Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: Eyzjv74hQj+sSGB5Jf1G0giC26pn8C98ThG9gu1n+6A=
Subject key identifier: E3:D9:43:CB:23:31:0C:B1:15:2A:80:76:29:4C:22:58:F5:8D:22:B6
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 0197B7457B0AA591650C8E11E5577A399522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 04E8
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: AoGHtG/q5OGrbe7rf8sjqNIBD3QnBYqRdE+ZAUwssvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7b:0a:a5:91:65:0c:8e:11:e5:57:7a:39:95:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=e3d943cb23310cb1152a8076294c2258f58d22b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:55:2e:14:64:1d:dc:44:4b:cb:67:34:11:
54:ef:09:0e:fa:ff:c8:9c:e3:87:be:2d:64:99:15:
71:00:2f:a3:fa:c8:e1:82:91:4b:4b:b5:d0:31:3b:
61:b2:f5:a2:2e:10:4f:91:6c:87:2e:43:92:79:f6:
c1:8f:04:bf:ee:0e:99:40:d6:12:c1:b9:55:25:2d:
c4:12:6f:08:be:7c:3f:2d:a6:5d:bf:54:a6:73:e5:
67:d5:7f:cd:ed:c5:3e:1c:18:1f:4d:4b:9a:6a:c9:
67:5a:da:9a:61:54:cc:e9:0a:f5:e8:4e:69:a4:fe:
40:60:20:a5:20:5a:f3:63:eb:74:19:e1:85:09:7f:
c9:f4:d2:36:74:62:b1:01:d4:ec:40:ad:e1:49:44:
4a:f5:30:73:1e:cb:d3:16:2f:05:65:45:23:72:ec:
5d:04:ba:dc:78:bd:d6:30:56:fa:29:d0:fb:02:3f:
51:36:a8:f0:89:00:00:07:44:d2:20:00:cf:4f:e9:
d1:1e:3a:ff:88:c9:e4:fa:0e:3e:65:fe:a1:20:3b:
62:e5:de:a8:7f:46:18:4c:30:a2:49:a8:5f:02:d0:
52:83:39:53:16:87:2f:bc:d8:6d:3b:9e:8b:1b:6f:
35:5e:ed:d5:fc:15:c4:bf:0a:90:61:08:52:d8:f3:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:43:CB:23:31:0C:B1:15:2A:80:76:29:4C:22:58:F5:8D:22:B6
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ff:a9:53:12:92:15:c7:87:cd:20:b0:8d:7b:b5:1b:72:05:
65:84:e4:53:49:d9:55:b8:0b:70:f1:6f:22:8b:b9:d8:24:64:
07:ad:52:50:39:35:1f:11:04:43:6a:40:4e:8a:5b:fd:01:5e:
d7:a3:2c:f3:1f:61:f6:06:00:13:df:22:a3:ae:70:71:cf:03:
45:d7:da:71:4e:0f:2a:76:fb:93:7b:1e:ad:d6:ea:9d:38:23:
dd:93:f9:4b:64:ee:7d:98:33:08:f7:bd:43:9d:fb:99:fa:64:
7c:82:00:8e:a7:1d:0c:ad:58:5a:2d:1b:c2:b3:34:2c:b2:ea:
6b:2a:74:c5:e0:9c:42:ea:43:71:50:b4:68:f4:e6:a8:a7:51:
ab:d7:f5:12:a3:1d:a6:14:0b:23:40:98:e3:52:f2:d6:88:cf:
06:32:96:50:a4:e4:00:a0:40:0c:cf:b3:9d:fa:1e:ac:6f:73:
fa:87:4a:d0:88:b6:ff:93:c9:c8:fc:19:07:8e:b6:ea:50:35:
75:e8:30:76:8b:79:99:c8:74:71:46:e8:23:59:46:74:64:de:
6d:10:e4:95:21:4d:ec:b6:ee:a0:2b:8a:a2:7f:41:c9:2b:72:
c8:ce:95:94:7c:0a:f7:33:86:ce:a4:7d:23:e1:b2:1a:7f:eb:
f9:16:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:35 2025 by rpki-client