Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: R8f7vPJnKZbCQ7n5AnuzUdi84DzZoKb2FvYFHCg8bhA=
Subject key identifier: 5B:9C:A2:D2:AE:A5:6F:FB:C3:18:21:7B:A8:40:0B:1C:4F:4D:4E:73
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 019A1CF557D01F678A628F8673BA8B38C7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0DD9
Signing time: Sat 25 Oct 2025 20:00:32 +0000
Manifest this update: Sat 25 Oct 2025 20:00:32 +0000
Manifest next update: Sun 26 Oct 2025 20:00:32 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: 4EcGqd0R5OocakJnYIUw6qSeNvRa3xxjr+hW85pYwK0=)
2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:57:d0:1f:67:8a:62:8f:86:73:ba:8b:38:c7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Oct 25 20:00:32 2025 GMT
Not After : Oct 26 20:00:32 2025 GMT
Subject: CN=5b9ca2d2aea56ffbc318217ba8400b1c4f4d4e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:13:b2:d2:8b:d7:65:e9:da:20:0d:82:07:
33:e3:51:03:fa:d3:ca:a6:44:63:67:05:61:32:41:
f0:70:89:a8:ea:7b:6c:3e:7d:da:bf:fc:17:24:7c:
53:b5:f1:ee:1c:cf:1d:58:b5:38:40:d0:2d:eb:09:
57:9f:1f:13:f9:9c:92:35:ee:e0:25:a9:69:21:49:
17:15:01:8e:05:7e:3d:21:8c:95:fc:17:3c:3f:f9:
b9:2f:e8:c2:a9:f8:9b:1d:13:a0:66:ba:c5:22:58:
bf:68:07:66:8a:f9:21:c0:58:ca:82:af:2a:cf:d9:
03:86:8d:fa:f4:03:5d:65:9c:0c:3d:93:b4:10:22:
45:57:72:7e:7a:65:82:6b:3b:05:42:6e:7d:20:6a:
fd:72:cb:ba:b7:2d:52:c2:1f:1f:c5:a1:3b:35:9a:
c5:64:45:0f:60:9c:d6:34:21:3e:71:38:62:85:d8:
4d:6e:a1:c5:2a:dd:fb:5f:b3:a5:16:b6:fe:7b:f2:
3e:93:94:3e:b4:70:f7:e4:5e:8c:72:9c:9c:a7:c5:
cd:41:2d:2f:d1:b2:9e:33:da:fe:bf:a7:78:ff:8b:
8a:ea:e0:ac:9d:3f:31:15:eb:ee:35:82:3f:a9:57:
7d:51:15:f4:76:4b:8e:84:43:ae:e9:77:fc:28:35:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:A2:D2:AE:A5:6F:FB:C3:18:21:7B:A8:40:0B:1C:4F:4D:4E:73
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ef:e0:aa:25:e8:c0:1b:76:ed:c9:d2:1c:8e:0d:01:20:ab:
3b:c8:21:31:5a:24:99:c6:51:69:8d:cf:06:9b:5f:67:d5:ab:
8b:cf:5b:ac:e1:c9:88:b7:15:03:bf:8f:2c:dd:08:a9:4d:bf:
74:37:95:37:ab:e8:ef:47:c1:87:0a:b8:d9:35:84:bd:be:05:
21:5c:a9:ee:aa:b0:62:ba:9d:cb:ea:66:7e:8e:3a:72:e7:d6:
dd:eb:b3:0d:57:bf:f5:7f:cf:94:8d:be:20:5c:0d:c4:19:76:
04:61:a9:4a:62:4c:ff:06:a4:45:94:10:ac:36:33:f3:3e:e3:
b4:f1:4a:9e:38:23:83:9b:1a:f4:e8:ef:d3:80:f2:7d:40:f3:
44:9f:8f:34:f8:38:97:13:4c:0c:6b:d0:dc:f6:e2:b9:91:7d:
87:94:98:88:df:7b:af:f8:4e:6b:6b:e2:5d:87:8e:2c:aa:39:
53:50:66:00:71:c8:3c:bf:66:d6:37:43:10:27:e6:54:78:2e:
3e:fc:56:ad:dd:d0:44:a8:43:e9:36:29:2e:ef:51:f1:52:6d:
84:31:0a:ce:b6:8d:8d:7f:06:05:24:c2:f7:00:83:1d:03:3d:
da:b1:96:00:0f:df:93:8d:e0:48:24:6c:0d:e7:6a:56:6d:3c:
ea:dd:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:22:11 2025 by rpki-client