Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: 6j9U+cW+q5c4leCsC6IwqzKQLiYLVesW3X5UpnUixws=
Subject key identifier: 50:2F:63:3C:13:19:35:64:83:D8:4C:A6:F4:A0:7E:27:87:5D:80:1C
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 0199FC58E658D1F5E67DE3BF83C589CE2CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: wcusLOWccLORz7H/X1u0CMichoHohLU1BItiSFpxo7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e6:58:d1:f5:e6:7d:e3:bf:83:c5:89:ce:2c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=502f633c1319356483d84ca6f4a07e27875d801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:33:92:50:5b:9a:36:f2:c6:be:c3:5e:ee:
6e:5a:f6:f4:61:06:52:0e:1a:32:89:75:16:49:d0:
80:9e:55:7d:a1:5b:c5:50:a8:68:ee:ee:f0:3f:07:
69:46:57:c3:9b:3b:2f:c2:1b:0f:0c:32:0a:cf:5e:
76:66:22:9d:0a:7f:e1:a6:04:7a:06:8c:6e:6c:62:
19:75:a2:55:31:74:7f:31:45:fa:00:e4:ab:fd:a8:
92:fb:38:42:6a:1c:c1:76:87:2d:8b:fc:58:64:85:
88:7d:c5:89:97:12:dd:bf:53:b0:eb:8e:4a:40:07:
75:cd:8c:ef:64:8a:5b:95:c2:e6:d8:86:dc:a4:9c:
88:05:37:a4:8a:09:71:19:1a:72:59:b4:33:7b:e4:
54:15:49:ca:f2:ef:cc:48:85:16:f7:e3:59:72:1f:
e6:ab:ab:82:d5:1e:b7:52:bf:fa:03:f6:9e:d5:da:
dd:06:b2:26:6e:95:b9:82:35:6b:7d:3e:27:dd:13:
e7:87:1f:ef:30:62:62:c7:3a:72:53:d0:ec:f4:59:
31:3f:46:c3:0e:fa:a3:97:7a:75:cc:35:f3:d4:73:
ac:8b:8a:05:48:9e:d4:df:57:5e:11:50:fa:8a:5f:
8d:70:32:19:b6:91:28:8a:a4:95:ff:61:48:ae:6c:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2F:63:3C:13:19:35:64:83:D8:4C:A6:F4:A0:7E:27:87:5D:80:1C
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:88:3f:fa:b9:13:e4:90:a6:3a:ee:ef:dd:cb:1c:6b:fa:0d:
21:6a:5a:9d:78:79:6d:72:5a:58:df:6a:e9:2e:79:5b:7d:d7:
a2:18:9b:e7:f5:3f:8a:5d:9f:33:7e:30:99:9e:98:e4:4d:d0:
55:a2:3f:10:d6:0b:45:6b:10:66:02:5e:0e:77:f2:9f:24:26:
e8:63:d5:ee:6a:66:6e:3b:52:60:8b:81:67:e8:3d:61:13:10:
7b:69:fc:0a:ed:f9:a2:d6:b4:e6:79:08:b1:a9:68:4b:67:13:
a8:0e:c6:18:7e:b6:74:f4:c6:60:f5:b7:97:1e:92:98:1c:40:
eb:92:8a:9c:b7:13:f3:d4:bf:ad:b4:72:27:b2:63:bf:46:ae:
a1:41:45:2d:45:01:cd:49:34:eb:99:73:c1:c4:6e:ab:19:97:
ba:2e:c4:ae:3c:4c:c9:66:54:79:84:3b:17:8a:14:da:93:84:
e4:44:d4:81:7b:aa:60:6d:99:29:bf:5a:6b:b8:06:45:de:d3:
62:3f:9e:5c:8f:19:ae:68:f0:79:a1:ea:af:71:60:4e:39:30:
db:c0:24:5d:ea:03:bf:fd:41:ff:e6:4d:59:9f:9f:f1:5b:cf:
44:e7:5f:dc:67:3a:f2:12:54:43:00:a0:7e:99:de:b4:76:d7:
28:18:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:48 2025 by rpki-client