Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: J4Z+MUc8SdWRTRLt/Xhhh2JdxxJRM+H3J/pD+q15NEY=
Subject key identifier: 81:07:81:FC:06:98:F3:E6:B8:10:13:3B:4D:5B:F9:FB:47:29:DF:1B
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 019A22C0B57ECF4E123F0BE3F458E093EBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 1709
Signing time: Sun 26 Oct 2025 23:00:45 +0000
Manifest this update: Sun 26 Oct 2025 23:00:45 +0000
Manifest next update: Mon 27 Oct 2025 23:00:45 +0000
Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=)
2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=)
3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: WSyj5xinQoYy+wZvZLWYMUIQEhmOHm8VJ9e/Y2bh8BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:b5:7e:cf:4e:12:3f:0b:e3:f4:58:e0:93:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Oct 26 23:00:45 2025 GMT
Not After : Oct 27 23:00:45 2025 GMT
Subject: CN=810781fc0698f3e6b810133b4d5bf9fb4729df1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:65:a1:0e:90:4a:bf:9d:e3:60:6f:70:aa:
69:36:e5:d6:6e:e5:f3:bb:e9:49:5a:d7:8c:6c:9b:
71:74:77:5e:03:f2:7a:8d:79:b0:b9:3a:79:89:3d:
62:0e:82:48:0c:b1:06:68:ee:2b:64:86:e9:a6:56:
64:1b:03:0c:29:64:aa:d4:8b:d2:17:72:15:61:5a:
73:93:9d:cd:53:1a:b7:3f:5b:36:3d:12:a2:a2:ce:
51:9a:fc:ed:86:59:3e:63:40:0f:82:77:fb:fb:1f:
d1:dc:11:71:f2:74:68:2e:4b:b5:e4:eb:45:22:ac:
ab:b7:18:00:53:30:e8:92:d6:72:b4:cb:88:a5:3e:
0d:40:ed:5f:e4:b0:53:2f:b3:07:79:ac:15:d0:fd:
37:d3:af:ce:cf:cc:8c:5c:57:14:7b:7f:2f:7d:6d:
81:53:6e:a5:1d:6d:2a:0b:e4:ce:12:9d:eb:54:da:
46:ba:d8:f5:42:1c:16:6b:63:ae:d0:d9:78:79:e3:
85:f2:27:34:c6:8e:04:82:70:3f:35:53:11:74:19:
0a:49:26:2b:0a:9f:a3:cd:55:24:38:8f:1a:b3:7d:
7a:b9:80:a2:e3:bd:04:ae:ac:5e:72:97:ae:78:63:
3c:bb:98:b3:9f:af:31:71:f2:20:85:89:a9:84:e5:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:81:FC:06:98:F3:E6:B8:10:13:3B:4D:5B:F9:FB:47:29:DF:1B
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f8:3e:d1:4a:f9:0b:83:8e:84:ad:f9:b0:f7:f2:b2:b3:c1:
df:71:cf:db:ab:81:27:0c:75:50:ba:c6:bd:b3:d7:74:3e:7b:
b9:c4:e1:b2:0a:19:3f:6f:16:4b:3e:7f:a0:b2:e7:27:0a:d8:
8e:de:78:d1:34:d0:53:78:29:e4:7e:57:e6:19:b0:59:c6:bc:
70:29:31:69:ba:ad:35:c9:4d:04:2e:32:6c:bf:38:b9:07:3d:
e7:15:ac:0b:d8:b4:d9:b2:2b:68:b0:e2:44:e6:55:33:a5:d0:
95:08:b7:05:a2:09:db:46:62:05:48:ef:61:9c:ef:e8:a5:65:
69:e2:f9:09:ad:69:b0:89:b8:1e:ee:26:c0:be:b1:2c:ac:d0:
f3:c1:6b:0b:6f:a9:88:76:ff:a5:1b:ba:4f:b6:bb:02:81:22:
d9:c4:9a:8e:50:27:22:5e:b7:68:0b:51:85:cb:a1:5b:f6:a4:
4b:d1:fc:6d:4e:0d:09:c8:bd:3a:ee:39:80:b0:da:44:02:73:
e5:52:75:dc:01:f2:b5:62:80:7b:74:d6:32:8a:18:25:2b:92:
40:6a:1f:e1:bf:20:d1:8e:53:00:c0:72:17:70:55:51:fc:65:
60:63:36:15:94:58:5c:3d:48:65:ac:07:cd:44:49:00:72:91:
7b:1c:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:47 2025 by rpki-client