Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: 36hXRjwqGH040AIeWZbWvK5CA82QLyx1vwSls89bk8s=
Subject key identifier: D6:D3:0F:B2:24:FC:4B:F7:F1:78:B5:FB:47:52:A6:4C:23:BB:EF:77
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 019A7225A94804661F3D5EE98518A5BEE880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 06D7
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: nHuQb5bTAhC+ZA70xhs6CMPUTwo7ZRWV73MCEFhzwNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a9:48:04:66:1f:3d:5e:e9:85:18:a5:be:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=d6d30fb224fc4bf7f178b5fb4752a64c23bbef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:09:36:f6:b9:43:cf:d6:e5:e9:4b:dc:d7:
d0:28:92:df:43:43:c9:84:bb:42:9b:65:cb:93:c5:
5f:44:18:ed:6b:5b:8e:f8:b9:69:38:e5:19:8e:cf:
69:47:40:7b:80:72:af:5d:4b:ca:c4:e3:98:59:cf:
22:2e:d4:be:c2:1a:43:43:5a:87:fb:6c:a7:61:da:
05:68:ee:b5:22:8f:77:2b:f5:e4:2e:95:1e:f5:bd:
b5:e1:45:b9:5b:b0:01:06:c8:a5:09:16:53:3e:83:
d1:b2:e2:cd:76:6f:b8:c7:95:d2:70:00:f2:a3:d7:
1d:25:3c:17:8e:28:a8:cf:84:31:8c:d8:da:ad:de:
bb:99:1a:d3:68:95:e6:5b:3f:68:cf:04:70:aa:b3:
7f:f3:9c:e7:0d:e1:db:33:8b:99:b2:17:91:1f:ef:
c1:11:b2:a4:8b:de:2d:7b:81:37:ab:49:1e:40:b6:
ee:a6:a7:55:e9:e0:58:7c:8f:ed:48:36:4a:35:01:
c1:80:ad:c2:49:fd:13:15:1f:01:13:e9:da:86:31:
e1:31:77:a1:15:3a:9e:bc:53:60:43:68:a1:92:56:
0e:d7:13:48:5f:6a:d2:a6:5c:5e:57:90:c3:5d:00:
b8:3f:33:6c:74:0f:74:b0:57:fe:d6:bc:5d:86:48:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:0F:B2:24:FC:4B:F7:F1:78:B5:FB:47:52:A6:4C:23:BB:EF:77
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e0:9c:4c:06:d5:57:06:b8:e2:56:d9:ad:4f:d1:b6:fd:40:
8a:d9:cb:d7:34:4a:4c:d4:39:00:d8:d6:83:e3:1a:1c:d7:9b:
9d:27:ab:53:b1:62:ef:22:e8:5d:4f:97:21:ea:3f:8b:4f:3d:
bc:be:5b:86:60:23:ea:3a:96:19:c7:fb:c4:5a:1d:e7:20:cb:
f4:47:a7:19:30:26:b0:31:9e:7c:6f:f8:c7:6f:97:77:ed:28:
64:8e:fc:40:cb:26:b4:14:99:4e:b7:62:f7:1d:18:66:69:2c:
7c:df:ab:d1:ee:a5:8d:3b:49:b8:d7:46:fa:d1:53:f9:2c:e9:
6b:98:9c:67:3e:ef:88:6e:18:d3:67:23:04:a4:ef:7e:0d:4c:
39:72:57:da:53:22:12:c0:fa:c7:c0:1a:9c:2a:b6:aa:2e:1a:
80:48:7a:b8:60:01:f0:b3:0e:c7:f3:66:72:8e:c0:d8:4a:72:
1f:0e:0e:ee:5a:86:a7:c3:a9:76:57:9d:9f:7e:05:72:10:6a:
60:32:10:24:4a:18:90:23:7d:06:89:00:06:43:71:62:03:cb:
47:af:b9:e2:87:5b:b3:00:9a:d6:11:f4:fe:1a:cb:0e:a3:72:
a0:4a:5a:c0:25:f1:64:21:a2:74:be:31:77:5a:c2:05:b7:39:
91:ff:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:52 2025 by rpki-client