Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: h3Ai1jETi0Y28E+CkzdlTixD84QZBVtE70yK2Zy/+7U=
Subject key identifier: 9A:FF:12:EC:66:17:67:C7:DE:11:0B:26:AD:18:3D:4F:4C:75:9A:07
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 0199221F592587C4EC19D150EDBFFEF4ED08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 0C
Signing time: Sun 07 Sep 2025 03:01:43 +0000
Manifest this update: Sun 07 Sep 2025 03:01:43 +0000
Manifest next update: Mon 08 Sep 2025 03:01:43 +0000
Files and hashes: 1: dIRpTlRdZwkzOjzMpDEo5Bfz7bk.roa (hash: C+FNl7OuHMU4htW0AknPyHxKy9e5ZPEt8r7b2jyiJx8=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: dfXQh7sfFLNp/BzD/EO+hgAaXLjue9VjguRQXqJGT1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:59:25:87:c4:ec:19:d1:50:ed:bf:fe:f4:ed:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Sep 7 03:01:43 2025 GMT
Not After : Sep 8 03:01:43 2025 GMT
Subject: CN=9aff12ec661767c7de110b26ad183d4f4c759a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:a4:97:d9:89:0e:13:ae:34:52:76:4d:ea:
4c:e7:1a:0e:1b:8c:7b:af:a7:0a:1e:03:e7:0e:c8:
4e:b4:1e:ee:8a:c0:6f:ab:df:25:39:81:6e:2f:4d:
a4:c9:23:5a:08:85:0a:6f:a4:0f:b4:e9:28:93:07:
f5:a6:10:f9:7a:49:b1:df:17:f9:75:39:ac:bb:66:
a0:41:d3:13:ee:66:1a:da:b0:0f:ca:ab:16:da:ca:
85:97:b8:18:cd:3b:52:ab:e2:4a:fd:47:85:83:27:
1a:72:55:46:20:20:89:bf:fe:35:f7:60:fe:40:86:
68:06:35:bb:5f:59:7b:05:f0:a3:14:77:c2:59:46:
55:61:b6:15:a8:59:79:2c:d8:69:07:a1:13:8e:ea:
44:ce:d6:a5:f9:62:cf:d3:32:e4:c8:9b:48:6c:9e:
20:87:bf:2e:4e:e0:f3:55:6a:3c:25:6c:77:cf:a9:
df:2e:53:c9:a8:40:9d:89:17:f7:11:41:a9:44:fc:
11:49:4c:4b:65:1b:50:8b:c1:05:b4:5a:54:76:ce:
e9:c5:a0:d4:e5:1a:5f:01:ef:d2:37:90:59:85:f1:
63:bb:b6:a9:9d:3d:51:d3:de:7a:8a:95:30:78:dd:
c7:4b:a5:a9:ca:50:b5:1c:53:8e:9c:be:8f:9f:6c:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:12:EC:66:17:67:C7:DE:11:0B:26:AD:18:3D:4F:4C:75:9A:07
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7b:ea:9a:39:4e:12:52:85:5b:63:40:53:1a:6e:7f:59:5e:
2f:a3:c1:f7:0c:61:62:4d:43:a8:25:d2:1e:db:25:bc:46:a3:
1a:b7:61:b6:52:27:ff:16:fb:57:9a:87:7f:14:2b:ae:73:23:
cb:3b:e4:03:57:e4:3d:53:b3:26:97:ed:6d:e4:a4:91:a1:93:
fa:cb:c0:46:cf:3a:16:2e:95:d1:09:81:99:71:06:d2:5e:11:
4c:6e:82:93:1f:84:13:23:c3:72:1e:79:18:00:81:a8:81:49:
1b:e6:22:94:de:11:7f:4a:68:8e:1d:9b:94:6f:f2:79:d4:10:
3a:ee:2e:46:c8:31:67:7d:32:d2:f2:b0:40:7f:d1:35:4a:5d:
0a:8e:cb:1b:9b:54:7a:c8:91:7e:4f:6b:59:0c:33:49:a4:f5:
b0:83:42:47:a7:da:f5:4f:07:b1:80:32:f9:57:cd:cf:d7:44:
13:fb:7e:e0:c2:f3:5c:12:83:10:87:f7:4b:e4:fd:98:cb:be:
77:d1:fd:b1:bb:e4:29:94:f4:61:f8:24:86:c9:80:e3:aa:3d:
87:8d:9d:6d:72:4b:92:d3:86:b2:e7:b1:22:8d:74:87:30:7e:
30:d4:44:b5:dc:da:07:78:b9:8f:2f:70:d5:fb:70:53:fa:5d:
90:14:69:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:44 2025 by rpki-client