Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: h35aEPxP0W8SUmC7jIU+OQP/U+2T0Ei80NnLEEd73ks=
Subject key identifier: 19:ED:9B:06:B1:BF:FF:55:4B:78:82:F4:05:AC:AA:19:29:1E:BF:4A
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 019A1CBF7521EF4874E8484116F0A8DB4D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 16F6
Signing time: Sat 25 Oct 2025 19:01:40 +0000
Manifest this update: Sat 25 Oct 2025 19:01:40 +0000
Manifest next update: Sun 26 Oct 2025 19:01:40 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: P9oZGO+rDtdf2bV5HkUbqKgfKgRjbz3t4xTJDURuenc=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:75:21:ef:48:74:e8:48:41:16:f0:a8:db:4d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Oct 25 19:01:40 2025 GMT
Not After : Oct 26 19:01:40 2025 GMT
Subject: CN=19ed9b06b1bfff554b7882f405acaa19291ebf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:6a:1e:90:b5:42:79:10:c9:8c:ab:48:68:
41:7f:ad:3b:48:44:cd:cc:dc:92:a2:b4:81:30:03:
e8:03:13:e6:33:a6:36:8e:61:3b:50:ac:ec:27:56:
a5:0a:7c:7c:fe:d9:45:ab:dc:de:89:cb:a9:be:81:
c4:5f:8d:cc:13:76:89:1b:4a:e4:b6:e2:4f:44:97:
86:4f:d8:fc:02:3d:68:5a:de:82:40:4a:b6:46:89:
16:7b:08:35:01:5b:9b:66:fc:e7:48:cb:6c:8a:27:
99:55:9a:f8:8c:8a:e8:ab:85:36:51:f3:0c:2c:db:
21:1b:7a:a0:58:29:9f:40:40:d9:d4:e6:37:61:1a:
68:04:85:67:e9:08:85:16:8f:19:70:08:5d:4b:af:
d1:9c:79:07:2f:6e:76:4c:40:00:32:54:8e:26:1b:
c2:f8:59:73:1e:b0:a1:16:0b:25:88:b5:17:45:71:
94:7e:a8:49:a6:35:ad:fb:76:0e:1a:04:cc:7e:24:
e2:6d:3a:a3:db:c9:ae:d7:fa:a9:dc:6b:1c:47:fc:
b6:32:62:a3:f2:11:31:53:95:bc:65:5e:41:0d:ee:
fb:24:a2:8f:e8:58:d9:17:dc:d3:b0:a6:8e:fb:b2:
d8:da:0f:d1:87:6a:b3:6f:c7:13:92:f9:7b:2a:06:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:ED:9B:06:B1:BF:FF:55:4B:78:82:F4:05:AC:AA:19:29:1E:BF:4A
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3d:e0:38:34:2e:00:12:73:1b:63:73:fa:2f:dc:61:d9:9a:
99:6c:d1:35:14:b1:61:20:b9:a8:87:b7:1a:fd:89:a8:37:32:
1e:6d:b0:28:cc:66:7a:03:00:00:aa:69:e9:c1:df:1d:f3:05:
97:58:6c:66:d2:44:a9:9d:40:0f:15:b8:29:d0:92:06:25:d6:
bb:d1:b7:59:ba:0d:08:51:50:58:13:64:9a:71:e6:fe:47:a3:
62:86:ce:7a:45:35:cd:66:af:96:ea:fd:bb:b4:0b:f5:0a:23:
db:c6:6a:4e:da:f8:bc:9d:07:3c:95:78:01:63:6e:8a:a5:8c:
23:bb:ab:a6:ed:04:61:a4:60:aa:9c:c0:af:8c:16:83:f0:dc:
75:24:dd:ca:51:d1:60:91:cd:57:2a:26:66:4a:9d:23:16:45:
aa:f5:0a:28:e7:cd:f2:51:47:17:12:40:f7:78:c9:6d:3d:98:
41:f3:3a:52:21:68:76:c6:14:9e:ca:15:a2:ea:ac:59:62:9a:
f8:c0:39:85:de:7c:e2:6c:88:05:17:13:58:87:a8:2c:9f:43:
31:31:7a:e7:ad:82:1a:fc:98:44:d1:df:b0:ae:cc:c6:b2:74:
1b:18:6a:af:a2:3d:16:d1:2a:84:4a:7b:21:96:2f:79:d4:e4:
89:39:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:08 2025 by rpki-client