Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: wdbE/PFdZUwvOTRWmNk8YxZxv1XSkr3JXiyqa294suo=
Subject key identifier: A4:34:16:D1:38:64:E7:0E:00:B7:E8:01:2E:D6:F5:57:CB:49:F2:AB
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 019A1CF543BC1826B3273D6667A0BC5D7C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 20:00:26 +0000
Manifest this update: Sat 25 Oct 2025 20:00:26 +0000
Manifest next update: Sun 26 Oct 2025 20:00:26 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: /lNylkzq5aZ1oezPmQS2SfDkUD1DFLtbkMall4hJEug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:43:bc:18:26:b3:27:3d:66:67:a0:bc:5d:7c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Oct 25 20:00:26 2025 GMT
Not After : Oct 26 20:00:26 2025 GMT
Subject: CN=a43416d13864e70e00b7e8012ed6f557cb49f2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:5a:7d:e9:e1:21:c6:8c:9c:fb:e6:0e:95:
2e:4f:5d:82:7a:5c:5b:04:0f:ba:fc:56:f6:66:17:
62:b6:29:70:da:ba:dc:fc:83:25:ac:61:83:57:c4:
42:65:09:63:9c:62:3a:aa:0b:a9:5d:87:a0:c8:93:
4a:14:2b:23:3d:05:1a:72:11:19:d4:3a:ce:be:c7:
dc:af:08:3b:c1:e7:98:14:cb:ff:94:02:15:53:59:
d2:f4:4f:55:29:86:7a:dc:cc:f8:ea:f0:45:77:25:
a6:5f:9c:46:0c:73:8a:91:c6:3e:8b:11:c7:36:9a:
10:0e:68:a9:9f:56:b1:00:17:c1:f1:40:11:bb:25:
04:f4:cb:f6:86:b4:ee:f1:d6:f6:01:ba:06:10:8f:
b3:74:cc:ad:86:c2:11:ee:69:38:e0:c1:c8:a9:04:
54:28:c0:09:94:3f:59:40:cf:98:99:68:ac:79:e6:
1a:db:79:32:c5:f6:60:20:9d:12:08:1b:1d:7a:59:
4f:2c:9b:8f:95:ca:52:92:64:02:e9:e0:d2:30:04:
e5:d4:0e:98:3f:1c:6a:99:78:71:b1:4e:45:30:36:
78:22:fd:96:a1:7b:25:d2:c6:38:fc:e3:6f:b1:d6:
04:2a:d1:be:c3:cf:e8:25:d4:f5:c8:89:a1:7c:01:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:16:D1:38:64:E7:0E:00:B7:E8:01:2E:D6:F5:57:CB:49:F2:AB
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d9:29:48:bc:4d:7d:3c:67:da:e8:e9:11:58:b6:e2:c7:c7:
d1:d1:cb:c6:11:90:ed:98:91:9e:9b:af:96:c9:da:8b:99:76:
68:9c:5e:3c:95:11:f2:99:ef:cd:00:df:dc:91:73:e3:d1:e6:
ba:96:14:a0:6c:ec:78:5b:9e:a0:9d:a6:a0:37:17:24:2e:b7:
0d:63:35:b7:8c:12:72:66:3a:63:04:0e:3f:55:97:de:39:a0:
4b:f0:c4:2d:ca:66:8f:4d:71:6d:31:2d:e7:aa:86:36:9a:8e:
d8:1c:21:3c:87:be:e8:2c:9a:1e:c6:d6:37:bd:5e:39:4d:b6:
a6:a7:20:95:19:f4:2e:69:d1:4e:70:c8:73:b3:a2:fa:1e:94:
cb:14:07:23:d4:6c:dd:56:cd:85:96:35:9b:78:b5:15:06:5f:
23:7e:95:36:8a:81:c2:6f:1f:6e:4e:44:17:d7:b5:05:a8:66:
29:d5:c1:38:ad:b2:da:70:2b:df:4a:79:a1:c0:a3:4b:1c:a0:
e5:dc:9b:d1:f9:f8:66:01:be:e2:3f:50:bb:12:d3:68:d9:02:
32:93:bf:dd:dc:5d:ea:1a:39:37:94:94:64:ef:15:8d:16:62:
9e:88:67:78:67:5f:58:75:20:e5:2a:2f:4b:04:4e:a0:e6:9e:
57:49:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:04:30 2025 by rpki-client