Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
File: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json)
Hash identifier: PgJjwiI8qcS5xA9XgVrQf4ACvyBJEKq9DjQJgRDKLVw=
Subject key identifier: 06:B6:04:6C:33:96:40:D2:34:F8:C2:2A:B2:5A:E6:59:BC:38:F3:5D
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial: 019A725CDAEBE1473B7ACDF3A4AD66562AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
Manifest number: 12BF
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: 3kY7grFYjpfl2br1ZCOIi5wFn3IQMmGKJW8jIsSRkrY=)
2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:da:eb:e1:47:3b:7a:cd:f3:a4:ad:66:56:2a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=06b6046c339640d234f8c22ab25ae659bc38f35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:72:7f:66:4f:c7:af:b5:49:63:7d:f8:80:
c6:f7:9e:0e:26:6f:be:48:0b:dd:c7:8e:ba:8f:fa:
b6:42:50:3d:7c:49:ca:69:0d:8c:2e:93:d5:df:76:
f7:47:24:7a:87:97:cd:0d:a7:f4:10:c0:ce:7b:82:
b6:65:2d:36:6a:97:00:e1:d1:de:15:7f:69:8d:a8:
1d:fa:65:65:2b:94:2a:23:4e:34:b0:42:8d:30:90:
9b:9b:f5:6a:95:20:4a:30:45:e2:76:0e:ce:de:a2:
4b:41:be:a5:61:91:5c:6b:f8:14:8e:bd:2f:d3:16:
17:32:c0:1e:e9:4b:40:4d:f9:41:89:ae:56:ea:e1:
ef:47:f4:3e:0c:ad:a9:2e:97:96:e9:3f:ef:ca:dc:
64:b2:bf:b8:62:b2:26:d6:64:35:a4:ad:eb:65:21:
5c:0a:cf:cf:ff:c7:04:e4:6f:ce:9b:25:78:89:db:
4b:c5:8d:49:31:3c:ae:bc:be:c6:8f:e3:79:19:a7:
ff:37:9f:18:b3:92:2e:fd:cb:e8:62:c8:72:2b:c9:
2b:5b:9e:a4:ed:21:c5:54:c8:11:1e:0b:f1:14:fc:
ff:84:44:31:09:a3:8d:bf:3a:19:a8:0f:65:e5:9d:
aa:70:74:b3:06:c8:99:74:70:f4:83:ab:fc:07:64:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B6:04:6C:33:96:40:D2:34:F8:C2:2A:B2:5A:E6:59:BC:38:F3:5D
X509v3 Authority Key Identifier:
keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:04:a0:0a:6d:e2:54:e1:5d:29:6d:1f:e8:ad:80:d9:98:ae:
f1:34:7e:7c:ce:3a:e4:10:e2:0f:1f:0e:51:b0:77:e3:7a:cd:
2a:5d:8b:65:49:4f:5e:49:20:50:9b:40:c7:3d:f9:a9:9d:b2:
2f:fc:19:4f:96:91:01:2e:0e:6c:09:8a:a7:89:ad:27:2e:d9:
27:1a:2a:27:d3:cc:ac:df:5b:fe:0f:9e:6d:d1:48:9f:a1:e6:
81:a0:68:d6:54:51:06:6b:a7:b9:ca:58:0d:e7:8e:e0:80:8f:
3e:1f:8b:fe:9a:50:8d:a4:78:21:fc:0f:29:93:de:d0:fb:94:
6b:6a:de:a0:b3:b1:79:f6:91:de:df:4b:e8:73:e9:5a:b1:3e:
56:be:96:f9:b6:c0:cf:7f:d8:fe:da:b2:d0:0a:54:76:97:8e:
5b:b9:5f:f1:46:1e:4a:56:00:34:fc:d6:c1:48:bb:b3:b8:9f:
76:cf:f8:2a:8b:43:d1:6c:74:97:4e:81:50:82:4c:84:68:cb:
1c:41:ea:7d:79:0b:e2:47:e9:9f:0d:f7:9f:3b:20:15:60:fe:
9b:95:4c:d4:2e:d0:25:14:5b:78:af:51:06:94:c8:ba:b8:57:
3e:c9:c0:37:57:93:23:6d:f0:d9:9d:09:05:ac:6c:3a:51:a8:
cd:c6:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:58 2025 by rpki-client