Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: WToOz2vfowA0YNND+SIW+AEaMvJhwbWC1JAvwfnPipw=
Subject key identifier: CF:D2:8C:65:78:86:CB:08:1C:D5:B0:A8:B5:95:CA:B0:EE:1D:F7:25
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 019A1BABF47E37BB7E5F490DF0CCE382D5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 14:00:45 +0000
Manifest this update: Sat 25 Oct 2025 14:00:45 +0000
Manifest next update: Sun 26 Oct 2025 14:00:45 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: Nt3XhFQUq0EbbNr7Au41QRcXwQE5YeEJeAttqoAOefk=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ab:f4:7e:37:bb:7e:5f:49:0d:f0:cc:e3:82:d5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Oct 25 14:00:45 2025 GMT
Not After : Oct 26 14:00:45 2025 GMT
Subject: CN=cfd28c657886cb081cd5b0a8b595cab0ee1df725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:c6:6b:98:88:78:b8:29:59:7e:75:b0:75:
f3:04:a6:6e:9d:f3:d0:dc:63:dd:b9:49:59:fa:25:
57:5d:3b:ea:79:d2:3f:76:b0:02:ad:0c:3c:37:d3:
16:1a:80:f9:ee:6b:0c:2f:48:6a:5c:b5:eb:ae:f8:
0b:8e:7b:ae:b2:3c:40:f9:2f:36:08:ea:9a:2c:a7:
4c:40:67:45:0c:14:bd:b3:21:17:db:ed:a0:58:91:
5f:55:13:7a:f7:c7:34:db:91:d8:58:f5:c7:0a:ea:
46:b6:99:ef:ec:7f:e5:98:fc:22:58:9f:a7:b0:07:
4c:7d:4e:49:71:13:c7:b5:50:29:07:3c:bf:77:c2:
d8:26:f8:e6:e8:4d:ed:da:52:b4:1c:eb:46:ac:2f:
61:80:c0:b9:9f:a1:5e:de:32:86:13:a1:b6:6c:9c:
34:02:d7:e0:fa:cb:80:de:44:b8:9e:15:b8:60:ef:
2e:a4:c7:f7:91:db:94:b0:d0:bb:9c:01:db:e8:d5:
d1:e2:f3:5c:86:39:d6:70:9b:03:8b:f1:4b:2d:32:
c6:cb:21:95:0b:75:2c:df:2d:86:fc:a6:a4:c7:75:
11:64:ca:be:20:af:62:55:82:55:2b:28:2a:0f:33:
88:f3:b7:16:5a:18:ef:78:24:97:0c:6b:e2:de:9f:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:8C:65:78:86:CB:08:1C:D5:B0:A8:B5:95:CA:B0:EE:1D:F7:25
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fa:5c:39:3d:e8:78:ff:11:90:ba:a5:7c:20:18:63:dd:0b:
57:05:fd:2c:55:d6:6f:13:88:b6:c1:0f:3f:67:33:31:b2:3a:
92:ea:f1:09:62:1e:ef:7e:c5:17:18:3e:fa:d1:f7:7a:f3:a1:
e2:0c:30:59:4e:98:5e:24:af:f3:78:ea:26:fd:23:c2:8c:c3:
16:78:4f:0e:65:74:fb:23:6b:55:32:b0:ef:fc:24:12:5d:18:
f0:7c:88:e1:d0:68:6d:c2:72:cb:87:cc:72:24:2b:3d:53:a6:
9c:1f:8b:b4:a4:e0:f0:0e:80:0a:4a:f6:84:2d:99:7b:ca:b0:
cb:30:ce:d0:c8:27:0b:21:68:49:b5:99:cc:76:05:80:8f:fd:
45:4a:df:c0:b6:97:39:4c:e4:ec:ba:79:0c:91:5d:99:c6:dc:
94:8a:1d:a4:7e:f8:b2:96:5b:cb:5f:a7:b4:16:d9:70:35:93:
43:f3:3a:41:dc:0a:ad:ad:a3:92:14:79:ac:e7:56:55:e9:7a:
8b:ad:f1:5f:8c:14:c5:09:d8:2a:c0:e5:70:10:3f:95:e7:f2:
b2:73:65:85:3e:5f:25:58:01:4f:0f:44:d1:82:90:7f:93:93:
94:a3:7e:df:c1:4c:f3:ac:83:58:80:d3:17:4d:d8:b6:77:54:
26:2d:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:06:45 2025 by rpki-client