Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: rvxucGpURUBlAH0BTAn/anFDkOC8vvVZX//vNmYA8DE=
Subject key identifier: B2:74:C1:45:0B:66:89:32:EA:04:B1:A0:94:9D:BB:42:AE:40:CD:F4
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 0199DF97B063A0B63D46A5C9E6ED06DF214D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 159A
Signing time: Mon 13 Oct 2025 22:01:24 +0000
Manifest this update: Mon 13 Oct 2025 22:01:24 +0000
Manifest next update: Tue 14 Oct 2025 22:01:24 +0000
Files and hashes: 1: 3bMVFRs8FOeJcOkO2XYWLqzrrkg.roa (hash: jcRVVzJYs1NWamGAFlutgx67H4FacWZP/qMYz6OqYpI=)
2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: Q1bZ4+8lytie5TnSH2n83MpL8a1R9bdn3ZD3jHq7XfY=)
3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 17:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:97:b0:63:a0:b6:3d:46:a5:c9:e6:ed:06:df:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Oct 13 22:01:24 2025 GMT
Not After : Oct 14 22:01:24 2025 GMT
Subject: CN=b274c1450b668932ea04b1a0949dbb42ae40cdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:a0:74:b6:52:64:c7:e5:0d:bf:a8:6c:05:
85:5c:69:eb:a9:04:93:05:a1:bb:5a:60:6d:6e:44:
f4:e2:77:ed:84:95:8b:67:5c:45:b5:78:30:70:dd:
ad:33:b3:b6:83:32:b0:07:0e:ef:fc:b6:0e:9c:d8:
a3:73:e2:2b:ff:4b:65:0a:bd:ec:dc:47:38:37:e7:
ca:32:0c:be:7a:2d:6b:21:a7:2a:70:67:1a:78:0f:
cc:8c:f8:0c:96:8e:0d:ea:f2:d2:ac:4a:77:5b:40:
05:2e:fd:c3:d6:b1:3d:26:27:fc:ab:bb:fe:fe:7d:
29:f3:e0:34:3e:5f:b9:c7:72:c5:54:c4:42:b4:9a:
8c:78:a6:52:22:6b:f0:84:81:60:a5:d0:6c:49:c4:
95:0d:1e:26:d5:b6:7b:af:a9:03:90:f4:0f:5c:66:
78:89:f0:59:e5:74:98:ee:b4:35:2d:ff:fd:b8:ca:
0a:1e:f6:54:41:d6:2e:05:94:48:88:cf:38:bf:22:
8d:9c:f2:a8:94:89:29:b0:ca:e7:f5:6b:13:98:a4:
0d:49:21:68:bb:34:a7:7f:82:9b:b5:e4:fe:03:76:
b6:ef:d3:33:20:74:b6:6f:17:43:55:6e:c5:39:8b:
2f:72:13:39:da:a7:c3:76:a6:ca:cd:68:07:4d:b6:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:C1:45:0B:66:89:32:EA:04:B1:A0:94:9D:BB:42:AE:40:CD:F4
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:61:45:91:93:02:f7:52:32:66:d5:29:6a:17:6f:a5:4d:6a:
39:97:5a:4f:75:a9:3f:65:9f:16:99:b6:c8:44:02:d8:98:83:
d2:bc:57:97:77:e4:c5:50:b1:7e:40:57:1c:56:38:e2:d9:c3:
04:f4:f9:5a:d1:da:72:1c:23:7b:78:f0:18:97:86:52:19:0c:
c5:67:b1:e7:20:d8:50:03:75:ee:ae:24:b4:9d:54:a9:dc:8a:
88:c6:66:51:70:12:6e:8b:91:f5:7a:f5:26:d9:a9:c9:8b:e5:
1a:70:bd:1d:24:90:d0:b6:1c:0e:83:29:19:bb:f2:19:80:5f:
d1:4c:73:5a:ab:55:9b:7d:02:78:e1:a0:a3:b2:c8:43:11:36:
be:65:ed:f8:69:d9:20:a1:8c:34:88:fe:62:ea:dd:14:0c:76:
15:b3:0f:1c:b5:47:47:48:9d:50:24:d6:d0:5d:fd:9e:d3:f0:
9f:b5:df:f2:16:87:c0:a4:b3:a4:63:a5:be:11:c3:73:91:b5:
d7:ed:46:53:5c:5f:53:bc:84:cb:3f:3a:9e:2e:21:81:c9:54:
3c:a4:17:35:ee:a9:0e:04:66:63:ae:32:ac:7a:99:ad:02:bd:
6e:ff:bf:d4:8d:e4:fb:12:49:6c:66:8a:20:f0:8a:d5:84:40:
0e:51:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:58:28 2025 by rpki-client