Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: JpOPgrlTTXV7egj8hdmD3Wp1pA4EiX1fdsHGJqqr+/8=
Subject key identifier: 8F:41:05:82:7B:D2:77:E0:F4:08:23:ED:4B:97:3F:57:0A:34:0A:09
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 019A22F79A03C0B657E9799444B81A5E8903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:43 +0000
Manifest this update: Mon 27 Oct 2025 00:00:43 +0000
Manifest next update: Tue 28 Oct 2025 00:00:43 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: C2r4QXNLa8nbMpItska8WJ8ikrsRknSpzqWyD9NivMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:9a:03:c0:b6:57:e9:79:94:44:b8:1a:5e:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Oct 27 00:00:43 2025 GMT
Not After : Oct 28 00:00:43 2025 GMT
Subject: CN=8f4105827bd277e0f40823ed4b973f570a340a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:f6:fe:f7:0d:f6:d3:3e:db:86:20:09:ee:
4b:f4:2a:d5:cc:29:ef:b3:55:4f:8d:ed:80:46:21:
11:6f:d2:49:6d:4c:91:0d:d2:61:f2:de:6a:4f:ef:
9b:22:02:30:52:60:4f:ad:e5:a8:13:55:fe:89:f7:
f3:28:23:bc:4b:18:c2:3a:2c:35:9e:3f:99:1c:d9:
4b:bd:b5:48:b9:3d:ae:63:fa:8a:27:86:a9:10:24:
4e:4e:0b:48:cc:62:6a:c1:9a:f9:f1:b0:c0:74:e1:
23:2e:c6:7a:f3:41:b7:60:0e:62:f0:35:3e:ca:4e:
64:0b:62:77:38:96:48:6e:ad:26:d0:15:4a:f4:71:
0a:49:eb:67:3d:2d:9b:57:c1:b3:5c:de:2b:e1:f5:
1f:c0:8d:83:f6:ec:3d:a5:37:d4:ab:29:ce:18:14:
96:d5:9f:3b:9f:7e:a8:bb:4e:bf:95:11:62:cf:04:
57:ba:20:a8:ca:28:e2:d5:06:38:08:91:6e:68:b4:
86:cd:a2:e3:44:a4:e0:42:79:3b:f7:34:65:8e:9a:
f7:99:2b:5f:7a:2a:d9:74:95:08:72:44:f5:b5:5b:
0e:7f:06:40:95:af:85:26:d3:8e:d4:48:e2:af:80:
4f:5f:51:b6:f9:b4:21:da:14:4f:f1:eb:f6:aa:37:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:05:82:7B:D2:77:E0:F4:08:23:ED:4B:97:3F:57:0A:34:0A:09
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:00:59:a4:f3:3b:a5:4b:9b:52:5e:91:b7:2e:73:5b:be:
3b:06:75:b1:b3:ff:8f:e6:93:28:29:e8:20:56:37:a4:bb:f3:
c7:4a:7b:13:2c:83:d9:f8:7a:c3:f0:59:ca:a8:6d:14:31:cc:
a1:85:40:bc:f7:80:b4:0e:2e:dd:b5:1b:63:da:2a:ff:02:cb:
55:68:c1:db:9a:26:fb:7a:7e:af:9f:7b:f3:2d:7d:0b:ba:fd:
b4:db:83:e8:28:26:f7:42:9f:57:0c:d0:6b:b8:77:e1:51:8f:
4e:1b:e8:dd:0e:46:53:a7:9d:ee:5b:58:50:ac:20:88:53:0b:
50:36:53:a8:cb:e8:1b:29:22:13:83:c2:14:6c:d9:0f:7f:35:
f1:db:d0:d1:01:23:8d:29:b0:ee:5b:17:14:fd:db:3c:17:d2:
82:56:d9:a1:7d:57:ba:26:2c:8e:c5:0f:31:b6:e9:7e:90:d9:
04:e1:d2:ca:82:89:24:f9:c2:db:e6:74:23:d7:ec:6c:96:cb:
c9:64:d1:20:71:e8:e6:3f:dd:49:ec:91:3c:7b:23:10:fa:a8:
b2:06:70:ca:43:d5:c6:e6:30:f4:47:78:4c:4e:77:14:55:3b:
62:35:16:06:83:f1:79:3a:e7:33:4e:28:34:70:c1:ae:81:87:
c6:ca:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:47 2025 by rpki-client