Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: 21NAtzcEmAf4wMUau4pcnDbdWDcAdVZiUtKboHy71Y4=
Subject key identifier: 96:F2:3E:15:A7:15:A7:67:51:2F:8D:5A:EF:79:16:5A:9D:75:A0:F0
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019A4D73CF85AD14963CF60A1FA836E6280C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:26 +0000
Manifest this update: Tue 04 Nov 2025 06:00:26 +0000
Manifest next update: Wed 05 Nov 2025 06:00:26 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: dvMto8A8qB9jMlRpVyJmR7YEas2fKCX6AY25w0j3fzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:cf:85:ad:14:96:3c:f6:0a:1f:a8:36:e6:28:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Nov 4 06:00:26 2025 GMT
Not After : Nov 5 06:00:26 2025 GMT
Subject: CN=96f23e15a715a767512f8d5aef79165a9d75a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:ff:3d:cb:dd:74:5b:02:b1:cc:7a:52:31:
25:8e:dd:ba:73:f4:42:2d:36:45:8b:2d:d9:91:39:
6d:76:08:d3:ad:b4:90:e5:81:61:6d:e5:4a:da:6e:
6e:44:e3:b8:c6:75:48:c7:cf:7b:f0:c6:37:05:3a:
4c:50:ac:65:13:b1:13:40:a7:70:62:a5:63:ff:67:
bc:44:b2:d3:a6:ab:49:c1:2f:51:e6:c3:d1:73:8d:
57:e4:4b:eb:e1:a4:da:a1:58:a9:8c:15:25:2d:52:
fa:25:4f:f1:f5:8f:65:46:78:29:b1:11:8e:83:6c:
cf:1b:4f:51:36:44:dd:ce:2d:60:c4:ed:90:d7:47:
8a:01:e9:90:0d:82:e7:d9:03:dc:c0:09:40:d8:4f:
d7:ae:39:6b:45:4f:96:6f:5a:4c:1a:61:7c:d9:4b:
2c:37:0d:41:d7:c8:0b:68:09:47:42:6f:3f:87:74:
80:28:99:8f:9d:d4:f3:1c:15:6a:7b:96:51:4c:c3:
6f:d6:da:a2:59:f0:7e:99:a0:1a:5f:50:b6:08:26:
9c:b1:04:51:01:c3:5b:34:31:59:fd:65:e9:70:6c:
8f:f8:ad:55:07:a6:99:ff:8c:29:8b:3d:90:59:0d:
2d:9f:fa:49:27:22:f8:27:8c:fb:5b:04:49:27:93:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:3E:15:A7:15:A7:67:51:2F:8D:5A:EF:79:16:5A:9D:75:A0:F0
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:99:c2:fb:a8:67:e5:1f:4d:d7:61:63:1d:32:4f:4d:d5:15:
76:d0:5d:6f:b9:1d:2c:42:53:46:bb:69:83:bb:85:a0:64:b6:
e1:e3:ab:36:6a:93:87:b9:66:d2:f2:31:98:9d:69:39:48:f3:
ba:2c:8c:b6:78:f3:fc:e8:cc:9e:7e:20:ef:66:82:dc:29:9a:
35:32:9c:1f:1e:46:6e:23:69:d9:7f:41:d8:a5:6f:bf:b4:7d:
19:86:ff:29:6d:5b:3a:70:46:34:c4:c2:46:00:48:3e:dc:36:
a7:9f:0d:2d:89:77:e5:9c:80:38:39:82:d4:cf:c7:22:2c:23:
95:87:b8:6a:75:6a:8f:d3:2a:65:e2:67:87:db:f0:d2:45:e0:
f6:cd:c1:9b:98:bc:8a:d7:b0:29:99:c2:47:8a:bd:a2:16:8a:
a3:ca:d5:de:e1:87:00:f2:a8:22:00:aa:65:00:1e:0a:95:95:
63:7a:50:28:1e:46:7f:86:02:e4:c7:84:a6:f4:07:a6:87:f7:
35:4b:18:78:ce:86:c8:49:62:21:28:33:e1:4b:47:c7:72:08:
d2:29:72:0e:54:9a:6c:24:77:40:90:b6:77:24:12:e9:50:2e:
92:bb:b4:7d:77:64:6b:3b:fc:c7:37:e9:96:b4:01:f6:e8:ba:
00:71:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:53 2025 by rpki-client