Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: NuwxZU6rNN+AEt1SmlHpYFx9hZo64kXft72xI3+d9jo=
Subject key identifier: 42:D6:2B:64:C4:83:55:EF:C0:96:2B:11:ED:25:87:AA:D2:75:9B:D6
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 0198D47279714E9E54654CCB9B18552D1ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1663
Signing time: Sat 23 Aug 2025 01:02:08 +0000
Manifest this update: Sat 23 Aug 2025 01:02:08 +0000
Manifest next update: Sun 24 Aug 2025 01:02:08 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: JCyub0huu6uMkUyv2AnOSwcUmZ2N9UgfkUILpEaB4Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:79:71:4e:9e:54:65:4c:cb:9b:18:55:2d:1a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Aug 23 01:02:08 2025 GMT
Not After : Aug 24 01:02:08 2025 GMT
Subject: CN=42d62b64c48355efc0962b11ed2587aad2759bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:ba:04:89:d8:8b:3d:84:a0:1a:e4:43:1e:
b8:31:40:38:6e:5f:5d:9e:2c:e8:00:9e:f2:aa:19:
7d:3b:ce:6e:ff:1d:67:33:e2:a1:23:b0:4c:e2:82:
06:05:de:36:b3:9f:69:19:39:b1:5d:ba:d9:62:5b:
8b:19:13:7b:fc:d1:d6:af:4c:a1:c2:d3:35:d6:15:
a5:17:5b:dd:52:52:52:b2:92:6e:38:ac:eb:cb:cb:
30:68:25:24:84:f8:e1:cc:6e:d6:19:e2:91:95:34:
ef:e1:40:2d:9a:75:29:8c:ec:9e:fa:06:0b:ae:76:
71:cf:74:20:0c:c0:5a:8c:fb:17:2b:fa:52:6a:e2:
3d:e3:75:31:7a:61:85:48:6c:c3:77:37:f0:6c:22:
5d:9c:24:f5:5b:63:2d:20:e4:42:c6:6d:2f:88:84:
66:5c:d1:36:0a:d8:bd:0c:80:4d:1d:b1:2a:03:30:
bc:02:f9:78:27:53:01:1b:d1:01:3f:c9:b1:d5:b5:
fa:d9:3d:f5:7d:f5:8e:e0:37:ce:20:26:d4:fd:2d:
a3:b9:e2:29:38:1e:05:9a:3b:41:00:40:6e:84:a7:
d6:64:47:1e:85:e2:fc:bf:1e:4d:d5:0d:89:99:79:
7c:21:ee:a1:d8:55:05:d9:e5:2d:a5:45:99:68:f9:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:2B:64:C4:83:55:EF:C0:96:2B:11:ED:25:87:AA:D2:75:9B:D6
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:66:e1:db:8b:84:b0:18:50:e9:16:6c:a0:4c:d6:3b:c7:47:
24:88:e2:bd:63:44:18:9f:40:4b:fd:29:a0:2a:a9:7d:6f:4c:
0f:41:76:b2:60:4c:de:e4:d2:35:8a:71:a9:47:66:58:12:ca:
a1:45:06:08:63:68:bb:3c:f4:90:09:f7:9e:75:db:c1:1c:ce:
28:99:1d:50:a9:d3:40:35:eb:d5:c4:62:55:50:b5:d0:3a:f4:
2e:57:0d:db:74:94:7a:cd:92:a6:5f:c8:2d:db:d9:20:77:d7:
98:cf:97:77:96:77:06:ff:c3:8b:9e:8b:91:fd:3a:83:45:d7:
2e:a5:11:ee:43:35:56:76:9e:48:0b:01:7f:6e:6c:9c:a3:b1:
74:2c:95:2c:07:8c:78:64:94:ea:8b:ea:48:c0:9b:b0:35:fa:
ea:cf:b2:4f:74:a6:26:cb:3c:34:e2:9a:b4:df:12:41:a8:21:
63:d9:3f:53:53:ce:04:cf:28:d6:b4:57:65:27:5b:66:b3:b5:
ef:29:57:00:25:65:d8:fd:0c:10:26:b3:9c:10:8d:6c:57:48:
ab:19:0c:fa:1a:89:cf:75:05:bf:1e:43:43:2d:43:25:d0:13:
14:d4:40:34:c7:53:11:a8:6e:6d:4e:26:1b:a9:c5:94:74:5d:
29:e9:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:22 2025 by rpki-client