Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: suR33R+5zVKcOX0SjQe0a4N+WoYOijSot7Taspxi/z0=
Subject key identifier: 88:64:D3:B2:A2:9E:9E:9E:B8:2B:8A:2C:52:61:EF:4F:F5:A7:F6:98
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019A213FB4FEF0216ECBC8E9E19B3D7AC026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0F04
Signing time: Sun 26 Oct 2025 16:00:14 +0000
Manifest this update: Sun 26 Oct 2025 16:00:14 +0000
Manifest next update: Mon 27 Oct 2025 16:00:14 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: 5bVRt/sdEkcw9CTb7NB7BP2GGekcAbji/ca10pWbIGM=)
3: nSZCrrugGYgpV2kpSk3jqr2LzfM.roa (hash: dkF/IyzVuAY00yNMBcnlRNr+PlCabKVgpyDEF61J7y4=)
4: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:b4:fe:f0:21:6e:cb:c8:e9:e1:9b:3d:7a:c0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Oct 26 16:00:14 2025 GMT
Not After : Oct 27 16:00:14 2025 GMT
Subject: CN=8864d3b2a29e9e9eb82b8a2c5261ef4ff5a7f698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:b9:69:ce:0e:99:77:2c:7f:52:b4:76:b3:
29:f2:a9:3f:bc:d2:35:8a:4a:3e:75:49:da:94:ff:
f1:71:33:3c:2b:08:da:09:4c:18:f3:eb:df:b2:a9:
04:03:66:98:02:5a:ec:b7:88:cf:ef:4e:48:eb:23:
34:a4:29:f5:fc:b5:4c:74:b7:d5:c5:40:6e:a3:b9:
a2:ee:72:c0:c5:73:ab:d7:61:cc:e8:0f:37:82:9b:
76:c3:f7:45:e2:c3:19:a4:dc:83:6c:9d:b4:86:a2:
5a:eb:8d:9b:14:19:2d:ad:98:9c:43:ae:f7:dd:e8:
18:5d:0f:14:47:d8:3f:c3:52:4c:ca:3d:31:46:9c:
71:cd:5e:30:93:42:33:4d:42:da:87:2f:f8:15:70:
6d:57:cd:28:41:e3:fa:57:f2:ad:8d:89:5a:ad:7e:
7e:2d:5a:4c:61:af:ea:25:c7:f8:b2:78:2d:b4:e6:
bb:74:2c:c1:7b:4d:bb:38:4f:87:d3:6b:ff:a0:4b:
79:53:b4:85:e0:4a:fa:27:c6:fb:44:0b:0f:ea:6b:
83:ce:55:34:c3:70:80:84:98:99:ba:b8:11:36:dc:
2b:33:08:a9:d2:95:81:43:6f:ed:5c:62:e9:a7:02:
74:b4:f8:86:f7:57:56:8e:32:21:4f:e9:b0:34:f2:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:D3:B2:A2:9E:9E:9E:B8:2B:8A:2C:52:61:EF:4F:F5:A7:F6:98
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ea:ca:17:e1:4d:13:bf:4c:45:df:ac:5c:fa:f1:1d:64:17:
22:9e:06:a3:fa:e9:9b:41:51:6d:96:11:e2:08:0d:7b:c1:84:
08:77:26:be:1d:dd:ef:48:4f:d7:70:85:c8:36:b2:f5:55:61:
88:b2:90:ac:16:b4:1f:b3:22:9b:10:59:a2:64:16:1e:89:20:
d9:a2:42:bd:3f:26:c7:70:98:38:9a:04:81:43:f8:24:55:cb:
d1:c1:c2:f6:20:27:d4:11:72:c0:9e:4d:6c:51:c5:8b:6b:8b:
27:6d:9b:60:01:42:e7:8c:cb:ce:28:4e:d8:3e:10:d7:a5:41:
b5:ee:89:d1:7f:58:a9:10:a0:77:eb:cb:0f:14:4f:df:74:bc:
ca:ca:08:f0:1c:f0:41:a1:d4:8b:ac:62:a7:f5:09:3b:f8:a1:
3e:f9:d3:83:78:54:26:1d:32:d1:cc:92:d1:34:c8:df:62:64:
a1:8b:41:38:17:4c:7f:2c:05:ef:4b:f1:d3:d6:4d:cc:05:3a:
c1:ae:d0:d2:7d:a3:69:49:f1:09:25:13:1b:12:e1:7b:59:ff:
90:3f:03:e1:83:2f:12:4f:75:ad:6a:17:be:fa:28:75:14:6f:
23:7f:12:67:42:a4:09:d6:fb:08:18:0f:2c:85:32:4d:42:45:
5b:fd:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:04:06 2025 by rpki-client