Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: +KDtrMaj7BR6MEQyrtD2SxFeI0yj7/gQYnLyM+zhfW8=
Subject key identifier: 4F:EB:4F:3A:88:05:63:0E:49:8D:D3:FB:E8:F8:48:3D:5E:5F:BE:90
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019A1D63226CE89A8516E55C06D814120D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0C17
Signing time: Sat 25 Oct 2025 22:00:27 +0000
Manifest this update: Sat 25 Oct 2025 22:00:27 +0000
Manifest next update: Sun 26 Oct 2025 22:00:27 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: btkEKV1B6K44qfYd6nb13dYy5i7OF9m16k9ZrvTTfcM=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:22:6c:e8:9a:85:16:e5:5c:06:d8:14:12:0d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Oct 25 22:00:27 2025 GMT
Not After : Oct 26 22:00:27 2025 GMT
Subject: CN=4feb4f3a8805630e498dd3fbe8f8483d5e5fbe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:fe:64:13:51:30:e7:ab:c3:39:4b:6a:c5:
f9:fb:52:63:3b:d1:0e:ee:36:39:63:50:c9:f3:ef:
5b:ff:47:c5:bd:5e:23:90:fc:72:45:ba:7a:9e:33:
b0:bb:28:e8:af:c2:05:7c:62:26:71:0e:90:03:0b:
9b:7b:05:8e:1c:96:0b:18:f7:a8:2d:06:9e:fe:f1:
06:f0:a9:48:28:fa:c9:65:a4:52:93:9d:2c:22:52:
86:e6:02:8c:15:5b:62:f0:3e:54:b9:37:65:3c:5c:
13:8d:0a:b2:78:4a:63:c4:5c:e9:e2:3a:af:f4:00:
e0:db:98:a3:66:31:ba:11:d8:61:cd:f3:07:fe:6f:
86:2c:09:79:07:a6:71:d4:20:e4:c2:bf:62:63:56:
aa:c3:c1:c7:51:6d:34:65:4c:f5:ae:fc:87:c7:27:
c2:72:07:a5:2d:68:f7:ea:7c:18:9d:11:23:7c:11:
d9:d0:b0:ac:ba:ca:5a:08:32:fe:eb:77:53:5a:f4:
aa:38:2f:5d:b0:ea:2b:73:f5:e1:b7:4a:be:eb:d3:
a4:78:2f:10:aa:46:7d:4a:c3:6f:6a:bc:9a:10:24:
49:97:4d:c5:59:c0:55:44:71:ae:64:02:99:ab:d2:
12:cb:e2:b4:89:2d:54:e2:d0:d8:19:63:30:79:a1:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EB:4F:3A:88:05:63:0E:49:8D:D3:FB:E8:F8:48:3D:5E:5F:BE:90
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:87:6f:37:a1:2f:69:cd:27:fe:65:91:28:9f:8c:32:a7:cf:
ae:37:19:79:d1:9a:23:a5:a3:24:5a:6a:13:63:56:6c:99:91:
6c:78:a5:ba:1c:ef:21:60:85:f3:e7:34:80:65:cb:b8:f3:72:
1d:05:56:85:76:65:66:ec:55:6b:2c:c7:cf:aa:d7:89:12:04:
9b:62:cc:8e:27:66:13:ff:9d:b8:a4:96:d0:1b:ab:cd:ca:b6:
0e:e3:7c:1b:3f:f2:5c:21:bc:3d:ce:c5:d8:19:c0:55:3a:08:
b1:03:06:c0:a8:ca:42:97:ca:48:4b:2c:4a:05:90:cc:d8:2f:
8b:59:02:2f:c8:3a:f3:b6:b1:60:a3:a3:9d:1b:0f:64:fe:8a:
f3:78:f1:5d:f7:e2:7e:8c:41:c8:09:17:9f:86:74:87:30:a6:
cc:13:95:b0:a9:d8:4d:d8:74:88:a6:9c:c6:f3:e9:31:1a:48:
81:2d:c0:c8:bd:26:7f:1c:19:51:90:5e:34:9b:c5:5d:ad:23:
4d:b6:b4:9f:b8:16:9f:db:f7:7e:d2:f6:64:ae:a1:17:da:48:
ea:1c:19:c1:97:c8:b4:b2:5d:2b:65:18:81:1e:73:ec:36:91:
90:4b:51:4f:7a:5f:9f:09:de:6e:1e:d6:d2:31:17:e7:47:17:
4c:a1:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:04:01 2025 by rpki-client