Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: RweQ6S9pL1r0AdgyYechvX9DnVnCx+QXZ1O0Co39jqY=
Subject key identifier: 99:97:15:DD:67:F9:59:C9:63:B3:91:0D:71:11:CC:E0:8A:0B:1F:5D
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 019A23651DEB56ACE7F084961574EC280A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 02:00:20 +0000
Manifest this update: Mon 27 Oct 2025 02:00:20 +0000
Manifest next update: Tue 28 Oct 2025 02:00:20 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: 0bCWidbqwVJyUzZ5mo1l5m9KTC1TmI7OkxSWxxjkwYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:1d:eb:56:ac:e7:f0:84:96:15:74:ec:28:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Oct 27 02:00:20 2025 GMT
Not After : Oct 28 02:00:20 2025 GMT
Subject: CN=999715dd67f959c963b3910d7111cce08a0b1f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:b1:26:d3:41:62:96:d6:50:6e:4e:bc:2a:
ce:fd:93:16:ac:44:bf:89:12:31:35:1c:ce:b1:f4:
f6:95:47:c7:79:3a:ff:b0:e7:5a:0e:40:25:bf:ee:
63:67:e9:0e:8f:ea:97:25:52:c5:a1:e2:b7:9a:7c:
42:d7:7c:57:fd:3f:f6:6e:47:20:21:4a:71:b3:6c:
ae:01:c7:e5:48:b4:11:bc:68:ba:44:e6:e1:96:8a:
ba:cc:77:7e:8e:f1:0a:38:82:44:f2:40:c6:b1:e6:
d7:ef:2b:50:76:0a:08:f4:36:1f:0d:5d:54:58:09:
51:5b:fb:dc:c9:1a:5f:d7:11:c3:57:59:aa:6a:3d:
4a:fd:f1:95:b8:d7:a0:bf:5b:52:95:d1:58:3a:b4:
88:07:fc:56:75:c5:07:84:73:f0:0f:d9:2c:e0:e1:
b1:92:f8:14:25:c8:5a:eb:82:a6:2c:c2:9c:aa:70:
43:a2:a9:2e:07:b0:9e:a8:e2:a6:7a:51:47:65:fa:
1d:6e:79:06:17:f8:5e:eb:46:7d:77:f5:f0:31:ab:
f8:9d:78:1e:57:97:af:31:fa:90:61:70:1e:ea:92:
35:f4:e2:f1:21:85:08:fd:01:c8:14:a2:2f:33:13:
43:da:56:df:bb:30:25:f8:d7:12:89:12:2f:e9:6b:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:15:DD:67:F9:59:C9:63:B3:91:0D:71:11:CC:E0:8A:0B:1F:5D
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:16:b0:ff:16:97:30:81:5f:5e:72:81:14:31:a8:c6:4c:29:
4c:6d:93:9d:23:5a:f1:dc:a1:58:17:15:d6:59:fe:79:72:19:
f6:78:c2:ea:d2:cf:52:63:6a:a6:a3:a0:bc:bc:9c:e0:fd:d4:
fc:f9:aa:7c:00:ed:1b:28:4d:d4:13:66:24:fe:29:11:35:2d:
82:c8:20:05:05:4c:18:74:62:4e:dc:b4:49:8d:5e:2c:25:26:
36:6e:ef:ff:04:e2:2f:12:67:a8:a1:c2:3f:b5:40:83:3e:39:
dd:f7:d6:04:29:d1:ae:45:da:fd:28:9f:17:1c:dd:60:ca:6f:
5e:e5:b2:a9:f2:a3:f9:35:05:27:6b:a9:f6:3a:1b:43:9a:f0:
86:ef:54:8f:10:c6:20:b1:7f:2f:20:9b:b2:85:fc:1b:2b:10:
b7:9e:8a:6c:9f:ee:e9:b9:a2:d3:20:4f:c1:b9:3f:28:0f:bf:
19:53:47:c4:71:5d:d3:34:c6:ad:15:5d:23:9d:69:04:2e:87:
3f:40:03:cb:9d:19:e0:24:8a:98:4c:13:47:e9:e0:52:84:6a:
0e:70:bf:b7:19:d7:53:89:0a:0a:99:08:8a:a6:61:54:1b:df:
42:65:b5:06:02:40:6b:66:89:ec:ad:a7:75:06:6c:54:27:fa:
f2:02:6f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:54 2025 by rpki-client