Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: V3lZWNedf5IspMsHmstsr6hmH2XFd8MGeZjl6c91p+I=
Subject key identifier: 0C:EE:23:53:C5:9C:BE:D3:EA:3F:FB:EF:AA:C5:7F:FC:F7:A5:CD:8F
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 019A006C20C2E1AA7E4E8BE803FC5872BF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 0617
Signing time: Mon 20 Oct 2025 07:01:17 +0000
Manifest this update: Mon 20 Oct 2025 07:01:17 +0000
Manifest next update: Tue 21 Oct 2025 07:01:17 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: ztBpFDG08j1rUV59TnLDqNSi/QBzsayR87IntA3cqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:20:c2:e1:aa:7e:4e:8b:e8:03:fc:58:72:bf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Oct 20 07:01:17 2025 GMT
Not After : Oct 21 07:01:17 2025 GMT
Subject: CN=0cee2353c59cbed3ea3ffbefaac57ffcf7a5cd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:ac:dd:4d:f2:67:03:70:75:93:6f:36:b3:
eb:e8:b2:49:53:fa:9a:2e:a0:03:f9:f3:fb:a3:d4:
5b:b4:5b:69:d1:d0:97:c2:e4:04:13:e9:5e:16:af:
ab:a2:aa:b7:e0:16:f1:1d:f5:13:4d:c8:fd:a0:65:
c6:7a:f5:1c:94:80:3e:02:10:2f:2b:d5:49:59:c7:
13:78:4b:ce:6b:7b:3c:e8:72:56:ec:1d:46:d8:db:
e1:a9:01:d3:3d:92:9c:cd:8b:38:61:35:fb:d0:80:
ad:82:6f:a6:8d:64:77:b8:b2:70:ab:c6:07:59:4e:
b2:ba:fd:5e:f6:e1:4f:43:1c:96:f6:41:b4:84:02:
db:66:7d:0b:82:b0:98:a6:93:c3:56:73:d8:08:d8:
6a:e8:54:db:b7:0d:cd:05:cb:78:eb:66:74:9d:76:
f7:f1:66:8c:9d:8e:79:2c:75:ff:bc:d8:9e:f0:4c:
3d:9f:59:bc:b3:6c:26:80:e7:0d:0d:6d:1a:18:04:
72:25:28:50:d7:23:65:29:35:b4:e7:b0:e8:71:4a:
ef:63:34:ce:f2:93:f3:99:b0:52:8b:24:16:75:f8:
ba:8f:ae:a3:57:c1:ee:ec:1c:ff:35:44:10:fa:ea:
25:6f:b1:f1:e4:5d:84:4b:d9:b3:8b:06:34:98:2b:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EE:23:53:C5:9C:BE:D3:EA:3F:FB:EF:AA:C5:7F:FC:F7:A5:CD:8F
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d7:1b:47:a3:a8:cf:9c:e9:20:e3:b7:1f:70:02:2d:5a:39:
d5:4f:5d:df:61:6c:eb:fb:97:ba:2c:17:aa:a5:c6:41:47:7e:
cd:aa:d0:56:69:16:15:0c:b6:5d:b3:65:6e:6f:7f:43:01:6d:
dd:8a:58:37:0f:21:56:ef:38:3c:2f:b4:e9:56:a3:92:0a:f8:
4c:16:39:d3:9c:82:5d:2a:bc:bb:a3:14:c6:d5:fd:fc:d3:8d:
e1:39:20:2b:c2:67:cc:e5:da:a6:3a:07:bd:d9:a7:87:31:a9:
7c:68:d7:91:72:01:db:31:64:e7:25:f1:85:01:70:5d:b4:41:
85:d8:91:a2:7a:dd:d9:49:a4:33:e9:a0:a4:b0:aa:1c:84:9c:
c1:35:17:6d:7c:45:43:da:2b:d9:77:4b:7f:78:ab:82:ad:e5:
7d:a9:5f:ea:88:9f:66:8a:38:23:d7:7c:76:8c:bd:4a:ba:54:
cb:a8:87:16:54:6b:06:89:38:a9:38:94:46:02:ff:ee:57:f9:
0d:1b:5d:10:fb:0d:06:0c:1e:d4:f7:38:c2:1f:dc:76:7a:45:
44:b0:7d:55:74:b1:a6:e2:7c:f6:31:0e:13:2c:f8:48:00:5d:
a1:6a:3f:c1:0d:91:9e:43:eb:b6:47:21:9a:4c:71:1d:c4:63:
55:55:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:10 2025 by rpki-client