Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: Mv21MvOv/09x6bftmfUN1wKBOIBeml73fn0f9mteAxQ=
Subject key identifier: 60:0F:BA:E2:11:43:9F:8C:DE:4E:81:20:4D:FD:97:19:26:5D:83:28
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 0199FB0ED40ACD7F29337A605D38583063A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 20
Signing time: Sun 19 Oct 2025 06:01:16 +0000
Manifest this update: Sun 19 Oct 2025 06:01:16 +0000
Manifest next update: Mon 20 Oct 2025 06:01:16 +0000
Files and hashes: 1: Ifp7fQ7mKS2UADFnL-dEcvfRDTE.roa (hash: zAV7cpAaiTXY8jJp2Gcf8CxnC05s7OAa7rmlAr6seaI=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: s9s9DtA5U9ythuJeigmmAont+sv71+oVeiRAZwOr5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d4:0a:cd:7f:29:33:7a:60:5d:38:58:30:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Oct 19 06:01:16 2025 GMT
Not After : Oct 20 06:01:16 2025 GMT
Subject: CN=600fbae211439f8cde4e81204dfd9719265d8328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:31:d1:66:47:2a:94:a3:c7:f9:10:8d:74:
82:21:b2:8a:d0:98:38:60:6c:a7:dd:ae:47:97:be:
66:d8:ea:e3:13:03:27:45:67:bc:33:3a:13:15:e2:
fa:f0:45:c2:c7:69:64:91:83:35:94:86:4c:c6:d9:
b1:97:e5:ce:93:89:ea:aa:e4:2c:05:72:b7:68:8d:
2a:5a:30:ed:71:3f:43:1d:51:c3:09:26:e1:aa:99:
f9:be:f3:a5:fc:dc:18:12:cc:1a:f1:fe:21:26:66:
62:4f:ee:e0:c7:58:a8:f0:3c:de:84:9f:9a:f7:66:
28:7c:80:c0:73:6a:33:4d:dc:b8:69:37:7b:a0:ed:
1c:77:50:9c:c9:38:fd:7c:28:fb:10:78:06:ff:72:
92:37:92:cd:f6:f7:f1:7f:93:e2:4b:be:13:03:22:
52:c4:40:53:d1:9a:f6:f2:96:c5:6d:2d:6d:48:a2:
54:3a:96:d9:79:52:33:b6:3d:28:a8:45:20:19:d3:
0b:eb:e5:8c:c0:51:2f:4c:21:e1:70:7d:60:7f:ac:
a8:b4:d1:32:d4:2c:59:c2:fd:c7:69:00:e0:b1:80:
c9:49:0c:f3:e7:0f:47:fe:2c:89:19:c3:b8:74:d3:
eb:4c:89:6d:6d:e6:34:fe:cb:f8:45:b9:cb:ff:11:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:BA:E2:11:43:9F:8C:DE:4E:81:20:4D:FD:97:19:26:5D:83:28
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:31:2a:5f:f5:7a:11:c3:6f:0e:51:88:a2:ad:0f:95:04:
fa:e5:18:3d:28:04:df:a9:19:12:34:dc:9b:bc:e4:04:f6:bf:
c5:ab:3a:6f:92:07:73:f1:c1:54:81:3c:bb:dc:11:ec:77:47:
d8:44:bf:05:25:80:b7:23:44:5f:60:d7:a8:2c:49:59:9c:b0:
81:f2:2c:90:1b:c0:b6:53:13:aa:3f:32:11:9f:50:34:05:97:
21:0b:5a:c3:ba:db:54:04:63:3b:e9:3f:90:e2:91:aa:3b:b5:
1f:7a:df:2c:fc:32:fc:87:28:89:97:cf:ed:42:a6:9c:d0:49:
cc:25:7f:f0:ef:3c:67:49:96:5a:a7:d3:6e:ce:f1:d4:35:28:
76:02:d3:3c:69:b3:8f:99:d5:b9:66:b9:0b:71:86:87:5f:f4:
32:ed:4d:cc:fd:26:b0:68:6e:9f:65:67:51:9d:23:49:37:7e:
9e:8e:b3:34:f3:e1:bb:3e:29:7e:b6:24:b6:a4:b4:57:0a:31:
e5:d8:87:e3:f9:2c:cc:cb:6c:94:54:7a:de:d1:ad:f9:5d:88:
94:31:7f:96:43:b1:05:09:f6:91:88:3a:53:b3:bc:ad:f7:8a:
1e:ae:92:34:9b:f0:c0:21:72:2b:a7:3e:45:80:38:54:41:96:
2c:1a:8e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:37 2025 by rpki-client