Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: C0UX73unojcj4+pKuXOom67NGw7ZKtndqGIFxWuZPeQ=
Subject key identifier: EA:AB:2A:D8:45:40:B4:8F:F9:94:2B:AA:98:7A:56:56:D8:1B:EA:A6
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 0199FE474DEEC7ACA1FEFF479E0199F3CD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0B26
Signing time: Sun 19 Oct 2025 21:01:49 +0000
Manifest this update: Sun 19 Oct 2025 21:01:49 +0000
Manifest next update: Mon 20 Oct 2025 21:01:49 +0000
Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: keEIjOkyq4ZTYIeVbIXFw6DieYCdKCjXOPLUfJPQWIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:4d:ee:c7:ac:a1:fe:ff:47:9e:01:99:f3:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Oct 19 21:01:49 2025 GMT
Not After : Oct 20 21:01:49 2025 GMT
Subject: CN=eaab2ad84540b48ff9942baa987a5656d81beaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:3c:26:a1:23:06:43:3b:82:1e:94:23:00:
ea:bd:8f:7e:a8:92:a2:aa:aa:1f:50:d0:4c:17:26:
b2:67:f7:3b:4c:01:7e:e8:13:db:14:4a:7c:eb:4f:
87:fa:a5:3e:92:8c:54:88:15:01:3c:c0:2b:04:dc:
33:54:a2:5c:af:04:73:58:48:e0:1c:9c:2f:c1:8a:
4a:4f:3f:c2:cf:d0:f8:f0:e4:d4:74:6c:8b:6b:c2:
1d:9d:9a:66:c9:cf:77:40:a3:66:a9:e1:60:db:2d:
77:31:c6:62:f6:a6:c6:92:61:5e:e4:83:49:db:50:
35:f5:18:d0:1a:b2:ad:98:4a:6f:1a:82:9e:d7:6c:
97:b0:28:09:58:dc:3c:2b:fc:24:5a:cb:68:93:7c:
1a:9b:cf:be:30:c1:3f:50:23:c3:2c:25:2d:c2:ea:
fd:cc:61:54:29:0c:d8:7f:c9:6c:56:5c:61:59:9e:
c9:38:52:33:b4:2e:ef:e1:72:2a:a5:c6:80:99:ae:
b5:0a:a6:35:2a:f2:61:41:cb:51:e8:d8:2a:bc:8f:
07:24:b4:45:21:01:7f:04:44:66:4c:ea:30:c1:f0:
53:d3:7b:4d:1c:21:4f:2f:85:4d:be:18:2c:72:4b:
43:7b:ac:ac:21:13:5d:58:c4:b3:bf:ef:05:99:09:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:2A:D8:45:40:B4:8F:F9:94:2B:AA:98:7A:56:56:D8:1B:EA:A6
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:82:7f:c2:77:c2:bd:f2:20:36:9b:0c:81:41:97:8a:33:34:
4e:38:e4:1b:e8:d7:29:1a:77:31:8c:9b:45:96:19:57:bd:a2:
f7:2b:4f:a2:4f:d0:41:f3:c3:12:d1:e0:a7:df:bb:8c:14:31:
87:c8:90:46:4d:18:44:be:8c:c4:72:c3:d4:8f:18:01:b0:56:
75:2a:0d:77:c7:a5:64:81:5f:8b:1c:00:6f:ba:b7:3c:84:5a:
15:b6:7e:3e:b4:82:5c:06:af:7e:b5:27:4d:61:81:fd:9d:be:
9c:7c:39:88:a6:8b:8f:cf:2b:8f:14:02:d3:33:70:a8:4a:cb:
cf:a9:74:82:91:01:2a:50:8c:ab:f8:73:f1:7f:8f:ee:b3:2b:
df:80:b7:e1:c1:c6:b6:e2:f4:81:61:6c:89:8d:13:b1:82:7c:
f2:37:73:3f:68:6b:ba:9c:25:a5:70:c7:49:f9:16:75:c9:cb:
df:85:74:e9:6c:ca:ce:9f:10:0b:f0:76:68:24:e2:62:7d:cb:
d5:f0:aa:48:a0:d7:75:aa:41:f0:55:d5:6f:17:16:55:79:a6:
63:75:f9:2a:e1:3a:f0:3a:34:e1:01:fe:51:5c:be:e4:be:cb:
fa:bc:2a:55:4a:53:43:b7:f5:c4:2d:4b:e3:93:bd:90:e8:ec:
3f:d2:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:02 2025 by rpki-client