Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: UU01q7Goul4AUYqYzWfhvM6ciptnwVki/73tjN1rVTk=
Subject key identifier: 6D:F4:59:19:DA:93:46:68:60:28:BA:0E:02:E2:80:51:F3:6B:EA:61
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019A13842E03FF27D68D04AA587A51A06F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 16EE
Signing time: Fri 24 Oct 2025 00:00:20 +0000
Manifest this update: Fri 24 Oct 2025 00:00:20 +0000
Manifest next update: Sat 25 Oct 2025 00:00:20 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: Y46OgGCqIhkAcjpjbYpE90KUWCDcHZ1P9IADJnAH2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:84:2e:03:ff:27:d6:8d:04:aa:58:7a:51:a0:6f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Oct 24 00:00:20 2025 GMT
Not After : Oct 25 00:00:20 2025 GMT
Subject: CN=6df45919da9346686028ba0e02e28051f36bea61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:da:02:57:ba:3c:04:bf:8f:2f:c1:78:3e:
2c:84:65:ab:ad:43:8f:13:35:58:4f:fc:3b:6f:7b:
b1:81:0f:36:ad:26:6d:72:a4:07:c7:48:4a:a3:bd:
83:81:29:1a:f0:31:22:dd:57:c8:19:ff:e8:7c:74:
ee:fa:ca:a8:6f:14:ef:4a:3f:c3:ad:d3:d8:c4:d5:
80:61:d9:03:1e:39:2c:fe:f2:84:bb:c3:da:59:6e:
fa:0f:44:93:cb:5d:4a:6d:e5:32:2b:5c:22:83:83:
08:4a:44:59:dd:94:e0:3d:69:90:d3:2a:87:06:ff:
0f:ed:d2:54:63:d5:a4:0c:62:7c:ab:7d:87:be:59:
2c:3d:15:02:18:43:fd:e6:dc:ab:e7:f3:0a:dc:85:
43:e1:67:f5:ff:02:3e:ab:30:c6:6d:09:78:47:4b:
4c:32:07:8a:af:0e:ae:52:5c:1f:19:a7:d6:9f:0c:
1e:08:68:32:bb:eb:b4:b3:be:bf:1c:20:6a:55:f5:
92:e7:33:86:9c:77:47:73:33:a0:99:ff:ec:9d:d0:
79:f5:1e:5e:d3:0a:8c:65:22:ba:93:a3:95:81:2d:
a2:cb:8a:bb:be:00:91:40:c9:f7:c1:1e:ad:45:04:
8f:86:7e:05:e4:c7:a6:9d:5e:4d:b3:1c:89:25:e9:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F4:59:19:DA:93:46:68:60:28:BA:0E:02:E2:80:51:F3:6B:EA:61
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:02:3a:1f:04:14:da:03:0e:02:e0:60:d6:b1:e1:e3:94:77:
b5:78:05:2d:2a:7d:2e:92:72:d3:bf:17:02:34:9c:67:91:fd:
d5:93:ae:2e:c2:6e:8d:f9:0c:67:80:3e:de:45:25:99:17:93:
80:6a:54:d8:54:2a:69:7b:99:af:fd:75:3e:26:e6:fe:bf:9b:
f1:21:68:a5:d8:01:50:83:29:5d:ba:a6:57:a1:ef:07:9f:b4:
0c:36:99:1d:e9:f2:63:b3:5f:3a:92:01:c0:f4:06:0d:6d:45:
72:5e:df:2d:e5:95:74:d4:78:cf:ff:da:30:88:7c:ea:03:de:
c6:a4:c5:fb:e6:91:80:b6:22:95:aa:2f:ec:7f:f2:55:72:64:
73:28:21:6c:35:81:1e:a0:e1:40:0b:85:fd:9d:56:5b:c6:ad:
f5:bf:f4:ae:e8:91:38:da:59:b8:09:df:81:84:d4:89:7d:35:
55:89:51:41:98:da:e9:e8:08:17:0c:83:75:1f:b7:b4:5a:ee:
09:2e:63:80:42:ee:a0:5c:88:31:c9:4b:b6:78:ab:39:22:aa:
04:d6:52:8d:ba:fe:e0:08:25:ed:13:97:68:3b:df:51:11:61:
10:30:92:1c:1c:80:ec:a9:5d:8c:28:e2:84:48:be:2c:9f:a4:
86:c5:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:30:28 2025 by rpki-client