Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: WmR0jqQYubeg1vuesZogp1Wx4JdjUVie2YGtwxlbt94=
Subject key identifier: 4F:DA:DA:AB:90:9B:1B:BE:10:70:34:FE:74:3D:A4:F2:D9:DE:04:E4
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 019A228A49733C2DC738354E9DDDB8A5FE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0DD7
Signing time: Sun 26 Oct 2025 22:01:19 +0000
Manifest this update: Sun 26 Oct 2025 22:01:19 +0000
Manifest next update: Mon 27 Oct 2025 22:01:19 +0000
Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: X/+RF2nN71txRrdWbvvOV2VEeugWk6zvgziOgy0g8BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:49:73:3c:2d:c7:38:35:4e:9d:dd:b8:a5:fe:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Oct 26 22:01:19 2025 GMT
Not After : Oct 27 22:01:19 2025 GMT
Subject: CN=4fdadaab909b1bbe107034fe743da4f2d9de04e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:9c:81:f3:e6:7a:2a:7a:3b:44:b7:8f:a3:
94:bf:6c:63:5f:03:47:66:f5:94:f6:8c:60:a5:b4:
9a:5c:49:45:02:13:c7:07:c6:cc:a8:93:05:82:97:
e7:c2:5d:d9:da:8e:a6:ae:02:46:1e:8f:c7:1e:40:
f9:3a:eb:1e:4b:75:3a:30:34:da:77:81:49:c9:19:
bd:61:8e:10:dc:56:a8:38:8d:91:9f:dc:e8:4e:ae:
7e:4f:4f:1e:5a:48:64:a1:98:f8:39:1c:02:6d:b2:
50:bd:40:46:9c:4e:de:d5:1d:4f:a2:17:09:2d:d5:
bd:66:fd:6c:b4:fa:e7:dc:d6:23:43:94:70:cb:15:
4c:83:fe:21:ac:82:02:79:9c:30:da:7b:57:61:18:
25:87:0b:5e:93:ec:26:64:71:02:54:f7:9d:13:55:
66:84:06:49:b5:db:95:d8:dd:b1:1a:c0:72:72:73:
5d:b9:ff:04:34:cc:c0:4e:a1:56:ac:3b:a0:7e:8b:
5f:cf:b1:a1:a6:39:b8:9e:c2:b6:da:48:9c:26:33:
d9:a8:96:cf:47:c9:ba:70:86:ce:7a:9d:0e:c9:8a:
2f:43:77:a1:57:49:ba:28:cb:e3:36:92:a0:4c:5d:
6c:90:94:ea:a0:ae:07:78:2e:e0:c4:f6:43:ce:0f:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DA:DA:AB:90:9B:1B:BE:10:70:34:FE:74:3D:A4:F2:D9:DE:04:E4
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:65:26:94:e7:86:b4:81:cf:5d:21:4a:f4:62:9b:d8:61:7e:
94:49:24:62:98:e9:a7:84:12:09:71:c2:85:c1:f4:3c:a7:7e:
94:46:18:a0:83:3b:fe:ad:fa:34:a3:81:5b:a1:2a:fa:26:69:
ef:dc:e5:8f:68:7d:9c:f9:81:5b:19:8b:dd:0b:0e:0f:dc:b3:
1c:ce:cd:a0:13:2c:f6:0d:d9:99:0b:e4:c1:b8:9e:61:b6:29:
9c:86:d3:0b:24:e4:90:fa:80:15:32:52:d9:80:03:10:43:ed:
49:bc:be:ab:58:23:bc:82:fa:ca:e6:d5:81:f5:0f:3e:f0:5f:
13:ab:52:64:99:79:dd:40:55:b1:4b:a8:61:f8:6f:ec:88:8b:
f3:b9:e9:5d:71:32:68:e7:68:d5:de:f0:d4:a0:37:5c:12:9d:
2b:25:52:cb:f5:fd:a3:7c:c1:da:64:d6:2e:a5:de:3e:1f:89:
64:f0:2e:c6:12:67:7d:42:d8:32:94:96:15:64:2a:73:f0:08:
35:99:ee:be:cd:78:4e:70:86:60:20:75:0b:5c:e8:fd:0c:17:
18:7f:4a:49:ff:d1:11:b8:72:7c:72:3e:e0:42:91:e2:f8:03:
e2:5e:b3:6b:0c:51:8c:76:2b:62:68:2a:56:13:31:35:55:6a:
47:42:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:25 2025 by rpki-client