Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: q2UWH+mZpG2wRdZC5Plq+Q0A0N+TcwfiRTu5+BMGqzo=
Subject key identifier: 63:8F:61:F4:51:9E:32:E1:23:BC:C7:76:85:FD:C7:FE:DB:DF:56:DA
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019A10834C64C08F90FF2CA3F57F8946DD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 16EE
Signing time: Thu 23 Oct 2025 10:00:31 +0000
Manifest this update: Thu 23 Oct 2025 10:00:31 +0000
Manifest next update: Fri 24 Oct 2025 10:00:31 +0000
Files and hashes: 1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: X0ckKKfNDMNM6QKU5qwMYez/AZumTmVTUL+qw0KuwOc=)
3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:83:4c:64:c0:8f:90:ff:2c:a3:f5:7f:89:46:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Oct 23 10:00:31 2025 GMT
Not After : Oct 24 10:00:31 2025 GMT
Subject: CN=638f61f4519e32e123bcc77685fdc7fedbdf56da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:ab:ea:09:23:e6:f7:a1:2f:02:3e:ef:cf:
12:5b:60:c7:14:6c:aa:b6:4b:b0:7f:72:ba:f8:e9:
55:22:54:cb:b1:a8:9d:0f:eb:a9:45:a8:5f:d5:ce:
a9:c4:8b:0c:c5:c3:4e:91:70:95:3c:2d:75:76:19:
e4:7c:2d:e5:c9:e1:e4:73:46:99:6b:fc:92:c4:f2:
f4:8e:96:e5:e0:85:90:02:dd:ab:8c:35:a5:9f:ed:
23:e0:49:d6:a5:b0:ac:4e:15:f3:e0:75:fa:31:9c:
67:a6:63:4d:94:73:0e:3b:4f:7f:fa:33:f9:85:72:
9d:86:07:d2:bf:4e:f7:5f:43:d5:da:d6:4b:7e:b3:
2a:e1:0e:ab:20:b6:bb:24:97:77:59:c8:31:2f:e6:
23:e5:9e:66:f5:13:81:e4:09:9a:0e:51:81:ec:d1:
86:eb:99:62:77:1e:79:58:37:de:66:a1:b1:cb:52:
92:0c:61:82:60:a3:58:50:27:b6:c9:da:44:e2:9b:
fc:9d:95:1b:e5:91:68:9c:bd:b8:8c:2a:7d:b5:1c:
6a:89:26:3f:54:c5:1c:8e:44:59:9f:2e:c8:0b:fd:
4b:6c:df:a1:bf:e6:62:ba:f2:aa:68:8f:0c:41:10:
72:43:3d:c5:69:6f:a9:33:55:a1:a4:23:c3:02:85:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8F:61:F4:51:9E:32:E1:23:BC:C7:76:85:FD:C7:FE:DB:DF:56:DA
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:88:6d:03:e8:46:02:5f:f1:5a:7b:4b:f7:2c:d8:b5:3c:61:
e3:18:ce:5d:b0:a0:16:74:7e:01:09:df:45:5d:77:c5:57:c8:
02:47:2f:05:14:b1:04:0d:6e:b6:53:78:cb:d6:11:68:de:32:
34:d9:f9:e3:10:88:48:f9:55:6c:3f:47:14:ba:3d:23:44:26:
2f:3a:6c:99:cb:a2:3d:13:cd:62:ef:4c:5c:f7:1c:e0:d9:64:
5e:35:ae:c4:39:d2:d1:fe:08:32:f1:4d:10:61:e5:b2:ec:56:
82:10:2e:30:dd:e0:d9:06:f2:88:76:43:cd:17:1c:73:28:da:
de:41:d8:6a:ff:6c:ff:14:0f:c3:5c:d1:5f:ec:b4:67:95:b3:
91:4c:ab:a9:e4:7e:3f:b9:54:2e:38:59:e5:00:40:57:81:04:
86:68:8f:9d:2f:32:ee:84:06:11:d4:d9:22:5e:3d:68:ae:9c:
ed:f1:8b:58:ae:0c:82:38:a4:75:10:d4:77:5e:13:3c:e8:95:
e5:1c:8b:c8:6e:4f:bd:17:86:03:d8:88:ca:3b:c4:79:10:b4:
8b:f2:cd:14:71:f8:d9:8b:b4:ad:03:f5:03:c1:e6:d5:cd:3b:
a8:ed:d9:c4:2e:29:eb:dd:33:cd:bd:87:10:11:10:71:4a:21:
d2:eb:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:17:56 2025 by rpki-client