Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: e+vpdWI5kVl3NRXIR0sSEi81bH9/AUc7l+LxvIzWF/I=
Subject key identifier: 09:3E:26:8D:01:4E:88:3D:33:79:3D:AE:4F:4C:45:2E:EB:39:42:A0
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 01992DECC7A911DA89EC8ABDB013075F52AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0B9B
Signing time: Tue 09 Sep 2025 10:01:56 +0000
Manifest this update: Tue 09 Sep 2025 10:01:56 +0000
Manifest next update: Wed 10 Sep 2025 10:01:56 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: qW0UWweV/5wcsDLU9bd5ddx1XL6xeBu+lDjPKvUlWzU=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:c7:a9:11:da:89:ec:8a:bd:b0:13:07:5f:52:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Sep 9 10:01:56 2025 GMT
Not After : Sep 10 10:01:56 2025 GMT
Subject: CN=093e268d014e883d33793dae4f4c452eeb3942a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:8c:b0:fe:79:36:20:74:67:59:b0:41:f6:
42:aa:f9:ff:ab:b4:a3:10:e0:1c:96:ac:5e:b8:0d:
fe:a5:71:09:a7:07:81:cc:d4:58:e5:6d:07:f9:0c:
c2:6d:01:30:49:37:e6:04:d2:1c:54:df:80:58:f8:
4c:f1:93:1d:c4:6a:82:92:f7:c8:0f:e0:c0:ae:b7:
4e:48:57:89:82:bd:82:7f:8d:38:27:0b:f6:3c:63:
e7:25:d6:99:f2:cf:1a:81:da:43:6e:e3:7f:7f:b2:
41:88:c0:89:e3:9e:d6:79:c2:46:34:9a:9d:3e:21:
79:36:76:2d:c2:8c:6e:98:b6:b1:2a:de:67:cf:51:
e4:27:ad:76:58:c6:66:b3:79:77:9a:33:ed:7e:fd:
71:1f:e4:dc:cb:2c:0b:aa:11:51:30:7a:75:52:45:
c7:cf:f0:91:bf:7f:f4:0f:68:d8:7e:f5:8d:80:fb:
fe:b2:7c:4c:5b:ff:cb:00:db:91:43:60:15:23:39:
1a:6c:c5:04:37:77:4c:e4:05:87:3b:04:2f:6d:c0:
c7:26:30:74:ed:9f:2b:c8:77:5f:29:bf:0f:6d:82:
9c:7f:64:eb:d9:e2:99:05:48:0c:bf:e7:da:12:d3:
03:53:c2:8f:25:ab:15:62:a3:26:95:bb:9d:a0:59:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3E:26:8D:01:4E:88:3D:33:79:3D:AE:4F:4C:45:2E:EB:39:42:A0
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:49:13:ae:f9:51:f4:2f:ff:33:7d:8f:1f:e1:fd:ac:5f:b7:
a8:33:40:35:ed:a4:be:49:31:5e:66:5f:07:79:d5:ea:a0:60:
ae:af:e1:37:10:fe:77:de:71:a5:9b:04:e4:28:5c:84:a8:c9:
41:05:02:00:62:c3:c4:df:b1:64:52:64:b7:ae:ca:8e:0a:4c:
3e:3e:73:5f:3d:22:d2:1d:49:72:7b:c3:e0:54:5c:83:29:b7:
0d:e1:8b:ab:d5:ec:06:d4:de:b7:de:98:4b:ed:d2:18:5c:3b:
0c:47:d2:3b:ef:84:8c:26:82:f1:49:14:d8:75:06:5b:08:d1:
0e:f8:2c:ba:d3:6f:36:53:af:4c:f2:32:cb:d0:39:23:09:83:
9a:33:d7:b9:3a:8f:cb:b6:9a:51:4c:5e:f7:f9:c6:e0:4a:cd:
ed:14:01:0f:b2:ab:aa:c9:14:e2:e0:ff:04:9b:b6:cc:f5:11:
50:23:52:ba:ce:63:3d:41:56:e0:9c:b6:d5:47:16:f0:72:f1:
43:3a:86:43:ab:fe:b4:6d:82:61:d4:f1:5c:82:14:f6:f5:66:
a8:0d:a5:87:d3:4b:b3:f2:0b:b4:5d:88:b3:98:7b:05:e9:ec:
01:5e:c1:4c:ad:5e:da:35:10:fe:c4:5e:8f:bd:bc:ea:e4:ed:
c0:50:da:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 15:27:59 2025 by rpki-client