Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: qO41MAheupW2ROR9XZWPN6J64Lvkcw1IMjhVg5eiwNA=
Subject key identifier: D6:FE:25:BB:9D:81:06:FE:EC:DC:F9:75:B3:E7:F9:B8:ED:AD:D7:BC
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 01992F6C48D917C1759755444A9E15B33AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 110A
Signing time: Tue 09 Sep 2025 17:00:49 +0000
Manifest this update: Tue 09 Sep 2025 17:00:49 +0000
Manifest next update: Wed 10 Sep 2025 17:00:49 +0000
Files and hashes: 1: HTKjluKoMYE3YnxNS8OX7g6z7cg.roa (hash: sAIqDaQKvUjEGEm5NaK3hjATSYMoprKa9F9LOvjEkOU=)
2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: p6uj7akIhUlVKljRWnAmO/0G2UdkyL53uErmvlNPgHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:48:d9:17:c1:75:97:55:44:4a:9e:15:b3:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Sep 9 17:00:49 2025 GMT
Not After : Sep 10 17:00:49 2025 GMT
Subject: CN=d6fe25bb9d8106feecdcf975b3e7f9b8edadd7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:5f:c6:ad:0d:13:f7:52:6e:21:d8:03:b4:
e3:aa:53:bd:04:0a:89:10:7c:ac:e3:43:de:c3:6c:
39:68:96:78:92:df:f6:05:d1:c7:a1:01:3c:cc:e8:
c0:f7:b6:4f:77:52:ab:cd:c4:71:f4:b5:de:65:04:
e9:43:39:52:79:07:fa:4a:17:f2:8c:0b:54:b4:83:
d4:c6:d5:f8:8e:4c:ef:a5:ff:c9:a1:36:4f:ac:3e:
3e:b3:39:d5:84:82:3f:59:0f:92:fc:03:82:b0:c8:
f5:e7:d6:83:83:b9:d2:3d:15:92:95:37:69:c5:10:
53:8b:ed:ac:ce:06:86:56:88:dd:c9:b9:2a:2a:b8:
39:8b:82:be:1a:0f:3e:8c:84:93:d5:97:18:06:11:
13:74:dd:e4:6c:70:52:1c:28:0c:49:c4:47:ac:a1:
75:ed:99:14:61:ea:ac:dd:57:1a:bd:f5:ab:34:2c:
f4:40:30:8a:e2:5f:97:0e:c7:34:b0:a2:08:14:f6:
52:31:55:2b:51:2e:98:bb:d5:cf:5e:48:85:40:1a:
26:c7:12:a7:88:f4:9c:63:c9:e3:6b:f8:23:ea:d9:
6f:e9:0d:4e:a9:d5:c8:2d:72:1b:ae:e9:36:82:74:
ba:ee:86:cc:b0:5b:bf:27:aa:f8:77:10:2d:ec:d2:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FE:25:BB:9D:81:06:FE:EC:DC:F9:75:B3:E7:F9:B8:ED:AD:D7:BC
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e7:e6:1e:da:65:42:e2:62:1f:de:a5:5d:02:89:1f:a7:89:
0c:cf:08:10:a7:a7:38:71:41:df:8d:41:cd:70:0d:9f:ae:66:
9c:cb:5e:44:43:a7:d8:56:b3:35:c8:99:20:60:4f:c8:64:8b:
8e:f7:7d:58:d6:c1:3d:7d:96:55:72:b1:43:49:36:a6:cc:ae:
5a:f0:cd:44:09:73:03:f8:fd:16:b7:7a:7e:74:c5:48:b8:58:
ac:18:b5:a9:6a:f5:58:a6:ae:bd:35:84:8b:f4:32:67:a1:8d:
b4:c0:8c:00:b3:c2:15:c0:e9:53:a4:09:96:d5:9e:81:a3:22:
54:14:a2:eb:2d:0a:06:2c:4f:54:3d:55:c9:d9:8c:a5:74:cf:
ba:62:b7:29:13:36:c4:28:4f:c0:89:47:69:25:db:04:6b:f3:
f6:04:6a:8b:4c:20:26:f5:14:67:9a:b7:bd:20:b0:73:d3:b3:
b5:32:d4:19:66:79:0c:82:dd:bd:2c:45:c8:2d:0c:5c:65:e7:
23:e8:f4:7f:8f:39:6f:24:d7:ec:4e:d2:9b:36:eb:fc:57:e7:
7e:f5:fe:88:63:4d:85:ee:67:3d:f4:fc:c3:aa:89:d5:0c:64:
c3:08:cf:04:cf:bf:e5:04:fc:8e:f4:ef:95:13:87:0c:b1:93:
6a:6e:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:03:39 2025 by rpki-client