Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: GP0j8fLkEPmsaf2yFIjtaT3oA5/uCm3rmM+aEVjDvXc=
Subject key identifier: B4:67:15:DE:F8:B5:26:D4:8A:89:7E:39:A9:BB:09:88:64:59:E8:0B
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 0198D5155E8CC424FD9BE250E201F5A54A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 057C
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: r/hycILRpJ+ezD0LJcJpG60ciJ509m3LVtuyq+9Pl4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:5e:8c:c4:24:fd:9b:e2:50:e2:01:f5:a5:4a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=b46715def8b526d48a897e39a9bb09886459e80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:10:5e:30:2c:ad:f9:ec:1f:ec:b5:cb:b5:
80:d2:8b:b6:dc:db:ea:ca:da:2a:1b:b0:ba:1f:04:
91:43:b7:3b:8c:2b:53:d6:d5:89:c8:49:ff:3a:e0:
bb:8b:07:48:7f:1a:cd:b2:dc:cf:86:88:16:a5:57:
f2:8e:d9:07:e7:a4:dc:ac:51:19:2e:91:c2:46:38:
ec:49:8a:be:42:9e:80:23:4c:fe:6b:5f:4a:82:02:
06:f4:57:ee:6b:37:39:02:d5:c8:90:66:d7:91:af:
20:47:88:a4:be:f6:30:07:02:88:dd:3c:c3:e8:c2:
4d:ea:05:3d:74:66:e6:c5:93:e3:97:7b:12:07:c6:
72:a3:09:c3:69:8d:ab:f8:c5:91:df:cf:f8:88:db:
19:73:27:2d:d5:f2:e7:2f:b7:ba:14:9e:9e:76:66:
35:02:dc:91:64:6b:3a:f5:82:cf:80:af:d1:ff:01:
a1:07:ef:fc:4c:0e:b8:d7:4e:d3:24:30:f7:59:86:
1d:3a:bc:bd:75:8f:a7:dd:8f:1f:a6:df:44:35:14:
01:d3:32:52:fb:9b:ec:94:24:81:20:6f:61:eb:3e:
53:f2:33:64:47:f2:e9:ce:31:66:00:c7:d3:b3:47:
39:9c:aa:26:47:66:57:15:5a:d9:07:3c:50:df:d8:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:15:DE:F8:B5:26:D4:8A:89:7E:39:A9:BB:09:88:64:59:E8:0B
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d2:b0:4d:3e:66:cb:ba:3c:84:c2:e9:78:eb:34:e4:d2:2d:
2e:17:8f:36:01:3f:6b:37:c8:fa:23:c0:94:03:fa:42:70:f4:
b6:d8:8c:f9:b6:da:1d:54:e0:ee:80:32:a4:f6:e8:69:6b:df:
be:e2:52:c1:c0:6b:22:1d:0a:5b:7a:8b:85:e6:fe:c9:1a:57:
f9:a3:59:70:cf:1b:3c:6e:7b:1f:1b:3a:97:ce:37:0b:7d:e4:
19:7d:7f:59:1e:10:55:0a:14:5e:0f:e9:48:bb:45:09:b2:c7:
39:06:22:93:07:86:a4:df:af:c7:f2:b1:53:c2:e9:63:22:f7:
67:03:26:d5:45:a6:1b:8c:2d:d7:c1:bc:1c:6e:02:c5:71:d2:
44:65:a6:62:9e:ea:2b:c1:81:66:5b:60:87:5d:1e:f0:16:fb:
44:be:31:cc:26:93:86:db:17:bc:18:ed:6f:81:45:5f:1c:3c:
0c:0b:0b:24:c1:40:1e:a0:fe:25:7c:7b:06:c6:65:c5:b0:9f:
7d:a1:8a:cc:74:f1:a9:88:7f:c3:21:eb:78:44:5c:46:cb:f9:
90:14:50:3b:a7:9c:eb:b4:cf:cb:63:04:13:12:05:6b:90:7f:
b0:33:85:84:0a:13:d3:45:b0:77:4c:e3:ed:30:75:91:77:74:
6e:b5:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:57 2025 by rpki-client