Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: ab4iTQ9IGiU4ZhBnOt6zcwLkhsnu5BI+UK9fYdJRneE=
Subject key identifier: 37:59:1F:4E:95:4B:B4:4C:15:CB:1B:F6:BC:BA:20:43:0E:08:84:02
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019A13BB9871606F80E2B970650063B9B49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 1401
Signing time: Fri 24 Oct 2025 01:00:52 +0000
Manifest this update: Fri 24 Oct 2025 01:00:52 +0000
Manifest next update: Sat 25 Oct 2025 01:00:52 +0000
Files and hashes: 1: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
2: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
3: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
4: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
5: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: fc4M7clX+FtMfUbQHhEw/JoLg2wkE9W/Zci8vfI21zk=)
6: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
7: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
8: q4Ah0rWWKTUuQN0kyauP9Xbx4Pc.roa (hash: e3owPYjBi24F74VvYehxFdp8nbf9b8349pzS2VUb1Mo=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:98:71:60:6f:80:e2:b9:70:65:00:63:b9:b4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Oct 24 01:00:52 2025 GMT
Not After : Oct 25 01:00:52 2025 GMT
Subject: CN=37591f4e954bb44c15cb1bf6bcba20430e088402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:d4:06:a5:70:33:15:2c:11:2b:b5:1c:9c:
35:51:94:63:4a:20:b9:79:d3:00:51:16:37:15:5f:
4e:e6:18:64:42:6c:ed:21:76:84:8d:b2:f9:b4:ab:
9b:d2:c0:0f:9f:8f:52:b3:23:0a:51:81:dc:6c:a7:
79:79:e0:89:97:30:ca:bd:4a:57:e3:6a:a0:54:a5:
8e:d9:4a:51:19:22:0e:f1:83:c2:e7:65:e5:d9:27:
fc:9b:25:49:ec:c8:d8:f7:03:41:ea:ff:4c:9e:84:
ea:2c:c3:95:ac:cf:35:f4:bb:43:2d:be:d6:f9:2b:
3d:31:f0:33:7d:31:bf:34:47:96:64:5c:17:02:62:
6e:79:eb:bd:17:c6:23:19:e7:56:4b:eb:ba:8a:0d:
3f:cf:28:ce:1d:e4:2b:2f:ac:34:16:5b:dc:09:34:
07:70:c2:d7:bb:c1:9f:fe:5a:f9:61:5d:86:5e:02:
50:1f:1b:a4:57:e2:00:a0:4f:13:db:d1:e6:7e:3a:
9d:75:98:8c:cb:5c:e8:3e:b5:64:93:b1:c7:1a:39:
24:a4:0a:74:ce:ec:76:f4:d3:77:87:6a:bb:f7:72:
e9:18:52:f7:c3:ab:fb:eb:92:6d:16:90:9e:05:cc:
7f:7f:eb:29:83:09:c8:2d:b0:c5:ee:ab:a1:2c:d9:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:1F:4E:95:4B:B4:4C:15:CB:1B:F6:BC:BA:20:43:0E:08:84:02
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:2e:66:94:94:0e:13:0f:5c:70:c8:da:93:ae:13:15:64:
62:91:e8:5a:3f:4c:00:ca:de:53:b1:a9:8a:dd:ca:ff:3b:bd:
4d:f4:9b:1a:c7:eb:d9:4f:24:99:0a:9f:2e:13:4c:f5:50:50:
f2:7c:0d:4a:a3:d5:27:c2:8b:36:05:b9:8e:b0:0e:fa:d4:13:
2b:15:d2:54:62:cb:bc:03:8d:c3:8d:c9:38:8c:4d:fc:13:63:
d3:af:2f:ca:19:16:03:3f:b4:38:5f:4a:f7:43:2a:03:37:29:
94:25:45:9d:97:7d:3b:4c:8b:80:f2:e2:fa:ec:2c:9d:1e:f3:
67:e2:6d:61:2d:a8:65:44:21:9a:3d:45:12:3f:a5:66:81:61:
6e:89:6a:d2:3e:0a:87:71:54:d6:d0:8c:03:70:36:27:bf:60:
11:95:db:41:34:7d:1a:f1:81:05:55:2e:5c:36:38:e4:c2:dd:
53:bb:bc:e9:ef:35:cf:82:26:ff:6c:13:d3:6e:4e:cb:9d:75:
8f:40:09:5e:8f:ee:64:c2:d7:79:4d:92:a1:94:3a:45:bf:8a:
91:6a:89:26:9e:d9:5a:51:2a:72:87:4f:1d:ad:b4:88:23:27:
f1:82:47:a3:c4:7d:d7:b8:ed:8a:35:82:ee:b2:90:a4:9d:16:
14:15:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:30:24 2025 by rpki-client