Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: LWjFv6b4iZgycweBaXwS/0W+laBxHOPxfIBvAnPomoA=
Subject key identifier: 0E:04:D7:0E:71:72:D3:B2:F9:37:F5:7D:EE:3F:38:53:AB:53:8A:EE
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 0199FC58F5CEDDC50F986D90C2B65D07D46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0C26
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: vyHu5djakiGUmsZqtZCsU8bjrqhZ+eaJzAWxBIjsiuU=)
2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f5:ce:dd:c5:0f:98:6d:90:c2:b6:5d:07:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=0e04d70e7172d3b2f937f57dee3f3853ab538aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:92:06:cc:16:45:64:bd:bc:51:ac:48:65:
19:de:44:9b:16:3d:a9:a3:a6:8d:b2:4c:f3:06:43:
e3:bc:a8:41:a7:a6:2c:d1:70:89:79:85:b0:25:84:
62:fb:b4:19:64:60:c3:66:18:64:e9:21:39:d4:88:
57:65:86:26:34:65:d6:48:f9:9c:c4:2f:53:f1:8c:
4e:e4:f4:2e:63:7d:2d:ab:8c:99:05:21:24:20:46:
65:a1:45:f1:c7:c4:2c:4f:5f:d6:1c:d2:9c:85:a5:
af:5f:47:78:f1:10:66:7d:9c:3d:c7:71:6b:cc:a5:
f3:f8:8c:b8:82:3a:1b:20:05:94:24:0e:e4:68:dd:
2f:d0:1d:ee:1e:04:e4:02:75:f1:e6:d7:1d:32:aa:
24:ae:d8:71:63:9f:ad:bf:30:be:a3:06:bc:af:ce:
53:12:0c:41:3c:ea:9e:14:30:7a:3c:3d:7f:43:e6:
23:30:f9:b1:04:83:51:96:5c:08:34:33:77:88:c3:
c2:cf:ea:bd:1c:04:3b:be:a1:e9:6c:a8:ff:ef:dd:
b8:8b:1d:fb:17:29:02:69:b7:ec:8f:d0:fc:06:c9:
c2:db:ec:2b:42:ec:a8:37:e7:95:2e:8c:ab:33:37:
4b:da:f6:4c:63:1e:76:69:52:48:72:ad:32:c4:3e:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:D7:0E:71:72:D3:B2:F9:37:F5:7D:EE:3F:38:53:AB:53:8A:EE
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8a:8f:11:58:92:8a:06:5d:c1:e1:92:ea:ea:73:a4:6a:76:
3e:87:34:57:c1:d5:ed:c4:a7:42:fe:9c:37:b6:73:bb:06:fe:
4a:ce:92:6d:05:e8:a3:69:29:e5:5a:d9:aa:ad:dc:87:e2:b1:
26:a7:4f:a7:9a:bc:d8:07:df:4f:68:dd:a5:a7:99:0e:dd:66:
bb:b0:b4:91:36:1e:98:f3:9c:b5:55:1d:73:3c:37:32:70:01:
0c:15:20:2c:2a:98:2e:54:8f:ca:2c:87:10:c0:ff:eb:79:3c:
62:5a:03:b7:6d:68:0f:46:de:07:fe:48:ff:2f:df:ce:da:02:
3a:bd:d2:c4:f8:60:32:1a:b0:b3:dc:0f:40:18:8a:8a:c8:e0:
d6:68:1c:e7:3f:94:d5:bb:ff:a0:d2:07:a0:1a:bc:b8:de:51:
f8:71:9f:64:98:0c:a9:90:6b:67:3d:3f:7f:50:8b:4b:c5:6b:
c1:0a:70:88:13:d2:ab:af:6f:88:8c:e2:af:fb:c3:f7:b5:87:
7f:2a:a6:38:35:db:c4:88:23:39:29:c8:39:02:9b:c8:d8:60:
1c:27:38:51:1e:62:90:02:5d:6a:51:7e:05:3d:1e:b1:e8:d8:
c9:7d:02:d1:f7:72:2b:12:2b:44:2f:10:d2:7c:b7:de:4f:07:
26:4c:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:36 2025 by rpki-client