Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: D0wbKvavRJTPRPS4vN61Z/9O8o7CM/IZvmZ3OkBBPtc=
Subject key identifier: 7B:1E:79:2F:28:CF:FF:42:45:A1:19:9F:09:50:64:3A:40:FC:8B:93
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019A1D99F04CF8A7DBD0B4FB56FFF9A0F2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 08D8
Signing time: Sat 25 Oct 2025 23:00:19 +0000
Manifest this update: Sat 25 Oct 2025 23:00:19 +0000
Manifest next update: Sun 26 Oct 2025 23:00:19 +0000
Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: yIv32y5dyAyy9iZpN5REi4ehbXSw5OeQdnUdeGmMvyQ=)
3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:99:f0:4c:f8:a7:db:d0:b4:fb:56:ff:f9:a0:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Oct 25 23:00:19 2025 GMT
Not After : Oct 26 23:00:19 2025 GMT
Subject: CN=7b1e792f28cfff4245a1199f0950643a40fc8b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:22:a5:d3:4c:78:84:37:eb:6b:1e:6e:cf:
cd:e3:27:01:18:47:87:68:e5:92:c6:d5:9f:ad:f5:
76:69:65:3a:1c:8d:aa:00:c4:b6:f8:af:42:ea:40:
2d:b6:23:96:8c:af:10:a0:71:8a:13:94:8c:fe:02:
18:8c:be:9a:25:65:bc:6c:b8:fe:dd:1a:2c:c1:96:
e0:e7:36:73:c3:3c:1f:f6:ea:0e:91:94:df:69:91:
45:5e:02:81:98:0c:88:ed:dd:71:05:1a:05:97:79:
01:49:c2:43:e0:a0:9e:63:28:af:ad:69:a8:64:e4:
8b:11:4b:cb:82:87:ea:23:d1:e9:a1:60:8c:c8:cd:
c3:84:17:ea:ec:65:63:25:ee:c9:10:ad:b9:30:51:
d5:55:12:cf:3e:6c:0c:51:4a:9e:1c:c3:a6:11:bf:
f9:d7:21:6e:c7:79:8b:88:d2:29:1e:81:b8:12:dd:
93:6a:bb:76:35:d6:83:09:15:e6:8b:3c:33:b5:7f:
ae:07:30:5f:68:6f:c4:96:a9:03:d9:62:8c:09:4a:
49:00:9f:cc:74:bc:96:b0:02:c6:a1:be:6b:cb:80:
c9:b5:4d:5d:0e:6f:4f:cd:2d:c8:c5:ac:b7:5c:12:
bc:50:f7:14:c7:7c:da:9d:88:cc:bc:5c:f6:8d:66:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:79:2F:28:CF:FF:42:45:A1:19:9F:09:50:64:3A:40:FC:8B:93
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:26:85:f5:4b:5b:b0:cc:ad:71:8a:b3:19:f8:82:a6:f0:
58:82:be:05:5c:59:78:fc:16:e6:d6:19:60:e9:c4:57:83:c8:
aa:07:31:ec:06:35:f2:73:97:c6:17:36:83:55:64:d0:b2:57:
36:cf:5b:a4:b6:97:c8:e1:12:f5:86:97:4a:e4:bc:62:ba:8c:
ab:a6:ee:f9:62:38:62:fe:48:29:37:f1:4a:af:8e:ff:c5:3e:
46:9b:08:26:6c:8b:d9:9f:75:3e:64:bb:d1:73:88:40:53:2b:
cb:fe:6a:7b:a7:07:52:f2:ec:e6:20:1a:e5:d5:e8:c8:fa:8c:
be:62:c3:b4:79:3c:4c:e8:0a:83:3a:6d:10:5c:16:ab:5d:d6:
5c:00:b2:a5:66:25:28:1b:61:90:77:e8:ef:c5:28:9a:82:c7:
61:5d:ac:30:77:21:4d:45:7a:f6:e0:fd:f4:39:b1:f8:93:12:
1b:b4:22:7e:5a:a2:6a:58:e2:f5:fa:33:30:b9:0e:3b:96:ff:
f7:cd:b6:db:d4:ec:fa:30:dc:d2:0d:02:b0:11:75:32:82:51:
42:14:3e:3e:a3:e8:da:a8:ff:97:09:10:6f:c4:17:0b:01:d3:
c2:d5:2b:ae:28:b8:3f:83:00:bb:dd:c2:69:68:b8:fb:0d:51:
12:a4:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:02:13 2025 by rpki-client