Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: bOFYsf+W//zx7eMwBcbM15RkfN2871LLQ7psTFg5fWs=
Subject key identifier: 7E:15:2F:0A:66:2C:47:9C:5E:AC:A5:CA:7E:FD:EB:8E:6A:B2:1B:15
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019A4DAAFD1D1ADF7128764B0B064A599FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 1072
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: oNBP77NeuCsZ1LugwQ/reBUvcGU/MC7HA/DkS5SDCvk=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fd:1d:1a:df:71:28:76:4b:0b:06:4a:59:9f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=7e152f0a662c479c5eaca5ca7efdeb8e6ab21b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:70:16:77:ac:a4:92:ac:14:49:a0:7d:57:
3e:09:5e:64:03:b2:18:89:62:18:90:0c:82:65:fc:
b3:fd:98:bb:00:9c:6a:ab:5f:7e:68:a4:58:34:7e:
b2:b3:5f:2f:f2:42:33:56:a5:3d:df:92:dc:6a:13:
79:2f:aa:49:99:65:aa:d5:b8:7d:a6:bb:78:a0:fa:
05:2e:0f:39:e6:65:ee:21:e7:d7:76:b9:01:ba:5a:
2a:c9:f9:bb:50:a3:62:ee:26:d2:03:74:ce:8c:02:
4d:a3:c0:3c:32:de:7b:62:62:0e:0b:8b:04:43:00:
46:ad:d7:b6:ea:b2:99:d5:93:ac:30:af:af:d6:ad:
4c:3a:84:c5:69:54:4e:4c:45:7e:77:01:03:c9:d1:
44:af:91:dc:82:4d:fd:0e:b2:54:10:77:b1:64:cb:
99:1a:3f:75:5b:d8:ae:c1:2d:ec:fc:6b:85:e5:18:
17:cd:a5:84:6a:6a:d2:37:ff:3d:c5:74:ad:5e:21:
91:a4:1d:90:dc:a2:2e:58:8c:7c:0e:53:38:8a:c4:
8b:59:b5:ca:06:5f:ce:23:58:69:4f:46:6c:9b:03:
59:7c:77:4a:f4:41:02:69:0a:04:38:b5:7e:b4:79:
97:ce:66:c5:7b:2c:e6:3f:b0:b8:4d:55:03:64:e8:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:15:2F:0A:66:2C:47:9C:5E:AC:A5:CA:7E:FD:EB:8E:6A:B2:1B:15
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:01:fc:26:1e:25:f9:c5:99:e7:c0:a9:58:b3:f3:cc:4d:e8:
f3:5d:a9:7b:ec:07:1c:dd:19:c9:83:5d:bd:95:20:2a:38:8b:
35:74:db:9c:1a:66:9a:86:c4:1f:fe:1e:d6:05:ac:61:9c:d2:
ef:10:9d:4c:2f:59:c5:88:8c:b9:07:fa:c9:e9:ac:02:35:63:
ad:ae:ab:c0:0e:b1:ae:3b:d2:81:d5:f9:fc:e5:e9:8b:3b:b9:
94:4d:99:62:b3:3e:83:a3:8a:83:ce:da:ce:7e:83:a3:e4:c8:
ac:d8:eb:80:2d:ec:4c:6e:e0:9d:81:18:ce:67:e7:26:22:15:
73:0c:98:12:b7:42:c0:5a:6d:fb:59:52:62:2c:0f:db:c3:45:
25:fa:2b:11:0d:a5:a0:45:8e:9a:43:3f:73:66:08:cf:8f:36:
68:0c:9d:1a:4b:fc:fd:42:44:de:9f:bb:a0:22:38:ba:ec:11:
57:53:ca:51:e6:09:5c:02:91:87:0a:95:1e:00:9e:07:e7:78:
0b:2d:09:26:0b:fb:d0:ee:36:82:db:04:5c:be:db:b4:29:1f:
92:d6:eb:a5:0f:fd:d1:5f:ec:c2:58:f8:6b:c5:44:65:e1:c6:
e0:0e:cb:76:3c:70:aa:46:40:05:aa:50:15:87:d5:bc:00:3e:
02:2d:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:11:42 2025 by rpki-client