Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: MQ977GkV/glyJeoQkB1GpCim35N7sot/U0LzHwB2F7w=
Subject key identifier: 38:DB:BD:E2:60:9B:5F:D2:91:E7:B5:D7:89:26:C4:00:95:95:D8:CA
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 019A251C968958C3AC3EE31C75C539B9D5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 062A
Signing time: Mon 27 Oct 2025 10:00:21 +0000
Manifest this update: Mon 27 Oct 2025 10:00:21 +0000
Manifest next update: Tue 28 Oct 2025 10:00:21 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: ARThyTOzDXTLXGyzj/PN8Uohjo4+ltaZkzFX1cOZKBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:96:89:58:c3:ac:3e:e3:1c:75:c5:39:b9:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Oct 27 10:00:21 2025 GMT
Not After : Oct 28 10:00:21 2025 GMT
Subject: CN=38dbbde2609b5fd291e7b5d78926c4009595d8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:18:be:7e:ef:a7:26:36:4d:12:92:55:f5:
f3:c3:a7:01:dc:07:43:89:35:c6:32:d9:90:6e:df:
2b:d3:6b:8d:55:8e:b9:a8:25:ab:36:49:49:0d:1f:
0d:87:eb:7a:21:68:86:de:aa:d6:a7:d1:59:44:fb:
8e:31:77:11:82:50:bf:d1:8e:c9:0a:cf:48:e2:fa:
be:16:23:d9:65:ec:bf:cb:eb:4e:8f:b8:f0:03:3a:
83:90:7f:8e:f9:12:fe:b2:e9:fa:ed:14:46:68:20:
55:34:b0:39:0b:1e:d3:a1:60:fd:f7:69:9c:6e:3f:
7f:bc:66:2f:67:7b:a6:5a:cb:14:d3:9a:f1:60:0c:
f9:11:55:f4:15:93:e1:fa:d9:cf:35:44:43:7f:c1:
49:73:67:bd:f3:9b:7c:d9:5f:d6:bc:ae:24:2a:5c:
a9:8e:a0:1b:62:c0:90:92:8d:a8:35:d5:9d:73:d4:
76:fb:08:2d:e8:7a:b9:15:89:59:00:cc:2e:51:c0:
60:9d:ff:b9:95:20:9c:fb:85:15:ef:61:dd:f0:40:
6b:d7:22:e2:8b:c4:07:ed:c7:2c:da:05:b6:bc:68:
c6:b7:e2:76:4c:7c:88:8b:f1:34:94:52:03:d3:cd:
82:a8:96:c3:1d:53:48:20:b2:0b:6e:4d:7c:ce:ee:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DB:BD:E2:60:9B:5F:D2:91:E7:B5:D7:89:26:C4:00:95:95:D8:CA
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:01:1a:82:44:24:8a:f1:93:bb:c7:0a:9e:5d:23:6f:1f:
7a:cc:17:b3:ee:08:ff:96:c5:0c:3f:81:bd:e6:e3:e8:e3:0d:
a4:ef:ff:c1:22:c7:9d:60:97:d8:8a:1a:85:a2:54:4e:9f:fa:
11:63:1c:e9:a4:ac:55:c0:ca:9e:ce:07:38:3e:3b:0a:2f:7b:
26:5e:a0:fa:c3:19:ea:13:44:e3:23:f9:81:5a:35:29:42:50:
64:10:8a:84:e4:d0:27:e1:ec:52:f1:bc:fe:48:8f:1c:d1:9c:
d0:77:4f:84:76:47:eb:59:c5:5e:cf:24:38:5e:c4:81:75:be:
90:69:66:8f:98:13:f6:90:81:b9:83:25:61:38:26:63:a7:c0:
2a:3c:94:70:eb:4f:33:c7:30:bb:88:32:e5:4e:d1:97:22:83:
9c:2a:d4:e0:c1:9d:31:a1:30:44:7a:43:4a:d1:da:cd:0b:aa:
ae:b2:6a:ec:e9:1d:8d:d2:28:a9:cb:a1:91:b6:70:5a:0f:65:
1d:70:d7:37:70:c8:a1:26:2b:bd:50:6f:df:b0:3d:08:75:0c:
7c:23:b9:fe:4c:88:ca:95:b5:ff:0f:96:3c:f5:7f:6c:b8:ef:
1a:bd:74:ad:a3:9b:41:82:6d:79:11:8e:b6:c5:65:83:f5:77:
d2:5d:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:45:35 2025 by rpki-client