Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: 78tnYIYDwda9PMNSFLk7xPAR0mMULZMyRE/yTVFpUio=
Subject key identifier: AB:B9:FD:C6:9F:B5:60:AA:A0:04:98:17:6A:84:58:07:04:09:A0:BD
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019A35344DF70C3D488874F90D4DF62E43F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0ABC
Signing time: Thu 30 Oct 2025 13:00:11 +0000
Manifest this update: Thu 30 Oct 2025 13:00:11 +0000
Manifest next update: Fri 31 Oct 2025 13:00:11 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: WDvqn1K871WgGYvVSpWTLz5N2FifFBLHqptiiuB8v/8=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:4d:f7:0c:3d:48:88:74:f9:0d:4d:f6:2e:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Oct 30 13:00:11 2025 GMT
Not After : Oct 31 13:00:11 2025 GMT
Subject: CN=abb9fdc69fb560aaa00498176a8458070409a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:c9:45:25:2d:65:38:2b:2f:85:2b:7c:1c:
23:76:2e:a5:1a:11:bb:fe:7c:43:f1:ee:ec:37:b5:
7f:01:1f:45:02:bf:1a:d8:36:89:b2:7a:22:3e:ec:
14:6d:95:f4:fa:4f:35:c7:f1:19:4f:f7:37:f9:b8:
a0:cc:81:10:fd:bd:41:11:dd:97:2c:05:59:e5:bf:
53:1a:dc:c7:99:4a:cf:9d:65:4d:78:d6:a7:40:c9:
74:9b:2d:93:e9:0b:0d:5c:c9:69:e1:83:2f:b5:32:
b0:e9:7b:98:2d:7b:f8:d6:b6:ef:63:1a:89:83:4b:
60:ae:44:d8:ea:d1:0c:cf:b5:63:39:1f:f1:ac:82:
7e:cf:fe:88:3f:f4:be:e4:0b:48:64:41:0a:0f:c3:
8d:fd:8d:b2:93:24:4a:4c:47:6c:9b:51:3e:0f:eb:
2d:55:3b:fd:5d:a1:06:ba:6e:05:eb:76:a9:4d:7c:
03:44:01:36:db:83:ea:b7:48:8c:ff:6d:9e:35:13:
e9:19:ee:57:60:15:de:39:c3:4e:fe:ec:62:90:bf:
fb:9b:3b:8e:c3:f4:1c:3a:48:f2:97:22:55:fd:fc:
ee:df:65:a0:42:42:3c:d5:df:3e:6c:50:82:65:49:
8f:ce:02:d2:0a:98:1b:90:92:5d:fa:4e:dd:9a:3e:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:FD:C6:9F:B5:60:AA:A0:04:98:17:6A:84:58:07:04:09:A0:BD
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:65:1b:c7:27:e9:b6:df:fb:1f:51:84:5d:af:24:38:9c:2f:
21:ac:30:00:70:b6:c7:8b:c2:0b:76:e3:2d:0b:0b:ff:9e:fd:
9d:11:cf:4a:e1:1a:9c:fe:3c:b3:47:b2:82:6e:47:fa:94:34:
d1:b7:fe:91:2a:4d:cf:6a:00:a6:f9:bd:32:75:6b:4d:ee:88:
af:55:47:cb:cf:ce:aa:6e:da:94:ce:38:1d:c6:16:df:ad:0b:
c6:8a:98:b8:fa:4f:b0:4e:da:cd:a0:e0:26:d3:ef:3c:3a:be:
7a:b0:12:4c:3d:88:5f:e2:8c:39:f6:68:9b:7f:c0:a9:94:94:
e0:88:3d:72:f4:c0:f7:3d:35:0f:85:03:bb:b7:00:e4:f0:52:
66:d5:38:5d:09:1b:f4:29:96:48:a6:86:05:08:03:4e:5b:b1:
d2:4f:da:6b:e3:76:a1:b2:5d:24:d6:d8:6b:0f:67:39:f2:f1:
fa:a5:a1:79:b1:8a:99:c5:13:a3:66:f3:6b:1b:a3:05:b4:0d:
9c:b7:85:f3:e3:4e:c9:89:c3:cd:7e:31:12:a7:bf:69:5d:d8:
b8:57:a7:01:66:e8:0d:60:2c:1b:8c:b8:11:d2:46:03:28:89:
4d:63:23:24:3a:0a:36:b0:5d:bc:a5:67:c6:5b:a4:3d:18:85:
1c:9c:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 20:47:42 2025 by rpki-client