Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: bZZE9/DGeVeObRUmfMep78WvLSQ1T2zggQ0NB1dYOS8=
Subject key identifier: 8B:0B:46:86:9D:93:0D:47:97:2F:6B:93:95:82:BA:58:AF:20:0B:D5
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 0199FC8FA15287ECD192F9BA5C79E568C435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0EF1
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: oHDLDsYPKFFRFdut8Q1ZqheT6usi/QMfPcAtZKbzQh0=)
3: nSZCrrugGYgpV2kpSk3jqr2LzfM.roa (hash: dkF/IyzVuAY00yNMBcnlRNr+PlCabKVgpyDEF61J7y4=)
4: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a1:52:87:ec:d1:92:f9:ba:5c:79:e5:68:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=8b0b46869d930d47972f6b939582ba58af200bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:25:03:91:1d:61:0d:ec:af:5b:4e:a7:d4:
ff:a8:12:cd:5d:0a:7a:36:cb:ef:fd:8f:03:7c:64:
7e:02:5e:65:78:d7:7c:c1:cf:a1:34:9e:e0:26:cd:
5b:f5:c0:9c:dc:54:3d:2d:55:35:e5:52:1b:1a:8e:
c8:1e:c9:ae:61:c6:2c:4f:9e:44:49:16:da:34:5b:
3a:85:db:f0:79:2c:84:39:57:ae:3f:7e:6f:e2:20:
9a:de:df:4b:a3:73:30:86:38:7c:4e:53:c6:bb:56:
9e:db:45:e0:95:82:ab:13:74:92:0f:45:80:e8:df:
7a:1b:a1:6c:30:74:af:9b:6d:db:6c:36:c3:7b:47:
b3:d8:b6:8f:67:08:e2:ee:fd:51:0c:61:b1:a5:a6:
89:1f:49:79:ac:3d:a7:3e:c5:a4:fd:ad:05:4f:90:
19:71:62:c9:c1:01:25:9a:fc:e2:24:d2:04:f1:aa:
5f:bb:7a:51:8d:a3:a6:52:7f:16:80:fa:05:95:e6:
3e:37:fd:13:7f:f8:f7:f4:e4:f9:ad:49:f3:d2:e8:
ee:13:93:28:84:7f:8c:8b:9d:0d:36:df:a5:38:d9:
ea:31:df:f9:7d:8c:be:ad:9c:0f:6d:68:e4:89:59:
de:3b:a3:4f:92:ec:8a:fb:74:d1:6c:b8:32:d5:f6:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:46:86:9D:93:0D:47:97:2F:6B:93:95:82:BA:58:AF:20:0B:D5
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:81:e3:67:da:0f:10:4e:72:b9:2f:ac:5d:d1:46:eb:2a:da:
57:da:f0:77:97:1f:c9:79:04:93:da:74:04:3e:8d:04:74:e3:
76:2b:58:db:cc:49:c8:d0:ac:98:35:ac:56:9e:b4:2a:da:08:
a5:3a:68:0b:be:96:d2:1d:fa:7f:d8:c2:ea:a5:dc:83:5b:e0:
3f:c1:ce:36:4f:f0:87:79:b2:75:ef:fa:e3:68:d7:4e:25:b2:
b2:b8:1c:6a:76:d3:f7:85:91:50:32:2b:52:6d:02:d7:53:21:
e0:35:2a:74:e5:ff:56:be:f7:ad:84:2b:17:4d:5d:73:1c:b9:
b3:54:c7:d8:41:0c:da:09:aa:66:45:f5:6c:08:d2:47:52:07:
de:fb:3b:d8:5c:63:66:96:db:a2:c2:b5:f7:5c:ec:20:0c:93:
b6:c0:bb:4f:9d:07:39:9d:46:43:ce:5a:6e:11:e4:a2:6c:51:
39:47:8d:91:72:db:26:bf:a3:65:7c:52:38:a8:21:15:3c:42:
db:aa:e5:59:82:ca:b2:04:48:90:4b:90:d1:73:45:94:1b:7e:
06:39:db:aa:13:62:32:75:71:01:cf:e2:22:65:1f:8d:c1:34:
4b:36:73:1d:79:7f:61:2c:c3:65:ac:a2:f5:bc:b3:90:76:8e:
02:28:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:54 2025 by rpki-client