
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier: RyRy4/cO5e5IxoHpbZWAgzM1x+4edSwgRCM5+qd2s+Y=
Subject key identifier: B3:45:C3:10:71:BA:EE:EE:36:32:34:9A:E1:A0:7B:02:81:B8:8B:BD
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 019A1EADF86A94F8071DA53990469C938B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number: 1217
Signing time: Sun 26 Oct 2025 04:01:48 +0000
Manifest this update: Sun 26 Oct 2025 04:01:48 +0000
Manifest next update: Mon 27 Oct 2025 04:01:48 +0000
Files and hashes: 1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=)
2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: Rz1J9ildwir7s7B1lrJKHVT+k4lOulMxW1T7wB7IdZA=)
3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=)
4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:f8:6a:94:f8:07:1d:a5:39:90:46:9c:93:8b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Oct 26 04:01:48 2025 GMT
Not After : Oct 27 04:01:48 2025 GMT
Subject: CN=b345c31071baeeee3632349ae1a07b0281b88bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:d5:57:72:26:27:4a:ef:7c:bc:6d:f7:4f:
33:8e:32:62:57:bb:a1:f9:b3:62:1c:7d:2b:14:53:
4e:18:00:7d:86:15:51:3f:ad:74:d7:49:7e:1a:3c:
d9:68:10:ee:00:75:a1:80:3c:2a:a1:33:a6:3e:72:
7e:92:ad:21:41:6e:99:4f:89:26:c8:14:88:a8:4e:
3e:da:d4:ab:96:d0:65:e2:b4:ef:2e:86:e3:b6:ec:
f0:54:8b:0a:10:57:88:94:87:84:24:60:a1:4d:86:
69:91:bb:50:56:b0:a3:f4:99:9e:70:f4:5d:ef:8d:
e0:e7:ab:0b:6b:84:f2:dd:b4:1a:cd:68:ae:2e:8a:
cd:91:e5:50:4f:12:93:f5:4a:6b:2c:a6:22:5f:23:
ae:d7:3f:93:a4:5d:db:0d:78:e9:14:2d:04:9b:4b:
9a:90:52:6d:7e:c0:ac:b7:d5:e4:d1:6c:33:ba:15:
1d:e4:10:5b:79:02:a3:d1:cd:af:c2:10:53:ad:ae:
84:31:b3:40:d7:8f:0d:ff:9d:3d:14:c9:c9:f1:60:
54:0b:1e:9f:d4:b3:32:a8:c9:fb:c9:61:20:e4:20:
76:f2:20:f9:b5:d5:96:03:39:e3:d3:02:ee:1f:44:
cd:25:85:ae:1e:6d:95:44:51:23:d8:79:0e:2b:b9:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:45:C3:10:71:BA:EE:EE:36:32:34:9A:E1:A0:7B:02:81:B8:8B:BD
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:66:63:38:8e:a6:32:76:05:65:14:9a:c1:71:62:04:bd:
b8:87:42:6c:e4:3c:81:3a:b3:60:90:fb:65:00:2f:0d:6a:d7:
eb:9c:fb:13:4b:c3:aa:9c:f1:0c:cf:ac:23:37:5d:ae:d0:90:
fd:65:5c:f5:e1:17:99:0f:2b:21:5e:32:04:7c:89:96:1c:53:
bc:a6:e8:6d:f5:0c:1d:23:87:ab:3d:a5:c1:fa:68:b6:a9:60:
0f:ab:b0:dd:56:e2:7a:0f:16:15:c0:eb:76:24:89:b0:90:0f:
dc:f8:1d:d2:88:07:d5:3c:12:65:0e:87:27:50:51:d6:a7:89:
ab:58:80:26:9a:1b:38:c8:b8:4e:37:a1:27:28:8f:e0:a5:e7:
b5:d1:3e:8e:28:32:53:59:6b:62:71:c2:62:c1:26:f6:42:5d:
74:cf:40:27:84:18:f7:93:e3:fa:79:1d:6a:b1:3e:b9:1d:db:
23:f3:de:fa:b1:ee:5f:1b:1c:9c:48:c7:94:6e:69:d9:29:92:
31:c1:73:78:d2:f2:f1:4c:53:27:d5:43:9f:0b:1f:fb:dc:21:
8e:29:26:40:2d:5b:b4:7c:9d:f1:26:35:ae:43:42:35:7c:7b:
0c:7d:bf:52:01:3f:7a:17:1d:6c:96:75:68:4e:a1:c4:06:61:
c5:64:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:58:23 2025 by rpki-client