Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: 5IrGEXkABKDsZdAgKaEw62p4lb8R2ToIWBAU9GdI/3U=
Subject key identifier: 3B:05:B5:EC:79:6D:82:EC:52:DE:A3:62:83:D9:61:A4:D5:5B:CC:61
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019A0147B689DB254401E74CF9C82D67FB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 15BE
Signing time: Mon 20 Oct 2025 11:01:08 +0000
Manifest this update: Mon 20 Oct 2025 11:01:08 +0000
Manifest next update: Tue 21 Oct 2025 11:01:08 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: qP/pgGztcdaKdf4MQERxhHkXAiRc2qojuZKhJCUtB/Y=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:b6:89:db:25:44:01:e7:4c:f9:c8:2d:67:fb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Oct 20 11:01:08 2025 GMT
Not After : Oct 21 11:01:08 2025 GMT
Subject: CN=3b05b5ec796d82ec52dea36283d961a4d55bcc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:e1:c7:7c:e1:7d:d7:5a:6d:e8:f4:c7:c0:
21:00:77:dd:1f:14:f5:53:40:7b:ac:fe:c7:45:9d:
fe:30:ef:5c:9d:5c:d0:2b:01:26:51:5c:35:cd:47:
62:e1:19:7f:d4:f8:59:9b:7e:50:2e:89:c5:a5:10:
71:4b:5a:ae:7e:59:42:49:0d:97:15:e2:a1:01:45:
47:08:3e:6e:db:73:a5:4f:dc:7b:fa:d1:5a:a9:ab:
5a:e6:ac:30:05:50:92:24:26:c3:e9:88:3a:1d:23:
ca:37:ef:99:28:bc:ae:84:77:b5:1e:24:6b:e7:ea:
3e:b9:ea:7c:96:32:96:e9:02:3b:ea:1b:b5:f3:ae:
8a:77:7e:e3:de:2c:0d:74:d1:16:9f:13:65:6c:f9:
99:4c:e1:af:bf:e3:d3:c8:6d:de:05:54:b9:7f:ae:
cd:7b:0b:4c:e8:2b:05:45:5e:16:bd:d1:d4:b2:73:
48:ea:45:77:21:8e:d1:99:73:63:48:8b:71:95:64:
ec:1e:cd:bd:e2:f4:4b:27:e0:f5:0d:5a:03:4b:75:
14:c5:0d:ba:66:fc:08:cc:f0:37:ef:ab:a9:6c:8b:
c9:df:30:16:90:e0:8e:d0:60:b5:ac:e4:b3:dc:6b:
f3:ed:2e:80:12:2c:e2:e0:bd:47:ba:0d:d2:ff:84:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:B5:EC:79:6D:82:EC:52:DE:A3:62:83:D9:61:A4:D5:5B:CC:61
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fe:ca:6e:b6:24:e7:8b:7a:6c:f2:67:1b:1d:1d:94:1d:ef:
db:d7:a2:97:c1:33:8e:f0:10:11:96:cf:42:2e:31:4a:4a:ca:
00:01:44:ab:38:b3:5a:0f:1a:d5:03:06:b8:d4:12:be:e5:86:
3b:aa:09:9e:1f:be:f2:9a:38:02:78:85:49:90:4c:24:cf:f3:
51:3c:b5:fe:7f:5c:6a:13:08:2b:7e:70:11:29:74:5d:75:c3:
5d:30:85:fb:40:10:47:fa:9a:e2:09:de:3f:56:88:69:49:15:
6e:c4:40:a4:a4:0a:c1:a3:22:85:e0:e2:e6:79:d1:c5:11:17:
95:19:a0:89:bc:22:81:28:ce:2c:7d:ea:54:b7:80:8a:ac:67:
9c:aa:a6:bc:95:21:1c:40:ad:d2:5b:ec:7b:c7:e3:5f:a0:a0:
4a:47:c5:81:46:c6:9d:06:15:26:82:8f:f5:49:94:44:ff:08:
b0:3c:80:0b:3f:42:83:f3:b8:7d:cd:f9:cb:99:2d:70:76:ec:
e3:16:ac:1a:c9:6c:eb:db:f2:6d:f6:96:10:e2:d3:7b:fc:30:
3f:db:59:93:ef:ad:97:d2:24:bb:42:ea:02:03:42:09:d9:f7:
78:72:c8:9e:19:7c:16:e5:16:cc:dc:f9:c9:aa:6b:c3:6c:f8:
61:e6:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:35:17 2025 by rpki-client