
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: aVZr3xdWxwuzVddIYypcAONL4r+y0hRvzEDqP6302YI=
Subject key identifier: F6:35:6D:57:95:99:BA:C1:A6:A8:80:01:20:61:C6:35:66:C7:2A:1D
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 0199FC58696CE6FECFB474B33A098A8D1A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0103
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: YdAjbfCRxVQuhwuJCOd8n6-9uGc.roa (hash: ryQI+IE9GniEW1zRKSAQBzSoJ8r45pp9QujhZtOYmEk=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: USbByvYDCgYlwKLfVWIw+ydQqcgKOKMhNXaA0EMQFH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:69:6c:e6:fe:cf:b4:74:b3:3a:09:8a:8d:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=f6356d579599bac1a6a880012061c63566c72a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:01:db:4e:a2:c5:e1:21:63:8a:73:53:5a:
30:ea:4e:9b:ef:ae:55:32:94:ef:b1:57:0e:20:d0:
8f:1e:3d:4b:9d:d3:bb:40:1d:22:87:19:20:15:4a:
94:bd:73:37:73:e7:3f:97:7b:5e:a4:fe:c3:bb:0e:
83:08:b7:62:26:13:76:40:c6:ef:95:de:ef:a1:67:
90:c7:b2:b5:90:c3:4b:01:3f:e2:ae:66:7a:af:44:
ba:d3:6b:b3:67:64:20:8c:19:cf:68:b6:38:ee:0e:
d1:00:32:9d:d5:bd:dc:9b:0c:e2:84:6a:f8:fe:fc:
a0:5a:57:7c:2d:4c:cb:d3:ae:66:35:23:05:ac:d6:
48:df:85:5b:fc:6e:76:2d:b1:cb:94:d3:92:64:f5:
13:f7:be:98:36:01:c6:9e:cd:ca:3b:0f:c9:50:45:
f0:93:71:51:e7:b4:9f:59:57:5d:65:88:1c:81:5a:
38:7a:f4:ce:11:79:15:9d:23:64:40:3e:fa:97:5a:
7e:72:a8:74:cd:f8:18:67:40:47:fe:78:c7:3f:b0:
59:29:b5:ec:8c:a0:a4:ef:09:c9:41:22:ff:05:90:
3f:f2:34:68:04:ee:bf:9f:2e:34:0b:20:c8:f2:0c:
b2:93:a4:70:12:41:d8:a3:a7:4d:40:2f:41:68:76:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:35:6D:57:95:99:BA:C1:A6:A8:80:01:20:61:C6:35:66:C7:2A:1D
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:ad:6c:38:0d:d1:96:11:c5:7f:0c:a5:36:f0:0a:cf:6a:
9a:c7:19:c6:bd:19:35:7e:bc:a3:3d:82:10:a7:4a:80:b6:00:
53:39:0e:d4:25:63:31:b5:28:bd:e4:7b:9f:95:44:b4:c0:dd:
be:b0:41:2b:5d:b3:3b:62:2b:6a:7c:01:51:a7:22:6b:e7:29:
7f:00:be:06:62:be:c3:a9:c1:02:29:f7:1c:fc:d5:00:4e:e3:
45:e6:79:c1:02:71:10:22:4d:ea:9d:08:70:db:65:1f:c3:9b:
4e:8d:48:9e:29:bf:ed:9c:b4:50:04:ae:9a:93:34:37:45:64:
99:df:20:bd:b3:18:37:9c:12:60:f9:5b:0b:74:31:3a:2f:97:
9c:6c:0d:b1:3d:fe:91:eb:03:50:a4:bb:de:9c:a3:13:b5:53:
64:5c:08:fb:5c:47:5c:22:23:cd:fc:fb:07:6b:38:95:15:c7:
11:09:c9:b8:5d:8f:af:17:8d:d6:5d:26:19:80:63:dc:da:c8:
5c:de:6c:6d:e3:ac:d7:f3:0f:20:fd:63:3e:04:af:ce:c9:ef:
42:62:f0:d7:09:a4:0d:67:51:ca:c3:53:7c:d8:e8:41:f0:90:
91:cf:93:a7:c4:64:48:1b:63:53:01:6a:cd:b0:cd:f2:a6:3f:
e9:a4:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:22 2025 by rpki-client