Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: 8ZVv2oonYaRSYPVMHtSQNjp+zjNRubFJ4HALJxxRCPI=
Subject key identifier: B1:A7:D5:61:33:C2:80:D9:7E:BD:D1:B0:A0:37:16:56:0E:A6:51:C1
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 019A228A7D37D1657AD1B83E83764EDA4740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 168B
Signing time: Sun 26 Oct 2025 22:01:32 +0000
Manifest this update: Sun 26 Oct 2025 22:01:32 +0000
Manifest next update: Mon 27 Oct 2025 22:01:32 +0000
Files and hashes: 1: HckIWldHWwqX0CJ7X-XU88JAoY8.roa (hash: 0kYehz1g3idStzqPQ6DNbC0IwoRnTc8QtqRoQ8JJZs8=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: o+yUqyeOm3CWFBJqbdiY4EiMMdnVRlgD8ZvS2zpGixE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:7d:37:d1:65:7a:d1:b8:3e:83:76:4e:da:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Oct 26 22:01:32 2025 GMT
Not After : Oct 27 22:01:32 2025 GMT
Subject: CN=b1a7d56133c280d97ebdd1b0a03716560ea651c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:df:f1:db:cc:4d:46:5f:ec:e4:86:f0:80:
d3:e6:a4:db:51:2a:26:96:ee:bd:00:cf:51:5d:6f:
19:79:14:09:30:b5:14:dc:bc:31:ba:33:8f:9d:63:
28:4c:47:b6:e7:d4:cc:4f:45:c8:cc:c2:f8:73:0f:
ed:18:61:e1:bd:ae:96:58:8e:01:ef:f3:b1:20:7b:
0b:60:19:1c:e2:74:4d:13:d2:b5:52:45:9f:2f:c2:
da:17:a0:11:cc:91:06:2d:7c:53:c0:76:ce:3e:f0:
8e:3a:56:a0:d3:79:b6:1d:3e:a6:0d:b9:77:f6:78:
a3:ae:52:54:bd:a7:a5:9b:5f:74:47:53:e6:d6:2b:
87:f6:15:48:d8:8a:f3:85:fe:2e:5e:92:03:b0:37:
44:a7:ff:26:d0:dc:bb:5c:9d:53:e8:06:df:b7:c3:
f9:07:ec:e2:c9:49:31:0f:b6:33:31:a1:c3:90:e9:
83:d3:e8:a5:2c:80:72:d1:68:ef:3e:90:93:63:44:
96:14:0c:82:ef:a3:88:2d:0c:af:09:01:3e:fc:4a:
bc:38:8d:95:54:11:b9:07:f7:ed:79:be:d8:99:bd:
2d:a5:0b:b1:78:95:37:fa:17:42:25:51:14:51:41:
46:6e:62:74:c2:bf:26:bc:a5:62:f0:a4:5e:95:88:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:D5:61:33:C2:80:D9:7E:BD:D1:B0:A0:37:16:56:0E:A6:51:C1
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4e:9c:82:4b:ae:07:b9:7c:5d:e6:34:a0:f2:db:d5:74:ae:
fd:54:17:2d:87:51:ab:54:96:4e:7f:e7:68:9c:e4:d9:13:49:
58:0f:fb:33:a2:71:b5:b6:f3:80:9d:0d:1a:2b:b1:33:5d:93:
72:11:c0:0b:b0:a0:7a:ec:21:6d:5a:ee:ec:42:6f:75:86:c8:
e2:13:7f:1b:a8:48:1a:6b:76:e5:7c:22:d2:09:62:b1:3a:e6:
4c:77:ff:a2:cb:d9:a5:8c:5e:ca:55:c5:da:21:01:b0:a8:c9:
16:43:15:49:aa:94:f9:30:a2:95:36:c6:0e:48:6d:06:a2:8d:
d4:63:19:00:4e:f4:bc:67:2c:81:a9:03:67:f1:9f:48:f3:fa:
92:86:b6:87:65:64:e5:bb:ca:82:8b:02:c7:21:18:3d:e9:4c:
e3:53:1d:92:fd:f0:0c:83:93:36:8f:99:86:b0:a8:3c:06:aa:
2c:b3:27:a9:ee:20:38:cf:e0:45:7e:0f:6c:86:31:0f:46:ec:
19:c6:3e:89:84:e0:71:db:de:55:02:ca:47:1a:c1:e2:b0:74:
29:21:44:ad:01:df:b0:31:91:ce:b9:3e:c9:09:fa:60:75:95:
a5:25:f9:23:d8:d4:44:01:e8:b0:0b:d1:51:63:c6:db:40:96:
79:b9:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:56 2025 by rpki-client