Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: m3kcDqwcNXoIlJITOTh3jywRYGQJwSh19CCImsebD4E=
Subject key identifier: AB:D2:31:D3:3C:A2:58:50:72:CB:CA:E9:44:78:D0:74:30:15:96:7D
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 0199FBEC389ABCA7DCE11AEB6B8F23655278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 16FC
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: hpf2OaMZBj4IftA1vSZc0YEV2ebf/q6wgfhcA0qFZis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:38:9a:bc:a7:dc:e1:1a:eb:6b:8f:23:65:52:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=abd231d33ca2585072cbcae94478d0743015967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:6e:65:88:48:4e:96:16:94:86:a6:6b:ae:
46:d9:e0:ae:74:bd:19:a4:09:e3:75:ad:b5:cd:c7:
c6:fd:e9:54:52:e2:4d:4b:f5:a3:a7:0e:7a:a4:29:
e6:fc:ae:03:4f:23:9b:c2:27:7a:d0:5a:f2:97:a1:
00:76:2a:63:1c:bd:c4:b5:bd:40:7b:31:d0:15:1a:
54:ff:dd:73:85:d2:92:f0:7f:ff:80:6d:d4:5f:e4:
21:16:59:9b:a6:b4:b4:e5:d9:a5:87:fd:f3:aa:c4:
f7:d1:49:63:a5:19:a1:0a:73:55:f3:56:84:f1:de:
de:48:a4:34:2a:f2:31:6d:fe:0f:40:82:46:39:9f:
f8:dc:5f:0b:5b:2b:09:01:bc:bf:51:25:a8:23:e2:
33:5b:65:10:7e:79:63:f2:24:86:52:06:47:0b:92:
4b:25:47:89:f6:08:dd:70:fc:07:53:27:80:e7:b9:
78:99:eb:81:ab:0d:f7:68:fb:18:b9:68:8c:ad:ca:
60:96:da:63:cf:e3:1f:53:1e:2d:6a:4f:79:36:d4:
f1:85:18:5b:63:e3:96:5f:60:e3:99:31:42:c2:03:
d2:0e:7e:22:31:10:6c:30:a1:d1:1a:a1:8f:56:92:
25:27:ae:8a:1a:39:2e:db:a1:d4:52:31:79:14:66:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:31:D3:3C:A2:58:50:72:CB:CA:E9:44:78:D0:74:30:15:96:7D
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3a:ae:c3:61:59:d2:48:ab:5b:86:b8:c3:23:17:1e:64:f4:
11:89:71:b5:fe:01:6c:a0:43:83:9d:06:d5:ee:f3:9a:7c:55:
b7:a2:69:62:32:3e:77:58:67:71:96:bd:0c:47:6a:96:9d:ef:
d6:a0:da:e0:f3:29:5d:b3:60:66:97:8d:e6:ab:90:e5:2b:66:
6c:37:43:3c:36:8e:a3:8f:0c:fc:03:0d:c3:c0:4a:ce:de:27:
e1:9e:80:cd:f7:54:46:ee:aa:0b:e6:b7:6f:71:59:20:ba:29:
35:0a:a0:a7:07:9b:35:62:e4:ec:3f:0a:1c:72:b5:65:66:c4:
e9:71:c6:6b:18:0f:0a:db:32:15:20:36:48:8d:2d:d5:a7:fb:
c0:cc:8b:bc:ec:9a:fe:5c:93:cd:76:51:40:83:18:dd:48:d2:
90:eb:63:05:5e:8e:70:ab:48:b5:67:ce:b4:8d:a0:5d:23:f8:
f7:88:88:41:3c:f3:2f:4e:93:d7:af:52:d9:45:db:54:0b:e9:
dc:a9:83:e9:5b:0a:80:ec:ea:6f:74:d0:6e:36:d2:8c:84:61:
a1:d3:69:90:4b:e4:c0:17:71:c6:1c:b1:59:45:48:e9:a7:5f:
4f:e1:86:ea:31:1c:04:3d:69:5a:28:64:95:25:ec:4f:17:eb:
20:c8:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:53 2025 by rpki-client