Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: r/rD4AuUw8s0WX+ZV9PFk73H70lsPD1owDySCpx3nlA=
Subject key identifier: 0F:D0:A0:B6:91:77:16:C3:7B:D0:9F:9E:DF:8B:CA:D1:DF:3F:78:9C
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 0199FF22BACA9BB94FEC0936C06BB059071D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 107E
Signing time: Mon 20 Oct 2025 01:01:30 +0000
Manifest this update: Mon 20 Oct 2025 01:01:30 +0000
Manifest next update: Tue 21 Oct 2025 01:01:30 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: qMu+kBd6czyp2a+VtPMZ10tmDQy2Onyg0agxZQ8s1R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:ba:ca:9b:b9:4f:ec:09:36:c0:6b:b0:59:07:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Oct 20 01:01:30 2025 GMT
Not After : Oct 21 01:01:30 2025 GMT
Subject: CN=0fd0a0b6917716c37bd09f9edf8bcad1df3f789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:bc:bf:48:25:be:f1:c3:d3:e6:86:2b:5c:
23:4d:14:6e:8c:5d:00:c2:d4:a2:69:ba:a5:01:35:
6e:34:d5:56:de:33:d8:cd:ae:0c:cf:2d:0c:ae:cc:
91:38:20:1f:b9:e8:35:cd:69:11:1c:de:aa:26:16:
2b:48:88:c0:29:79:98:e2:a5:63:e6:7c:a1:d3:be:
52:82:ff:5d:60:ed:0c:37:a6:37:8b:21:9f:0f:80:
cb:75:dd:65:fd:11:a9:2a:96:7c:aa:95:14:bb:92:
23:ee:61:b0:e3:50:4d:a9:6f:a7:09:ca:de:f9:1a:
2c:0a:90:ca:9f:26:6d:1c:0f:47:54:b8:d4:65:e9:
11:ac:e8:a7:01:8b:06:cd:f5:37:db:4c:6c:a5:18:
81:5e:a0:66:8f:d5:68:e2:35:7c:db:90:87:fd:8a:
69:7d:2b:b2:23:ba:d0:67:12:e0:5f:e3:00:3e:4e:
7a:dc:2f:b6:71:c7:83:80:d6:59:cf:b6:93:87:7f:
ef:d1:b8:d8:ad:94:c5:5a:d0:00:5e:fa:65:b7:97:
22:33:aa:4a:a4:a2:6e:56:c0:a5:3a:27:e9:17:a7:
20:fc:9d:96:5b:62:da:8c:70:ed:fd:1b:40:c7:00:
96:40:8d:66:5c:2b:53:58:43:6c:3d:64:0d:b8:51:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:A0:B6:91:77:16:C3:7B:D0:9F:9E:DF:8B:CA:D1:DF:3F:78:9C
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:d8:aa:5e:58:89:d5:96:f1:70:83:52:44:85:4e:09:2f:
f5:30:98:88:45:ca:a5:dd:92:56:f6:29:6c:05:7a:cc:dc:54:
ef:50:23:b2:db:e1:59:fc:d6:a6:ca:29:be:6c:02:c7:e1:82:
17:c6:1a:66:e1:74:ff:54:9b:b0:4e:f8:e7:e4:73:e8:d7:22:
dd:81:ea:a8:03:ba:a5:5f:c7:25:10:f5:06:05:4c:4f:28:3c:
fd:a6:b4:55:91:ad:34:ad:7e:fa:86:e3:4f:3a:91:19:f4:21:
5c:4d:0c:f0:5f:5b:6d:e9:77:7e:e4:a0:08:2f:39:a8:42:e3:
8f:da:3a:15:c2:2c:a8:5f:44:f8:79:0c:b3:9a:f1:75:7e:eb:
47:69:84:2a:aa:eb:6c:be:f3:64:7c:c6:60:55:e3:9f:d6:2b:
77:08:10:4a:3d:be:b7:02:69:16:b6:d3:c7:7c:f2:8b:78:7c:
82:ea:25:20:92:e0:39:69:98:9d:4e:5c:b3:6b:fa:e8:86:6b:
8d:c2:12:26:f5:bd:9c:8c:8b:84:fe:b4:f2:86:ab:de:a3:39:
1e:5f:51:7c:1d:4f:03:1e:28:86:7e:e0:5c:88:66:40:b4:b6:
19:c6:30:d4:45:64:8f:8a:a0:cf:a3:4f:b6:2f:ea:f1:ca:7f:
1d:ea:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:47 2025 by rpki-client