Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: U9lG/S21XesJJYpJ5p5LMAvJjBDxSGnGVgIPQkfV+to=
Subject key identifier: DB:18:E7:91:BC:CC:D9:C1:F2:A2:C2:C9:CD:11:5D:7E:D2:E4:81:6F
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 019A4D7406486E7FB8F7C097BCD471DB6051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0C50
Signing time: Tue 04 Nov 2025 06:00:40 +0000
Manifest this update: Tue 04 Nov 2025 06:00:40 +0000
Manifest next update: Wed 05 Nov 2025 06:00:40 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: 1/ex6SCKmFPLnRsEVGCjgQuv50v1CBWOIUYeIVJJcRs=)
2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:06:48:6e:7f:b8:f7:c0:97:bc:d4:71:db:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Nov 4 06:00:40 2025 GMT
Not After : Nov 5 06:00:40 2025 GMT
Subject: CN=db18e791bcccd9c1f2a2c2c9cd115d7ed2e4816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:d8:ca:15:98:c9:c2:b7:c4:cd:e7:de:1d:
41:f2:10:22:22:19:17:d2:b8:73:62:23:d9:ab:cf:
55:de:79:18:35:b0:c8:a6:07:63:d7:d6:06:e0:7b:
b5:16:00:1c:4f:f3:88:70:56:be:38:95:a6:8a:48:
c1:95:4d:8c:2d:04:99:2d:4a:b2:ac:9d:69:29:88:
05:af:9c:fb:17:e9:44:63:09:da:1b:7c:ae:94:37:
25:96:c7:81:45:1e:07:9f:30:89:a7:ff:5c:e5:ff:
4c:9a:09:28:73:1d:95:d5:65:bc:35:3f:d9:8f:b8:
75:28:13:e1:16:3d:fa:ba:b0:b3:e6:d7:8d:c0:42:
0f:72:db:c5:ae:4a:b3:77:60:ed:23:74:a0:f3:56:
8f:ad:f1:35:77:31:0f:bf:f5:3c:02:bf:f5:f8:46:
2f:49:90:e5:c3:8e:bc:79:8c:4e:5e:3a:14:e9:dd:
16:a1:b7:7a:97:60:4f:c3:f3:f6:66:f8:db:08:37:
0b:ec:91:0e:96:8a:f8:b9:8d:cc:4c:92:c4:12:86:
9c:02:d2:d6:30:ec:e2:fe:14:0f:94:3b:a3:c5:9a:
b8:c8:38:89:e5:ae:06:d0:fb:d6:e1:d8:d6:71:8a:
ab:62:1c:c1:ec:74:62:be:0e:4a:01:dd:43:f9:b9:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:E7:91:BC:CC:D9:C1:F2:A2:C2:C9:CD:11:5D:7E:D2:E4:81:6F
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ec:6f:bb:fa:3d:cc:18:b9:cf:1b:80:45:ef:01:1e:3e:e0:
6b:fc:8d:d3:a3:e1:1d:60:03:2c:66:2d:49:c4:bf:92:0e:7a:
f8:77:d0:0c:64:ac:bb:9f:e9:db:65:94:c9:99:f5:8e:a0:cd:
d8:c6:62:36:94:c0:84:dd:10:d4:53:75:86:d8:24:6c:d2:5e:
18:ca:cf:31:f2:1c:5a:a9:6c:92:5e:27:58:8a:32:35:9e:57:
43:fe:7c:95:af:41:2c:46:ed:12:72:cd:8f:52:f6:b7:77:f6:
55:71:e2:f2:d6:da:bb:07:3c:04:20:a8:42:e6:e0:b1:96:6d:
52:c6:2f:c4:c7:15:c5:42:80:77:aa:d8:ef:6a:7a:cf:95:f0:
90:3e:62:b6:e8:b7:d7:13:e8:de:7a:e9:35:a8:e3:eb:57:14:
03:c0:69:aa:e9:5c:35:ad:c1:2f:9c:4a:c2:a4:69:5f:81:34:
62:54:35:87:dd:1e:0e:51:ad:4d:fa:6e:3a:78:6d:9f:fa:e3:
32:b3:47:82:e6:b0:4a:e3:38:b3:bd:e1:1e:7f:d6:00:72:c7:
70:0e:73:7a:4d:53:98:b3:f6:13:58:50:d7:ee:0e:9a:63:67:
2c:3e:7d:a0:5a:c3:ef:19:f3:31:fc:73:03:cf:71:7e:dd:df:
26:4a:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:54 2025 by rpki-client