Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: 9eRihFkk1u1HTtEf7oRpIj6/rS4MdkGPYdLxIKTjeOU=
Subject key identifier: CA:2E:C0:19:58:7B:77:49:3C:9E:0D:2F:DA:0E:06:A8:6C:59:BD:F4
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 0199FDD9624FC61CA92E6BA576E3956601DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 0E7B
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: e7L9oSSt+9/2HcFQQlmXpvFJTZebj5Nin7FY5o0FwRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:62:4f:c6:1c:a9:2e:6b:a5:76:e3:95:66:01:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=ca2ec019587b77493c9e0d2fda0e06a86c59bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:ef:c6:e9:41:61:00:33:39:4c:2f:5f:c1:
61:08:58:23:fa:43:45:5b:39:bb:83:34:5f:c8:b8:
e3:6d:c0:4b:38:15:a7:dd:98:86:f9:bc:f9:5a:11:
c7:bd:fd:05:fb:cd:25:cf:91:c7:36:1b:c1:be:3f:
9d:d5:72:95:f0:3c:37:fb:cf:6d:e4:f5:93:f8:65:
82:b7:9b:73:48:a8:6d:26:6e:1c:22:48:05:d7:cc:
73:8e:4f:8d:d4:e5:61:ba:54:d7:e4:56:ed:c2:fd:
7b:16:54:73:5b:74:04:32:2f:45:e6:02:15:f6:43:
39:2e:b9:c8:24:66:1e:e6:5f:8e:28:14:87:31:2f:
31:c9:c5:28:46:e9:1b:34:a8:4d:fd:15:e1:e9:03:
54:3a:14:2a:84:94:59:2d:8b:4d:97:f6:73:a5:12:
63:8e:61:59:1d:fa:34:fe:b4:f8:ce:ec:26:67:73:
4d:65:0c:88:4d:3c:65:8c:51:9f:d6:94:d9:64:a6:
62:f4:fd:46:56:28:76:01:e7:54:8f:21:9e:b2:fa:
c6:e1:a0:0a:7b:33:13:74:99:58:e8:d8:f5:0a:9f:
a9:7c:4b:d5:42:e1:16:db:ca:8c:be:fc:f4:5f:3d:
01:51:3e:67:e6:27:d3:86:bd:94:9a:f2:b0:84:79:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:C0:19:58:7B:77:49:3C:9E:0D:2F:DA:0E:06:A8:6C:59:BD:F4
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:58:15:10:4e:74:90:5d:1e:ff:9b:65:bc:9e:3d:f9:88:64:
25:c8:13:ae:15:97:00:af:88:bb:93:32:1a:d6:ec:72:f1:a8:
07:b3:eb:e2:70:24:fe:92:bc:11:92:b3:48:ca:43:27:0e:5b:
48:6b:28:ea:5e:6d:36:4f:48:ca:b9:5e:e9:14:dd:31:f2:30:
33:7f:c2:82:04:d4:fa:21:e3:5b:e7:53:84:9c:02:d4:99:f4:
5d:4f:50:6c:15:eb:97:41:37:34:22:8e:02:06:cc:dc:8a:06:
d7:87:1a:c5:6f:66:0c:d8:e1:d1:ca:25:fa:75:d8:0b:60:83:
50:5a:1a:00:90:6f:db:85:2c:29:e5:b9:b6:a0:f6:0e:bf:b0:
53:af:24:b4:cb:97:ea:b3:4f:60:78:5a:c8:53:95:ac:64:02:
a2:6a:32:1f:b8:52:87:b5:28:b2:06:cc:0c:bd:8a:8e:e0:90:
48:25:e2:2d:ea:36:9f:99:48:60:11:12:02:a6:7e:5e:83:da:
44:5d:0e:ae:b5:5b:8f:1f:83:98:1b:13:c3:c3:68:55:0e:6d:
ba:61:0e:44:ce:25:d9:6a:54:b2:8d:69:9f:fc:48:a0:b4:3b:
cd:a8:5b:5f:68:1c:ca:6a:4e:3c:b9:59:8e:23:7c:cc:80:3d:
02:1f:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:52 2025 by rpki-client