Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: mSNPBRXjEoG/madxVqaMmT/hFaxaUqjtw8XjFBzcnOo=
Subject key identifier: C7:05:C7:69:C2:A9:47:74:20:6A:86:FD:C4:51:21:F4:BC:D1:CD:DB
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0199FC21A6F21FD63567BF099CC5F9755CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 107B
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: h0MTXAz5kJijA9m1JS1103MabMDAxyj83uJgPLvzzQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a6:f2:1f:d6:35:67:bf:09:9c:c5:f9:75:5c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=c705c769c2a94774206a86fdc45121f4bcd1cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:7e:7c:8e:8d:12:7f:16:d9:72:be:98:e3:
ea:af:9a:83:3c:b9:44:6d:21:c5:e0:ee:84:e8:f6:
b5:e6:73:b0:08:17:9e:71:f8:e3:9a:8b:4b:da:6a:
4b:4e:a2:88:84:55:23:67:32:3f:a9:53:01:df:7a:
b4:1d:ad:a7:c9:f5:b0:1c:a9:f0:8b:ce:3d:93:37:
71:b9:80:28:86:a2:72:84:0d:b2:20:62:21:31:fd:
53:51:75:c5:b3:ea:38:ef:06:51:a1:d8:c9:29:71:
b2:34:06:3d:a3:90:6d:58:65:79:cf:7f:28:ba:8c:
e6:6c:4e:50:9a:22:8b:cf:e5:09:84:11:fd:71:36:
78:94:23:33:36:d5:a5:a7:75:c3:8f:7d:5b:2a:97:
63:a5:1a:ce:dc:5f:fc:bf:4f:41:de:b7:24:3a:47:
37:50:06:88:c6:02:fe:f6:bd:22:88:50:78:5c:03:
fa:e0:c7:c9:e7:e8:f7:4e:79:f4:40:ee:a7:e0:60:
00:03:31:a9:5f:f6:9f:5c:29:26:1c:1e:f9:00:f5:
02:74:7b:e2:e4:28:7c:af:a9:1d:d6:e7:14:08:be:
f3:68:91:b0:be:17:88:c6:0b:f4:07:90:79:75:7b:
20:5a:6c:d3:10:e7:06:77:87:d7:77:b4:4c:5f:6b:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:05:C7:69:C2:A9:47:74:20:6A:86:FD:C4:51:21:F4:BC:D1:CD:DB
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4b:b9:90:31:75:cc:e7:cc:4a:2d:34:d5:8d:f8:22:b0:c8:
4f:84:82:fa:dc:e2:27:57:3e:70:f0:c6:3b:38:7f:1d:46:7c:
89:ef:b3:70:da:db:6f:f2:c1:a6:a7:6f:f2:cf:14:79:ec:ff:
d9:0a:14:0f:82:be:05:0a:91:0d:3c:ae:0e:7d:c4:d3:04:c8:
74:98:e8:c5:db:88:cb:60:c4:d1:70:8a:69:be:61:a5:f9:2b:
ae:f4:a3:1a:15:09:ee:cd:56:fa:fd:91:a7:ca:16:bc:86:a5:
6e:8d:2b:61:0c:49:b7:da:e0:34:4e:1d:d3:82:fd:68:9a:55:
79:ea:63:62:a2:dd:c0:27:87:ab:96:21:c1:c4:18:3b:57:eb:
b9:42:12:57:fc:31:59:5d:1d:c5:d4:e4:4d:00:59:a2:4a:52:
84:35:53:7f:97:16:69:1f:7f:b6:75:e5:6a:1e:84:aa:3a:2f:
89:f9:d6:78:6b:f1:5a:01:bb:95:ce:92:69:3f:81:c6:76:2f:
6c:8a:2f:c1:b8:75:4d:08:a0:1d:38:b7:4f:10:d3:52:5b:0f:
d3:98:06:81:8b:06:01:46:4c:a7:f4:dd:d3:85:0b:82:39:fb:
73:a6:2f:18:6b:ff:42:e1:d4:6f:16:8f:93:65:ee:bc:30:66:
79:b3:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:35 2025 by rpki-client