Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: r5gImuPiVcXA9lUp67+lxKnMagMJVft+CfWUezxzYQM=
Subject key identifier: 82:94:63:B8:CE:7C:5E:2A:58:4A:BC:2D:DB:9C:20:3D:62:5E:BC:EE
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 0199FF5965BFD616A8504A4E943A558FA0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 15BD
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: 97ZXkhP66+YGBhZ5ebMrJ1mD8A1+n4KDuZJGJDKKIMc=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:65:bf:d6:16:a8:50:4a:4e:94:3a:55:8f:a0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=829463b8ce7c5e2a584abc2ddb9c203d625ebcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:84:21:2f:26:ea:bc:b5:db:d7:fc:cc:a2:
33:9c:a6:1d:6f:a1:f0:3d:d6:c7:46:3a:bc:0b:e2:
dd:ca:3e:12:0b:67:7f:91:34:20:c0:66:6d:72:0a:
7f:c8:8b:a0:b3:35:41:62:ab:d5:80:bf:54:a7:9e:
68:65:40:3e:2a:b1:c5:e7:ba:28:27:8d:8b:a7:30:
98:6a:0f:02:58:26:5f:be:04:87:e5:9b:8e:24:47:
d0:87:77:1a:f5:7e:5c:a0:6c:d9:54:b3:1f:8c:5d:
fa:ba:10:d1:3e:9c:92:8f:ab:02:af:3b:55:67:e1:
59:cb:8c:37:41:dc:90:15:e0:26:72:f9:09:11:2c:
74:c9:ff:2a:ec:76:bf:c1:83:0a:2a:a1:eb:82:12:
29:57:be:b9:8c:01:6f:f5:b1:43:e9:b6:e4:0e:69:
ab:dc:42:a8:8d:31:cb:bf:f7:38:95:46:9f:92:bb:
e8:ea:3e:0b:66:a6:8a:fb:34:c5:a9:ac:e6:bd:6c:
1b:2e:12:fe:e2:a2:72:98:63:f8:24:6c:33:fd:1b:
ee:71:dd:46:f0:00:d2:d7:a7:00:67:8c:7c:1b:f3:
fa:e6:79:9f:e4:4b:ee:94:d7:20:d4:4e:6c:fb:97:
29:b3:83:2e:69:e8:b0:2a:37:18:21:96:23:4e:66:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:63:B8:CE:7C:5E:2A:58:4A:BC:2D:DB:9C:20:3D:62:5E:BC:EE
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b0:34:be:a1:f4:fc:e8:c5:04:e5:ef:e4:a3:a6:06:76:a0:
73:6b:e9:f1:92:df:2c:bf:af:32:74:d8:e8:c1:82:00:e8:97:
3b:a9:6a:d2:e5:96:2d:87:52:b6:77:d4:e0:cc:31:b8:8d:43:
1c:c1:76:2a:96:90:8b:61:07:0a:81:8e:8f:5d:57:a2:e4:8f:
f5:49:e1:66:3c:72:dc:da:a9:a0:91:91:12:94:22:b4:4e:1b:
70:e7:da:a9:04:d7:b7:1f:7e:92:98:c5:2b:22:0b:b8:62:ed:
70:df:8b:3c:7d:e1:0c:d5:da:6e:5a:79:ba:46:7b:1c:52:ee:
98:b6:b1:5d:0a:32:b5:1b:e3:18:2e:59:3d:a7:bf:11:40:d0:
9c:77:48:1d:60:a5:e1:f6:47:36:f2:79:b3:51:46:5e:3a:28:
06:8b:33:c1:cd:2a:22:6a:e8:02:4e:36:60:5e:8c:59:9a:63:
38:f3:ba:31:ef:05:c2:dd:f1:98:f5:58:bc:af:ee:05:80:61:
97:54:ea:70:d4:d8:42:30:31:df:3d:b9:21:6c:1e:23:6d:f2:
f6:95:b9:10:7c:0f:8d:59:f5:f1:62:2b:5e:2b:98:ca:cd:3e:
de:10:c9:30:9c:5a:02:60:f7:25:85:7f:7c:a5:0c:f3:28:a4:
33:12:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:50 2025 by rpki-client