Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: CnCkWJ31BxqY5KhovwVRdWEl77ZPyXtgM15TUTdlr+c=
Subject key identifier: 19:FB:48:F7:B9:6A:0D:11:62:FE:39:1D:35:C2:E4:DA:8E:68:F1:19
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019A7225F3A6B869167EBD9C7C140AE195D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 16D8
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: QsA63htkLwfYnYHs-Kq4o8mj9CE.roa (hash: rn3uqwJBUFxLOERoWp4bxdCoGJiytcYNcQK3zAQq29M=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: Ze7WNP44+U/erRwW9MORSdGxr+eXdWrT68r03i/C8rw=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f3:a6:b8:69:16:7e:bd:9c:7c:14:0a:e1:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=19fb48f7b96a0d1162fe391d35c2e4da8e68f119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:35:70:7e:c9:16:b4:d8:e4:31:0c:1d:d9:
11:05:52:cf:5e:12:fe:b7:db:00:e1:c8:ab:af:90:
68:55:55:78:c3:05:f0:8a:d4:ed:fc:f6:6c:a7:56:
2a:0b:8d:1e:3d:7e:b1:46:57:4d:6b:cc:a2:e0:96:
29:93:7c:f9:6c:68:23:14:ed:1f:ee:ed:0f:e5:30:
42:99:da:8e:c7:4b:c4:9c:ee:00:d1:c6:39:72:6a:
39:52:ba:dc:0e:72:31:20:99:ea:a2:5a:79:1b:bc:
de:92:72:cc:d8:b2:35:52:ef:44:d7:1d:e7:c3:9b:
50:6d:24:5b:9d:3f:fd:cf:05:45:fd:0d:c0:95:7a:
94:26:5a:43:94:0f:26:19:d0:d1:40:ea:b3:0b:27:
19:47:04:c7:62:2b:1d:23:47:ba:05:57:d8:b7:fb:
c1:b0:02:02:c2:fe:1b:85:21:6e:46:bf:1a:ef:c1:
7b:76:5f:fe:96:9b:cd:75:c7:16:fd:8d:61:8e:8c:
c3:bd:6b:31:59:49:14:0c:a5:fb:59:69:fb:b7:de:
26:f9:18:fd:a8:5c:a0:7a:b5:b1:3c:62:98:ba:25:
af:ef:71:78:a9:b2:c6:c5:10:1f:a4:47:e9:58:0c:
39:7a:2c:74:e1:b9:ce:f3:6f:ce:00:5e:63:7f:8f:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:48:F7:B9:6A:0D:11:62:FE:39:1D:35:C2:E4:DA:8E:68:F1:19
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0f:bf:96:a0:b2:19:1f:7c:cc:c3:63:16:45:5b:90:3f:29:
17:84:bd:9d:b5:d1:63:28:4f:80:e9:83:e9:71:0c:c4:11:71:
9c:16:11:9f:d3:f3:41:31:ef:29:da:a8:83:a2:6c:c8:ba:38:
f1:f2:13:36:f8:4e:a4:68:74:26:05:62:8b:a5:aa:15:f9:36:
a1:be:cc:f1:b9:5c:5f:90:d2:15:1c:5d:b9:c3:c4:c8:11:3c:
2f:59:6b:28:30:0f:a0:e8:22:55:d6:ee:0c:94:34:ed:25:3c:
d4:6f:9f:fb:78:57:a2:87:50:34:97:e3:ec:19:39:11:5a:17:
d8:ae:18:2a:bb:9c:78:01:b1:85:93:e7:97:e5:3b:9b:bb:b5:
08:89:80:3a:69:4b:f6:a5:bc:07:ed:d6:9e:59:a4:d2:a9:91:
bc:54:38:f0:1f:85:3a:65:c8:9a:32:21:8f:6c:ef:02:35:62:
d8:9c:71:52:c2:00:62:39:eb:4d:3c:0f:9b:4a:26:ef:7b:ae:
37:39:41:40:92:4e:38:34:ac:20:02:ca:f2:4b:ae:c3:38:3e:
24:04:a2:f2:b0:6e:83:11:0a:fa:27:d5:b2:39:8f:07:05:75:
b9:4a:26:a4:94:8b:bc:41:80:7f:76:fe:90:65:90:0a:c9:84:
a9:46:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:13 2025 by rpki-client