Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: Pd6NJ63wWsmCLWJrhfKcVft2Ci7ohRnFDDFstQVmQxk=
Subject key identifier: 08:18:98:1B:11:74:B5:7D:81:FD:0A:54:2C:3E:16:E4:FB:A0:8C:B6
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 0199FFC87B093EFC5F44A9897D3FE8553CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:02:32 +0000
Manifest this update: Mon 20 Oct 2025 04:02:32 +0000
Manifest next update: Tue 21 Oct 2025 04:02:32 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: ANF16ahIYmWPDlz338fZhUTGNhh53ixnv3LM3bDyj90=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7b:09:3e:fc:5f:44:a9:89:7d:3f:e8:55:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Oct 20 04:02:32 2025 GMT
Not After : Oct 21 04:02:32 2025 GMT
Subject: CN=0818981b1174b57d81fd0a542c3e16e4fba08cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:c1:11:36:99:15:75:c2:d0:bb:ae:f6:70:
1b:be:7e:1b:33:6d:e8:50:69:c1:7c:5c:db:a9:22:
99:de:dd:0e:53:87:02:50:e3:23:c2:f3:ac:6a:74:
09:f0:1b:16:60:b3:e2:63:8e:e4:39:56:fa:bf:3c:
9f:f4:ab:8b:69:c7:27:8f:e4:73:f6:ec:2e:16:ec:
7a:24:0a:4e:45:24:24:e9:e3:83:91:d8:aa:09:ea:
cf:b5:55:d5:05:57:d9:24:64:7b:e2:bd:14:d9:c4:
7b:bc:ce:b0:06:bd:fd:09:49:c0:a8:bf:08:fa:a2:
0a:fc:8b:1a:0e:6c:fb:7b:1e:23:c3:4c:99:59:0b:
10:91:97:ca:a5:cf:7c:fe:b5:c4:ef:4b:91:08:68:
e5:2d:2f:2f:be:ab:10:8a:05:6c:a8:8e:3f:4c:b2:
11:23:65:62:91:39:a9:31:af:37:cc:1e:42:6c:7a:
9f:a7:08:9b:13:7a:b2:32:f5:5f:cf:62:e2:23:b5:
88:64:e3:bf:ff:0f:1d:93:01:90:2f:d9:91:56:47:
d9:f9:61:7b:5e:b9:49:6b:a0:26:0e:c2:74:71:35:
1b:dc:55:4d:66:b1:cb:77:87:87:b7:8e:19:23:c9:
0c:0b:98:a6:8c:56:dd:75:43:0e:d0:af:4a:ac:4d:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:98:1B:11:74:B5:7D:81:FD:0A:54:2C:3E:16:E4:FB:A0:8C:B6
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:80:8a:46:d9:34:0c:73:17:ab:94:5d:3a:ea:9b:5b:fc:f5:
b8:7a:f7:b6:dd:77:a4:ca:d4:81:a0:88:a2:27:dc:af:f0:53:
b8:cf:fa:9c:d3:24:e0:da:ad:5e:7f:12:38:eb:9f:90:51:e2:
a6:9c:09:a4:5d:9d:f1:cd:a4:83:71:e2:12:4e:55:ea:ee:51:
a1:d0:7a:f3:03:ca:92:90:b5:01:5e:7f:f8:cb:2f:f1:90:5b:
51:74:fc:25:50:f3:d6:62:10:fb:eb:25:b5:40:62:06:96:4f:
bf:4e:2d:07:d5:02:5b:eb:c4:2f:2f:d1:50:4b:6c:d0:95:d8:
59:fe:21:14:43:8b:1e:b6:06:84:96:e2:fb:bd:d0:bc:a1:a7:
da:cd:ee:49:b6:55:6b:fb:38:40:44:d5:44:b8:c9:50:bd:eb:
c0:4f:fe:7f:59:77:96:64:98:a4:6e:ea:23:3f:81:b2:c2:ae:
37:09:41:09:5e:5c:94:04:61:07:1d:b5:d0:5d:95:64:dd:8f:
70:16:9d:7c:50:50:45:dd:8d:15:16:3f:29:09:3d:ab:a6:22:
30:d1:97:08:43:75:61:77:37:cd:8f:c1:f2:5f:0c:1a:9b:fb:
47:90:3e:09:f1:04:dc:ab:c5:71:f5:4a:bf:f3:33:91:d7:8e:
41:ae:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:50 2025 by rpki-client