Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier: 25DuWyqoDpWshHYkeiVp6apP5FCbhvnjL/hDFq3HwPQ=
Subject key identifier: DF:A4:2D:3B:5E:B8:48:33:07:06:42:82:C0:12:D5:18:40:C1:3A:4E
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019A221BB46C70810D9699C719A8F21E7C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 20:00:32 +0000
Manifest this update: Sun 26 Oct 2025 20:00:32 +0000
Manifest next update: Mon 27 Oct 2025 20:00:32 +0000
Files and hashes: 1: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (hash: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=)
2: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (hash: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=)
3: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: BgH0LdnaNLNbHU56M48b+SAKQw7XPPFUywQjzOXdEHw=)
4: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (hash: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=)
5: ST5QgStVsZ8VLKir2fIMPSp6_jU.roa (hash: 2UGwzfV+8KmtBgovMvwjTZRncLGcWbahxwdG9QTxnao=)
6: fRi0G2cIUxI61l2GTTKIFQAG9RE.roa (hash: IiPf4Yv8/FcDmWTn4xUhoGH8CrL6FWqGZiw6UQ0WOHg=)
7: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (hash: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:b4:6c:70:81:0d:96:99:c7:19:a8:f2:1e:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Oct 26 20:00:32 2025 GMT
Not After : Oct 27 20:00:32 2025 GMT
Subject: CN=dfa42d3b5eb8483307064282c012d51840c13a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:85:d4:0d:e7:98:8b:9e:8c:c2:02:02:54:
f7:27:7f:bb:75:98:e1:4f:ad:12:42:d2:72:e5:25:
28:8d:a3:ea:dc:67:97:85:67:ca:3d:1f:61:73:ee:
89:d2:ea:5b:23:11:8c:5b:37:bb:9a:42:43:5e:a9:
63:10:ba:8a:2c:b1:c3:be:d1:02:a0:27:44:ed:90:
a3:0f:e5:3f:bb:af:8c:65:10:2b:19:c7:47:21:bd:
bf:92:75:6c:e2:80:2d:09:e5:3d:a1:80:3b:d6:fa:
c7:84:46:43:47:a3:94:5b:4f:03:f9:0e:ee:97:05:
15:62:ae:b3:ac:b4:8c:2c:75:17:d2:dd:7b:85:d4:
f2:0e:28:a1:e0:e2:2a:61:e8:06:46:28:3f:0b:65:
12:30:d8:e1:06:67:73:63:f7:56:93:fb:38:a0:98:
d9:d1:0c:98:54:cf:72:05:98:59:03:83:b6:78:f0:
fd:0e:da:34:04:b2:d9:34:95:58:79:f0:66:83:59:
13:c6:e9:7b:78:e6:8d:ca:07:0c:47:45:91:31:9b:
91:21:ce:85:ed:a2:a2:8b:44:1a:41:84:d7:e4:71:
44:cc:94:5c:12:dc:f9:5e:89:5a:e0:92:0a:9c:94:
29:b5:4c:01:f9:24:2e:d2:33:a4:64:bc:15:c6:10:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:2D:3B:5E:B8:48:33:07:06:42:82:C0:12:D5:18:40:C1:3A:4E
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:6c:fb:88:69:a0:5f:83:3a:ee:5d:e7:17:22:af:e9:c8:
3b:76:e0:95:d0:ce:66:56:08:b2:24:b2:b2:bc:66:27:22:e2:
91:22:fe:73:c1:f4:eb:23:94:da:ad:ee:07:63:a9:33:89:d6:
bc:f7:d6:6c:8d:43:b4:2c:57:38:1f:57:ed:fe:92:11:f8:7d:
81:6d:08:e6:4f:19:45:98:39:f0:fb:59:fc:b3:a1:81:75:bc:
e5:56:82:a0:dd:92:e0:ec:f8:a2:57:d9:58:6e:b9:a8:02:67:
ae:3d:7a:4e:fc:61:7d:43:79:61:b2:ad:0a:87:28:48:07:a7:
56:8f:d6:0e:b0:e4:81:60:82:c0:1b:f6:a7:d9:9b:4d:35:37:
35:6b:87:40:29:41:ae:73:c9:b6:43:d0:23:85:54:f1:3a:8c:
14:bd:ee:f0:80:aa:af:dc:01:ee:83:fe:1d:57:d1:24:4d:d0:
8a:81:23:2d:d6:fb:12:46:26:a9:8b:a4:87:2a:4d:17:f4:2c:
05:d7:f4:df:39:df:e3:65:4d:f4:e6:d7:b1:7a:20:6f:a4:e7:
23:3c:e6:80:e8:2b:35:00:a4:e4:66:e0:89:05:70:2a:ed:22:
37:bd:d2:4d:6d:82:d2:4c:19:20:81:00:06:22:87:22:8d:e6:
b8:d1:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:05:46 2025 by rpki-client