Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: jqyUhbVLqtH/hpPCNADXsDDaakXWHs1oG26qgCTMA4s=
Subject key identifier: 91:2C:FC:BB:FB:F2:9D:39:22:B6:39:87:6D:98:82:C1:FB:D0:2F:32
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 0199FEB49A3969A9D9E307D6E83C77E273E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 1429
Signing time: Sun 19 Oct 2025 23:01:12 +0000
Manifest this update: Sun 19 Oct 2025 23:01:12 +0000
Manifest next update: Mon 20 Oct 2025 23:01:12 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: 7/m/78Xp5E5MzfnkToZXBEBW5FZLg/r6wJPwnw/LRSY=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9a:39:69:a9:d9:e3:07:d6:e8:3c:77:e2:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Oct 19 23:01:12 2025 GMT
Not After : Oct 20 23:01:12 2025 GMT
Subject: CN=912cfcbbfbf29d3922b639876d9882c1fbd02f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:53:2a:81:01:f1:95:e3:da:c7:ec:77:5d:b5:
b6:a6:32:ae:ee:13:d9:4a:e5:23:f7:a4:bb:93:d2:
fd:03:56:48:d2:85:e9:d5:f0:f7:c1:3c:97:77:cc:
e4:7b:f5:b7:e3:52:0e:5c:c8:87:0c:4f:c5:b0:19:
58:23:31:16:c9:93:d6:af:84:10:d8:a9:1d:18:9f:
61:3d:bd:7d:04:d0:a0:c7:9e:f5:1d:77:29:80:7a:
e2:b1:01:b1:a3:96:2a:b9:50:b2:22:9c:1a:c9:20:
74:b0:69:69:ef:bf:91:a5:4f:a3:5a:d9:a1:8e:eb:
6e:f6:ff:52:c2:6a:e8:ed:18:78:25:d9:86:fe:ad:
7e:4a:a4:6f:19:86:0e:6e:0f:a3:6a:ac:4f:24:4e:
15:04:e9:aa:66:54:58:32:86:a2:64:3b:24:ef:97:
a4:72:c3:ba:be:9b:bf:43:ca:88:f5:cc:22:24:f5:
d2:92:19:7f:4f:bd:89:75:52:ec:e8:47:cc:09:36:
34:00:87:2a:ed:07:f1:67:6c:1b:5a:cc:ae:ce:a4:
6d:8c:8b:dd:57:0b:ce:bc:20:a7:3f:81:3f:2e:53:
a2:ed:52:97:9c:7b:31:ce:4c:61:04:82:4c:45:50:
68:b3:e6:ee:e7:45:10:f5:2c:53:da:ec:35:16:03:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:FC:BB:FB:F2:9D:39:22:B6:39:87:6D:98:82:C1:FB:D0:2F:32
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2d:3e:a8:a0:64:01:90:a2:c5:92:b9:9a:f9:ac:f4:ca:dc:
d1:a0:f7:4f:2e:49:f3:83:28:34:75:20:ed:30:e6:3f:5c:2b:
85:27:56:9a:ec:08:27:07:03:89:c7:f0:41:1e:cf:ac:41:a7:
b9:6c:e5:6a:51:93:2d:1a:26:ab:3c:85:e3:e8:d5:57:bb:7b:
1c:c3:4c:17:b3:d9:d8:47:d8:3c:ad:38:6b:95:9b:d6:17:19:
59:87:31:44:fb:d6:c4:c3:89:a8:f9:68:d3:6d:79:0d:0b:46:
ae:dc:03:c2:e9:17:4b:67:57:b0:0d:f6:24:49:f2:b1:90:10:
30:14:38:8d:a4:21:80:5f:12:e7:2a:88:97:d5:8b:3d:7f:21:
b2:59:52:dc:31:62:ca:a9:13:d9:ea:b5:14:37:5e:c5:ba:58:
f0:26:de:64:08:ae:f4:ec:00:ed:0c:28:f3:70:aa:70:b1:0d:
24:48:85:f0:be:b8:13:cf:21:8c:2c:32:34:e7:9b:9a:61:00:
8b:98:d0:25:a0:61:15:17:53:ea:70:6a:7f:f4:c9:5d:63:35:
6c:8c:4e:09:34:63:51:0c:0b:52:9b:55:4e:5b:09:a3:7b:08:
3a:99:de:17:45:d9:d9:d9:2d:19:f8:48:32:46:07:5b:bc:dc:
20:52:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:15 2025 by rpki-client