Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: EgVpIc4H2haRcbju9qsbdYEus62B+WsrpHXBYYD+7DE=
Subject key identifier: 14:FC:B7:1B:C2:77:DC:55:90:00:5F:CD:48:4F:A0:13:0D:FC:5F:FF
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019A12A85A1792A630A649E3E2E1DF836247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 07C8
Signing time: Thu 23 Oct 2025 20:00:14 +0000
Manifest this update: Thu 23 Oct 2025 20:00:14 +0000
Manifest next update: Fri 24 Oct 2025 20:00:14 +0000
Files and hashes: 1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: IHxwQUEueHS4hVCxl1SuP3HA/32JM7Fb8Vsx+gC7YGU=)
3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=)
4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=)
5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:5a:17:92:a6:30:a6:49:e3:e2:e1:df:83:62:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Oct 23 20:00:14 2025 GMT
Not After : Oct 24 20:00:14 2025 GMT
Subject: CN=14fcb71bc277dc5590005fcd484fa0130dfc5fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:61:03:d0:32:ce:4d:0e:f0:1e:ad:95:8e:
a9:9b:d4:37:be:45:c9:28:4d:31:b1:32:ad:16:99:
34:c3:73:0c:15:dd:f8:bb:fb:f1:cd:e5:1b:3a:b8:
81:44:3e:b4:c0:fe:d7:a3:cb:1f:2d:e0:b3:09:9e:
93:3f:73:f9:dc:bb:21:e7:6e:a1:40:84:5d:a6:86:
8f:ba:a1:26:61:aa:de:11:0b:df:79:cc:c5:43:af:
27:bc:25:da:7c:96:1e:ab:f2:60:10:c0:31:a7:85:
f0:30:c4:9b:d9:45:12:44:13:cd:89:9b:de:57:a1:
6a:c4:c3:44:62:37:4a:34:4d:d8:a7:b9:94:1a:88:
e8:5d:4e:a8:14:60:66:2f:44:50:08:61:31:5c:5b:
cd:67:e6:50:26:17:82:7d:5b:f6:9b:9e:eb:a4:4f:
ed:5f:88:d9:e3:19:9f:44:dc:d9:cd:e1:69:98:e4:
03:17:b0:19:d5:d2:10:01:63:db:d4:48:47:48:99:
ab:32:88:07:85:18:67:96:a9:de:b8:50:52:81:9f:
16:32:b4:b9:35:18:21:ae:f1:cc:aa:be:b7:93:91:
d9:9e:36:00:4a:20:60:04:85:1a:e6:dd:4b:ae:72:
16:27:be:ad:f3:91:76:00:48:77:7d:1e:8e:d1:06:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:B7:1B:C2:77:DC:55:90:00:5F:CD:48:4F:A0:13:0D:FC:5F:FF
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:05:ab:bf:0f:e9:ae:55:09:ae:bf:8a:5b:00:21:8b:e8:
96:81:0c:b5:3f:fb:de:16:26:1f:22:a0:05:58:ae:6e:da:e7:
9a:d5:d9:d4:4d:27:84:58:c3:ed:e9:23:91:f2:9d:81:dd:d1:
3a:fc:b2:01:bd:be:05:59:14:b0:b8:21:61:31:f2:82:bd:3b:
bc:48:48:4a:cd:b6:39:fb:a2:d8:32:fe:39:d3:43:48:4c:c9:
68:dc:1d:42:1a:1e:d4:cc:67:6b:4d:e2:16:62:7b:29:4f:ab:
04:b0:de:c4:02:cc:d9:69:8e:bf:10:f9:89:25:d1:d1:f7:2f:
f9:33:a7:a7:9f:47:90:48:dc:99:23:87:be:36:5e:26:ae:17:
a1:9a:6c:06:c2:20:5e:87:a5:1d:62:0d:86:9a:7b:48:7a:25:
ae:1a:6c:1e:0e:7d:2c:bb:0b:83:42:b5:58:2b:93:17:4d:3d:
52:0f:ae:77:1c:3f:ec:a2:66:89:d6:1d:89:28:f3:ad:95:9d:
c5:ae:ef:a5:9f:62:6a:b8:e7:d2:7e:12:17:02:d2:2c:f2:e2:
54:e0:9e:10:0c:ba:91:f1:32:ba:44:34:62:f7:02:d2:86:cb:
6e:1b:93:81:3b:2e:2e:e4:46:a0:1c:27:9a:1e:cd:ed:cc:33:
7c:a6:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 05:59:37 2025 by rpki-client