1:45:ee:ef:4f:d7:03:10:b9:a9:24:
93:e5:a7:0c:ee:29:53:87:fc:9c:6b:f0:99:5f:39:9b:b9:40:
96:e3:1d:b8:fc:99:94:a3:54:4d:31:23:e4:93:5c:43:14:2f:
b5:6c:a9:c3:fc:12:61:c4:6e:7b:7a:4e:6e:81:1c:81:bd:2e:
3b:3d:86:18:81:d9:77:37:d8:a7:c7:fe:cf:2d:29:f4:9c:e1:
55:e3:5d:2d:7a:61:16:1a:b4:82:51:8d:71:e2:00:63:9d:5a:
8a:2c:1f:1c:45:c9:76:49:cc:b4:06:6f:d2:b9:ff:5f:88:a4:
bf:24:2e:db:08:f6:8b:43:91:ea:37:06:fd:f2:c7:9d:65:4b:
3b:9c:59:d1:ed:93:e9:82:91:c5:ca:80:e8:95:1c:3c:c3:c0:
23:f8:02:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:14:17 2025 by rpki-client