Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: TJ2W/NKIIR3qaL+JqzcFLHze5H3huQU4w1ocS5ehZLE=
Subject key identifier: 5B:7C:09:86:CC:23:1F:F8:EC:78:7A:03:71:99:6F:B8:0B:5B:0B:E7
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019A19F4130CC063941307E3640BDE2FA9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 06:00:17 +0000
Manifest this update: Sat 25 Oct 2025 06:00:17 +0000
Manifest next update: Sun 26 Oct 2025 06:00:17 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: /sINwZNcQedYesvwizqxC4W/H8D2wKRXXWEThikKlns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:13:0c:c0:63:94:13:07:e3:64:0b:de:2f:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Oct 25 06:00:17 2025 GMT
Not After : Oct 26 06:00:17 2025 GMT
Subject: CN=5b7c0986cc231ff8ec787a0371996fb80b5b0be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:ea:d6:e3:b1:29:5d:6f:24:8f:52:9d:32:
eb:85:e9:e7:5f:22:26:64:87:18:5d:08:87:1a:67:
ba:46:c4:4a:05:4d:45:73:45:02:e2:32:ec:6b:48:
4d:b0:6a:54:75:39:75:ed:f0:b5:88:34:a8:22:61:
0e:ba:b7:b2:52:32:9f:c6:d4:b9:f5:03:8f:9a:f6:
2a:b8:ee:33:c5:a8:84:70:c4:36:37:05:42:38:e6:
8c:48:71:fc:e6:51:59:cb:27:30:1c:97:ae:79:57:
04:17:44:30:ff:39:2a:52:34:46:4b:89:ca:c5:7b:
af:45:22:82:3b:bd:b5:ed:79:8f:b6:5d:10:6e:3f:
d6:52:94:f0:94:04:3d:6b:6e:cd:16:49:74:37:4c:
36:b8:3c:03:10:10:99:60:39:62:89:45:a6:19:bf:
ca:aa:1e:3b:81:b1:19:bd:d7:d5:f4:13:ee:ee:03:
5b:ca:da:cb:e9:17:62:ac:48:e3:99:9d:90:56:d1:
d3:92:6f:05:dc:98:13:38:b0:56:85:f0:45:4b:15:
61:e6:6d:3d:6f:e0:0e:00:c5:82:bf:ee:ff:02:39:
99:73:c7:fd:d4:5b:fe:0a:e5:28:65:06:6b:76:0a:
4c:98:55:54:ec:cc:8f:7a:99:6f:d3:da:60:9a:9d:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7C:09:86:CC:23:1F:F8:EC:78:7A:03:71:99:6F:B8:0B:5B:0B:E7
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4b:94:74:7a:61:80:3a:e4:bd:9e:af:4b:3e:72:c8:c8:d1:
af:3b:2f:2b:0a:fa:09:56:61:6d:49:55:90:c8:06:74:a8:8a:
de:82:e9:45:c8:78:57:4c:e1:9f:79:b7:a5:70:59:63:6c:0f:
8b:f5:8f:97:77:91:97:14:fe:2e:61:44:21:0b:03:89:75:ac:
12:25:41:3e:fe:bd:b6:ff:3b:4e:e3:0f:e0:1f:8b:dc:30:01:
55:ae:9a:4e:c3:c8:07:31:15:65:79:40:4b:a4:91:9c:be:dc:
52:7d:43:ae:89:46:14:d5:8f:b8:55:df:4b:38:66:c4:86:4d:
3e:b8:d9:ed:6b:0c:2b:00:4c:1b:17:82:b7:f6:44:83:ea:10:
ce:de:dc:cc:05:c6:e9:d6:84:e6:ed:9a:09:a4:da:79:b1:ca:
3d:fa:50:9a:af:73:f9:13:ad:a6:8e:c9:d4:18:d9:b7:d1:5e:
73:24:a5:57:07:8c:81:74:ae:91:97:b9:87:de:7c:f4:de:eb:
ea:ba:6a:43:31:d9:3a:4a:77:1b:82:72:c5:23:2a:70:1f:fa:
e8:26:ad:bd:5e:ef:f6:fb:32:86:90:df:8a:cf:78:6b:14:71:
fb:7c:0b:64:ca:74:0b:83:79:17:9a:c9:2b:63:e7:00:df:5e:
2e:86:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:21:08 2025 by rpki-client