Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: apHqCzlkeLwE7tSm4ISa9yCxJvwIeGKBYrZiJrYNvVA=
Subject key identifier: 91:80:92:D9:17:59:BE:9D:4E:DC:69:66:DB:FC:9D:0D:32:B9:9C:41
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 019A0BCA90548C4B4AF6809EBC3DBC765413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 12:00:15 +0000
Manifest this update: Wed 22 Oct 2025 12:00:15 +0000
Manifest next update: Thu 23 Oct 2025 12:00:15 +0000
Files and hashes: 1: fYK373nYUB0XvmUvg-oovkxaiNE.roa (hash: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: eWx42OQ8yA5LuP4z/A59BXHYxhPH2MFPS0FwVIddMDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ca:90:54:8c:4b:4a:f6:80:9e:bc:3d:bc:76:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Oct 22 12:00:15 2025 GMT
Not After : Oct 23 12:00:15 2025 GMT
Subject: CN=918092d91759be9d4edc6966dbfc9d0d32b99c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d1:0a:c2:fa:34:c1:a4:3e:dd:bf:1f:ba:65:
da:98:be:5e:4a:9f:10:9b:92:51:df:62:1e:72:65:
e1:29:c4:6c:f4:ac:21:e2:2f:e4:66:8a:14:ce:44:
8a:0d:25:10:72:a0:47:c1:64:a0:5c:12:57:da:a4:
f7:d0:93:b4:a0:cc:6a:a3:77:59:c1:17:26:79:f2:
44:da:6d:d1:67:47:e4:c3:da:8a:5d:87:c0:a1:81:
39:de:a9:ec:21:5a:d7:06:22:d6:80:11:f2:2e:7c:
e1:2e:0e:f7:75:ec:92:ab:e1:02:2e:96:ed:a5:87:
28:55:c2:a3:8b:ec:db:05:bd:1f:52:73:07:e8:35:
05:68:6f:a6:3a:8c:f2:c7:0f:1e:62:65:33:b1:ff:
e6:0c:6f:72:80:89:1a:c8:9c:de:ba:3f:b9:1c:b5:
02:f7:0f:e7:d5:b0:de:62:a2:79:fe:c9:fa:47:e9:
76:b1:bf:26:c0:e9:5f:09:c0:cf:08:e8:69:25:5d:
21:53:4a:b6:c5:98:84:08:1b:be:01:50:f1:bb:34:
4f:b9:6f:50:41:ce:f9:b6:9e:36:99:d1:10:1b:d5:
97:37:1f:37:72:9e:de:fe:b9:33:84:f0:17:63:b2:
c7:aa:19:a7:f4:33:ec:21:fb:a3:91:c5:1b:2e:d6:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:92:D9:17:59:BE:9D:4E:DC:69:66:DB:FC:9D:0D:32:B9:9C:41
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fb:2c:df:d1:45:29:0f:2c:d6:e2:ff:4c:e4:b7:e8:a2:b8:
c4:5d:a5:79:16:32:80:c1:42:11:1b:85:aa:dd:aa:2b:83:8a:
a1:82:57:ba:17:e7:4b:e9:40:7d:08:a0:89:c7:e7:8a:46:a6:
a3:9a:4e:76:79:73:7a:a5:5a:11:17:18:75:68:dd:98:ba:3e:
80:c5:f8:0e:50:02:92:8f:8d:40:02:1a:37:d0:ae:37:3f:9c:
6f:5e:d5:91:36:fa:80:5f:9f:1c:92:c9:5d:d3:82:63:ef:1e:
69:a8:13:db:c6:20:69:51:4a:48:81:70:30:7d:32:01:93:a6:
1c:9a:66:38:10:38:f2:17:5a:e6:d2:0b:cb:8d:30:7d:4f:5f:
2a:c1:eb:ad:2a:57:c1:7a:54:12:71:50:c0:1a:7c:53:07:a1:
50:10:1e:a7:6c:8e:69:a3:ea:e9:86:f3:ef:6e:74:a2:c2:72:
e3:d8:56:f8:1b:71:20:f2:47:9b:6a:81:bd:4c:80:17:23:d0:
84:f1:6f:7c:9f:10:0e:6c:57:ed:b8:00:2a:9a:09:2c:6c:a4:
41:2d:a6:a9:c8:68:cc:92:c6:8a:41:93:1e:cf:8a:5d:08:1f:
bb:99:92:76:75:62:9f:c4:de:35:fc:ef:56:bf:9e:ca:9e:3e:
cb:84:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:31:15 2025 by rpki-client