Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: Ox+92p1cn06RYL/60YvBlV2YAUeAVn6AFWWf9+PpPUI=
Subject key identifier: 01:79:A4:F8:D5:20:A8:CA:97:EA:52:CF:50:E5:A3:4E:2E:A9:F0:60
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 0199FE0FEA588BEF835613DD441566369D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: WT8JLA+3ZgzvFW0fH8u4VC2q7sOkO86jDPO6aNY6tcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ea:58:8b:ef:83:56:13:dd:44:15:66:36:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=0179a4f8d520a8ca97ea52cf50e5a34e2ea9f060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:93:f3:9b:f3:0d:70:a5:d6:55:a9:bb:4c:
88:7d:a3:61:90:f8:7d:c2:c7:b6:34:86:4f:ce:7e:
f7:8a:7b:42:10:50:37:ba:2e:6b:10:00:a5:9f:1a:
95:96:bf:23:c3:a2:1f:cc:68:66:39:de:fa:bd:a7:
f4:76:a4:c8:ef:41:7a:89:e4:04:3a:3b:b8:a9:ae:
d0:9f:34:bf:8f:b9:4d:23:31:9d:e5:1e:19:5a:12:
df:41:c8:14:fd:75:05:00:fb:ee:12:54:9e:cf:1a:
bc:19:ca:d1:ee:2b:70:d6:a4:ea:50:b9:70:d5:c5:
bd:26:66:2a:cf:f3:4f:f9:28:09:6e:00:39:2b:af:
52:bb:07:1d:a7:40:3b:7f:65:cd:59:87:c8:30:3f:
88:4d:13:af:3e:49:65:8b:6e:dc:bb:7d:10:f1:a2:
14:8e:1c:74:90:4d:6c:09:a2:61:97:c1:fd:99:40:
a6:cd:0b:a5:f1:07:e6:3b:fe:91:89:bd:49:db:25:
c1:3e:e6:4c:f1:0a:93:15:63:87:96:14:96:cd:56:
c4:8e:20:de:b9:51:c9:1e:01:ec:57:31:82:b1:52:
1c:c6:17:6a:d4:5d:bb:16:db:cd:0f:49:6e:93:4e:
cc:51:33:c6:eb:69:58:d6:fc:80:1c:03:a3:51:b7:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:79:A4:F8:D5:20:A8:CA:97:EA:52:CF:50:E5:A3:4E:2E:A9:F0:60
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:71:b4:a9:3e:ab:3f:6d:64:9e:ec:66:e5:0e:46:b0:08:a1:
75:50:9b:50:01:32:9b:6b:0a:c4:4a:c4:e9:85:77:ea:a1:f4:
d5:dc:58:41:3c:58:9c:c8:38:42:e4:2b:1b:a8:3f:fb:15:ab:
5a:b1:c1:0c:33:07:93:a3:e4:35:79:f6:67:24:bf:6e:fa:08:
25:db:2f:40:7a:1b:cf:bc:1b:27:41:e5:11:1b:48:9b:a9:c2:
e2:df:36:e9:48:a1:dc:da:3b:bb:48:ff:6a:00:26:1a:a7:06:
f0:1a:4d:20:dc:af:c8:2c:ee:93:5f:6b:01:47:26:4b:c4:3c:
7b:02:d2:e9:43:25:71:f6:79:e9:4b:06:a0:10:11:9b:eb:f9:
27:06:7c:95:17:4f:52:d8:c4:eb:c8:bd:7b:18:dd:db:cb:1d:
d6:94:f4:41:f0:51:31:bc:3b:3a:53:01:92:a7:85:a2:5a:4f:
e7:2b:eb:5a:d1:57:98:15:a0:63:35:4e:4e:dd:aa:04:c7:6c:
63:08:87:2d:3b:e5:72:12:61:f0:db:be:03:a2:69:71:5a:53:
14:81:5a:fe:3a:72:cd:3e:f3:33:10:75:71:44:44:20:19:49:
d2:8b:45:c3:3a:ef:21:d4:27:10:d9:4f:12:2b:0d:73:98:b7:
d4:fb:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:26 2025 by rpki-client