Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: TPVontxglmrQv/b4NwXfqIMVpRK9dYBFMUJ5CF6XPKQ=
Subject key identifier: 5D:C1:57:E6:22:64:54:64:EF:16:49:4B:9F:0A:1F:FC:08:52:56:63
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 019A1F516E197720DF1D1808A708668EE5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 07:00:21 +0000
Manifest this update: Sun 26 Oct 2025 07:00:21 +0000
Manifest next update: Mon 27 Oct 2025 07:00:21 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: qr2UvrxYu8By1VK7XFGnspYAugTDkoRhuWbYqWE+z+8=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:6e:19:77:20:df:1d:18:08:a7:08:66:8e:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Oct 26 07:00:21 2025 GMT
Not After : Oct 27 07:00:21 2025 GMT
Subject: CN=5dc157e622645464ef16494b9f0a1ffc08525663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:76:d0:ac:f5:26:dd:f0:69:3a:95:8f:c0:
03:40:83:d9:af:f2:e8:f7:04:37:1a:02:b3:ba:35:
64:63:78:a7:9e:86:af:8b:78:18:fa:d1:b0:3a:a5:
38:05:a8:0a:76:06:af:24:b0:26:5b:14:00:01:ed:
7f:9c:59:bc:74:f8:7b:53:c4:f2:4c:70:f1:fe:85:
9b:ed:ad:0e:51:80:1c:94:94:98:08:5d:fe:b2:d7:
14:67:f3:6d:b5:26:85:93:de:ab:cd:fb:21:e6:30:
bd:b6:60:95:5a:57:a8:fb:b2:c8:6e:96:10:18:73:
6e:76:86:f5:79:3b:57:40:f2:cb:aa:c3:6a:94:93:
f1:66:21:fe:a6:eb:45:78:a4:4f:6a:05:c2:e2:d2:
6b:8c:4f:b9:db:b3:f5:dc:41:76:c5:c1:b7:ba:f8:
90:c6:1a:e9:55:c7:26:09:56:f9:78:7a:40:4d:3c:
e9:90:4d:1e:aa:9b:30:fb:94:c0:5d:42:db:f1:2e:
a0:66:1e:24:94:18:08:6c:30:a6:67:0e:d6:62:2f:
a0:05:d3:66:67:78:dc:ce:61:b6:46:5d:da:22:53:
cb:f1:5f:98:b5:48:cf:b9:a1:cf:a6:af:01:f6:b8:
38:22:4e:90:d0:e4:35:d3:4a:53:83:d9:8d:77:0a:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:57:E6:22:64:54:64:EF:16:49:4B:9F:0A:1F:FC:08:52:56:63
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:49:e8:65:b8:13:8c:31:da:60:ee:66:76:5c:e5:1c:90:4c:
e8:59:6d:af:37:41:b9:ba:76:8a:c4:86:fe:d5:a3:81:8e:d9:
89:c3:64:0a:a1:7c:bb:d0:53:1c:89:1d:1e:79:fd:1b:9a:79:
f6:8e:39:a8:33:25:1c:ed:c8:aa:b9:d2:69:46:c4:4e:28:9a:
3e:c1:e2:ac:e9:4c:d9:fe:b5:6c:69:75:34:97:47:bb:f9:5d:
dd:28:2e:bc:13:ba:2b:4c:5e:17:59:a6:c9:2d:4f:37:67:f4:
41:59:7b:4f:68:9a:3a:26:e8:93:4c:db:37:d3:95:cc:52:67:
ec:a3:79:63:32:66:89:11:01:01:f0:44:7b:95:b0:93:2f:7c:
4d:e3:96:79:23:59:7c:01:57:ab:69:c1:3e:2d:c8:c5:eb:13:
29:64:3a:72:56:a8:31:f1:ad:50:ea:a3:e8:cc:99:d5:8a:06:
52:d4:cf:82:7c:65:9a:bb:3a:fa:fc:7c:54:6e:c2:e3:4d:ce:
24:68:67:34:d6:f2:91:d5:f9:33:c3:83:25:58:b7:57:af:17:
3e:0e:ae:4d:51:b4:ae:03:95:13:a1:f6:58:7e:de:63:dc:00:
33:bf:af:7e:95:ae:d8:1b:5e:f4:89:42:70:b3:e2:29:94:1d:
c9:86:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:23:13 2025 by rpki-client