Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: fXdigYlFsrokVtms0KQQrNsgkIpZWGb3pX3c196PGcU=
Subject key identifier: 71:E0:E5:F9:60:89:7D:EA:7E:AC:0A:07:29:E6:CC:56:AB:89:87:14
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 019935A55696EB3653D772B0602AB9E3E53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 05AE
Signing time: Wed 10 Sep 2025 22:00:51 +0000
Manifest this update: Wed 10 Sep 2025 22:00:51 +0000
Manifest next update: Thu 11 Sep 2025 22:00:51 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: v7P3yA+2v1r/87KACIEFPDUoXaAzwsTDpfiqJyVJgl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:56:96:eb:36:53:d7:72:b0:60:2a:b9:e3:e5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Sep 10 22:00:51 2025 GMT
Not After : Sep 11 22:00:51 2025 GMT
Subject: CN=71e0e5f960897dea7eac0a0729e6cc56ab898714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:ae:03:cb:76:b7:e8:8b:0b:a3:6c:0b:c3:
b2:4e:62:64:1b:a8:ce:90:d3:98:91:2f:fb:26:41:
fb:bd:95:8e:86:0f:30:cb:a5:78:b3:68:7b:c4:54:
50:92:16:9d:bd:de:ab:20:7a:2a:1b:0f:ad:9c:ed:
b4:e2:e8:c6:f3:f9:9c:9b:f7:57:d6:d4:0c:32:17:
6e:f3:bf:72:7d:07:88:f4:34:25:3a:bc:86:de:1a:
24:a3:e4:16:41:e6:94:c1:a9:44:86:6d:99:c8:76:
55:30:06:ff:21:3f:ea:cf:fc:c4:06:11:36:69:d4:
39:7f:8e:b2:73:e9:ac:69:2c:ca:a3:c3:83:94:f8:
3e:55:c2:ca:50:2f:0d:e9:ad:4a:7c:85:97:ad:3f:
9b:92:1e:e0:9d:af:5c:93:19:08:c7:55:99:ea:44:
bc:0b:03:9b:ca:fa:95:ab:32:9c:57:6a:5b:5e:5c:
31:de:1a:f6:88:42:fb:c0:e4:ea:ee:b1:f3:30:11:
e4:90:e3:8f:5e:e9:a6:00:03:5c:c5:0c:7d:ee:16:
d3:6d:bc:13:f6:d9:19:b4:a8:9c:9f:b2:ad:70:a7:
e4:54:b3:61:6d:7e:2c:b9:4a:2c:b5:af:1f:a4:dc:
6e:67:98:eb:d8:87:91:b3:0c:16:d4:c0:37:0b:5e:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:E5:F9:60:89:7D:EA:7E:AC:0A:07:29:E6:CC:56:AB:89:87:14
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8e:8e:71:cc:52:01:eb:5c:04:76:23:a0:16:dd:0b:d5:a9:
9b:2d:3f:d9:01:b8:bc:18:df:95:a6:28:42:4e:65:7d:b3:4e:
d3:44:56:e7:f4:39:36:96:68:cf:7d:9c:f0:62:f8:62:d3:d1:
0a:d4:39:78:e2:56:cb:e6:ed:25:77:05:02:d4:59:21:8a:59:
fe:1a:90:37:d7:f4:a4:c3:c9:56:fc:a1:ce:9f:30:84:30:e7:
26:12:f6:ae:0a:e2:76:db:89:81:57:fb:f1:66:23:3c:bf:89:
e2:68:92:6a:bd:ce:a5:47:8a:b4:43:08:14:b3:3b:f6:86:4a:
a1:f3:24:a7:ae:8b:74:de:3c:ad:67:be:85:60:0f:47:a1:fb:
fb:53:e4:a4:8e:ed:f9:1b:c4:47:cc:0e:eb:5c:dd:2e:39:f8:
2e:5f:60:b5:35:2b:98:ca:29:f3:08:97:10:31:86:5f:04:43:
e8:f2:76:eb:8c:7c:ac:db:12:ff:ad:25:94:8d:0c:5f:d1:c4:
71:a4:7d:88:22:c2:4b:d3:59:ee:d0:8d:c7:b8:4a:d3:dd:70:
3d:49:20:58:21:5d:7f:d7:2b:a0:dd:2a:1f:e8:ef:25:29:db:
27:8b:a0:4c:32:68:8e:ad:bb:3b:87:c5:bf:c1:cb:93:42:db:
b6:21:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:46:11 2025 by rpki-client