Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: ym0cZwSgeyZsdI17e0c1SoyL4HeF0XZbCSjsdy94dBw=
Subject key identifier: AE:07:96:A1:B7:92:7B:17:2F:6D:6D:F2:EC:AB:5A:58:15:3A:0E:F2
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 0199FA6A87431F28CC1E976570BA99A51429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 7C
Signing time: Sun 19 Oct 2025 03:01:49 +0000
Manifest this update: Sun 19 Oct 2025 03:01:49 +0000
Manifest next update: Mon 20 Oct 2025 03:01:49 +0000
Files and hashes: 1: dIRpTlRdZwkzOjzMpDEo5Bfz7bk.roa (hash: C+FNl7OuHMU4htW0AknPyHxKy9e5ZPEt8r7b2jyiJx8=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: oNIrc0rpFYsguzU5VE2W7wYt4/AmnAdln0GS9Ud5A+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:87:43:1f:28:cc:1e:97:65:70:ba:99:a5:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Oct 19 03:01:49 2025 GMT
Not After : Oct 20 03:01:49 2025 GMT
Subject: CN=ae0796a1b7927b172f6d6df2ecab5a58153a0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:cf:78:2e:3a:c2:2f:cd:99:ce:f2:35:d3:
6f:a6:f4:06:64:9e:12:29:16:73:3b:cd:9f:38:6f:
cf:26:ca:69:db:ef:e3:d6:e3:c4:1a:44:2f:63:6b:
04:73:2f:86:d3:bc:e3:2c:93:ca:f8:d9:23:cf:31:
1a:55:70:61:d3:31:95:31:86:c5:c4:12:e6:34:c9:
97:f3:5a:2b:25:7f:e6:8f:44:cc:4e:66:f2:05:51:
c4:4d:ff:86:ee:15:b3:32:dc:db:51:ce:bf:58:6d:
7b:53:c7:8b:06:59:22:4b:27:9e:c4:d2:85:c0:fe:
96:8b:f9:17:23:1a:c6:2e:28:1a:b4:1e:1e:c5:8d:
88:a9:fb:a9:3c:e5:07:80:af:c6:8a:cf:cc:34:02:
d1:ae:62:36:8f:f0:0d:69:64:34:9a:3c:43:61:80:
18:03:2c:d9:59:d9:de:b9:26:ab:11:b2:0b:5d:3c:
4d:ad:3e:91:7f:4b:bb:01:03:02:65:b9:74:db:71:
f9:5a:41:e3:32:bd:6d:0b:5e:52:20:3c:46:f6:4e:
2f:bf:e7:fb:0f:53:6b:6b:d2:6a:39:61:ac:82:dc:
4a:94:70:ee:07:e1:27:98:3b:f6:1f:ad:ca:2d:b9:
71:f8:bc:2d:dd:62:28:3e:2a:5e:89:54:08:a5:7f:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:96:A1:B7:92:7B:17:2F:6D:6D:F2:EC:AB:5A:58:15:3A:0E:F2
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f6:6d:d8:91:e0:07:a0:58:0a:ac:12:83:0f:8d:27:6b:af:
35:32:06:17:23:eb:3e:0c:b1:8f:4f:28:72:1e:61:36:82:c9:
41:66:bc:5b:4a:ee:ab:e3:a8:8b:f8:67:f5:92:13:b2:09:08:
eb:84:9c:31:23:e2:49:b6:95:0b:82:56:d3:c1:69:02:5d:82:
39:a8:75:bb:50:8c:9c:0c:5c:52:18:c2:07:89:2a:bc:9c:fe:
62:35:5c:76:e2:28:8f:7a:1e:a5:1d:2a:2a:cb:0c:d5:8b:b6:
30:68:a2:c7:4b:19:fb:b9:53:fd:31:92:af:a3:c1:a5:10:3a:
7d:40:aa:fc:56:e8:82:1f:7a:73:f9:6c:1a:62:2f:9c:7b:91:
fa:01:45:99:27:b0:c9:7c:93:16:88:a1:27:21:af:50:b2:80:
12:d8:12:69:f6:1a:b0:fc:54:f6:cd:22:83:bc:1d:c6:ad:3c:
9f:24:9f:6a:ba:a6:dc:c1:70:fe:d0:fd:6c:0e:9e:e1:72:62:
c3:be:8d:9f:5e:67:64:4f:70:6f:e6:f9:52:5d:99:f0:14:66:
30:85:32:9b:73:9b:58:c6:c9:ff:b9:62:b7:33:92:04:2b:48:
93:4a:22:65:78:75:90:63:30:08:73:89:ae:27:bc:9f:9f:0b:
91:c9:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:57 2025 by rpki-client