Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: R65bvj78CK1KslD7t6mxrdiy5HTU3V7llnPlx/RUR10=
Subject key identifier: 30:80:E8:A8:33:5C:C0:81:50:C3:39:DC:B5:2F:F9:73:AE:8B:55:4D
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 019A50E2ABA32D5E11D1F0B51D68934B0A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1728
Signing time: Tue 04 Nov 2025 22:00:23 +0000
Manifest this update: Tue 04 Nov 2025 22:00:23 +0000
Manifest next update: Wed 05 Nov 2025 22:00:23 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: tkc00Un27fBCvv951tiKXDbgcVDANmRwCdIAC0QTG5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:ab:a3:2d:5e:11:d1:f0:b5:1d:68:93:4b:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Nov 4 22:00:23 2025 GMT
Not After : Nov 5 22:00:23 2025 GMT
Subject: CN=3080e8a8335cc08150c339dcb52ff973ae8b554d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:e5:d0:7c:ac:5c:45:ab:f7:b7:2a:00:89:
54:a1:9c:0d:ae:8c:6c:c9:df:d9:85:0d:cf:f1:dd:
39:25:24:e2:ea:d1:31:92:ff:30:70:45:91:af:ce:
2d:95:6f:36:0d:12:b6:b2:cb:bb:17:95:dc:82:e9:
1a:61:32:cb:6e:2b:4e:e5:15:ac:75:84:51:73:73:
27:86:1b:3b:85:23:81:8b:9c:e8:40:17:fe:4d:cb:
cd:45:4a:87:68:27:79:33:f9:06:45:ff:2c:5e:59:
5a:a5:8d:8f:4e:57:1c:96:e4:a0:5b:5f:e9:39:a4:
39:24:33:73:02:20:77:4e:e5:9e:34:9b:97:ed:46:
74:c5:e2:f4:9a:f9:b5:1b:23:2e:7d:c4:53:cc:9b:
79:38:4b:3f:6f:99:10:7b:13:e3:8d:43:85:c4:4f:
75:9b:6f:e0:13:a7:c1:5e:cd:d8:cb:fa:93:f4:1b:
bf:73:96:60:06:1a:c7:0c:53:a0:32:4a:3c:c2:83:
a3:33:28:d8:3f:95:7b:dd:54:df:0c:fb:73:2c:4e:
90:25:5d:b4:9e:a9:b7:e0:96:45:df:ea:f1:0c:6f:
4c:79:b7:e2:7a:8f:cf:79:62:60:bc:ef:48:36:d5:
f6:5c:0c:c4:9d:6a:33:89:95:9e:2c:3c:47:6b:7c:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:80:E8:A8:33:5C:C0:81:50:C3:39:DC:B5:2F:F9:73:AE:8B:55:4D
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fd:f9:b8:bd:cd:9c:23:4b:c8:d0:dc:47:00:c8:3c:50:d2:
11:80:d6:7c:47:29:32:dc:27:eb:14:ca:78:38:2b:b6:01:13:
37:26:28:3a:45:1d:58:98:5f:1a:53:25:22:25:b3:b6:dd:03:
73:83:4c:85:e0:13:c6:25:bc:c6:b3:b6:11:6c:d6:6d:1a:51:
3f:77:dd:95:1f:ed:83:4f:14:13:6a:0a:32:63:a8:92:e2:4d:
4b:e0:4d:cb:77:e0:71:1a:cb:9a:91:81:bb:fb:b7:4c:dc:84:
a4:59:66:19:51:e1:e5:7f:13:8a:20:28:aa:17:9b:3f:e0:95:
69:35:c9:d8:50:84:fc:2e:15:3b:a1:2b:d6:38:62:6d:64:07:
94:89:88:cd:a4:65:75:31:e0:b8:52:86:a1:81:ec:d0:8d:8a:
49:96:22:e4:62:ec:d2:06:5c:6a:32:da:f5:13:74:9f:86:ac:
6c:56:94:6e:3d:e2:aa:ed:40:43:3a:54:1e:f2:17:05:25:c7:
9f:e7:f3:c2:69:5b:f2:27:25:ea:43:e0:6f:20:05:f6:73:3a:
ad:81:2b:f8:7e:cf:6a:c1:f2:4f:86:65:9a:10:39:b6:74:9c:
8b:85:57:20:45:e4:eb:b0:8d:7c:a0:ad:5d:28:50:82:7e:58:
c3:9e:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:12 2025 by rpki-client