Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: JvXRi9HiwhyNzsmab6dQ5JKGNUeypUn9EQO5gzlYCcU=
Subject key identifier: 48:77:E5:4A:62:5F:F5:27:D1:0B:AE:F7:12:71:00:F0:6D:2A:98:CF
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 019921B2365D94A393A60D07BB1315957189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 0E09
Signing time: Sun 07 Sep 2025 01:02:31 +0000
Manifest this update: Sun 07 Sep 2025 01:02:31 +0000
Manifest next update: Mon 08 Sep 2025 01:02:31 +0000
Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: FbzAynRZUb69R4cx7fNXTKrIrTOiKWeJ1N1yDlisE0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:36:5d:94:a3:93:a6:0d:07:bb:13:15:95:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Sep 7 01:02:31 2025 GMT
Not After : Sep 8 01:02:31 2025 GMT
Subject: CN=4877e54a625ff527d10baef7127100f06d2a98cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:66:16:ac:11:68:ac:66:ff:b6:60:9e:fa:
d3:96:fc:5b:61:86:bf:9e:0e:a0:c4:d0:c5:8d:b5:
7d:57:f6:02:7e:8a:18:a0:9c:5c:ce:95:dc:2e:47:
d2:79:d3:f3:19:9a:d7:d0:4b:a5:28:1f:88:ce:b2:
dd:c2:88:32:dd:d1:14:09:54:9f:9d:0b:e1:4d:4c:
03:d3:a9:ec:b1:61:74:be:65:67:73:a6:cb:8c:f2:
fd:40:f2:b0:90:7b:93:34:98:e8:13:dd:23:89:f8:
04:15:ce:bd:4a:c6:12:65:cc:1a:f9:7a:2a:9e:7c:
ce:4c:f8:af:14:41:c9:f8:be:69:35:d6:13:62:91:
52:b6:7a:2b:2b:fe:0c:e1:0f:9f:bf:97:77:dd:66:
a2:04:9e:5f:72:b2:ef:d8:27:58:2e:93:03:84:6e:
5d:9d:c4:78:de:fa:c3:b0:bb:ef:07:77:b9:dd:e6:
dd:40:e3:95:31:87:d1:92:8a:6f:04:19:bc:1b:d0:
11:79:2c:d0:25:7f:33:c0:2f:e4:cf:14:cd:fa:5f:
f3:6c:33:e7:65:21:69:36:63:e3:84:19:6e:39:d3:
e2:f4:fc:b9:d5:38:50:a8:7b:0b:1e:f3:71:dd:cf:
38:da:52:77:7f:f1:1e:61:8a:2a:4e:10:49:e9:ea:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:E5:4A:62:5F:F5:27:D1:0B:AE:F7:12:71:00:F0:6D:2A:98:CF
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a3:f4:5f:fd:9a:bd:cf:eb:9b:ec:6c:40:34:6c:b0:13:29:
1a:d5:39:f3:cd:8f:50:18:73:bc:0d:0f:1d:a2:fa:12:89:33:
a2:d5:12:09:20:54:7c:d2:db:37:5b:47:40:c6:4d:09:26:71:
df:85:5b:20:0c:15:b9:fa:21:c9:b8:e6:9c:21:e7:7c:bb:dd:
73:39:38:84:20:0a:bf:c0:99:f6:f1:fb:c2:ee:da:4b:cf:b8:
12:5e:1d:7a:9d:e8:7f:1d:9c:1c:93:d7:a6:59:24:38:de:21:
17:2b:3c:80:95:35:48:b1:90:5c:9b:64:0b:a1:69:66:d7:23:
b3:b2:cc:e5:64:a4:07:3c:ed:8b:71:6b:6c:37:72:0c:9b:e7:
39:c0:7c:ee:32:6d:e3:48:cd:7b:fc:74:e3:cd:f2:1c:5b:59:
73:4c:20:d5:0d:d0:50:14:9a:bb:59:92:cb:f0:5d:97:2d:1c:
aa:de:bb:c3:e9:75:5f:9b:c2:59:f3:ea:01:98:32:92:4e:d1:
f4:68:50:0d:1b:47:ed:aa:1d:67:7a:62:86:d1:4f:9b:8e:e2:
cd:23:9f:7a:d6:67:9e:c3:41:19:3b:00:71:df:f3:bd:44:43:
60:2d:33:f1:7b:e0:60:78:ce:83:5d:bc:06:47:41:11:66:f7:
07:17:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:15 2025 by rpki-client