Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: f5E6Tdgwe7hxn/mnNJZp+9jI6dmm2d+y6uX/MS6IgU8=
Subject key identifier: 04:9F:2A:6F:52:CE:E8:78:27:1F:72:0A:3A:55:B5:12:3A:5B:50:A1
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 0199FC8F2CA1816B2DC3B779EEBED8AA46A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0AF9
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: LzSi+cdG0v6CdBQAdAjYI4mskdu0s5yu4KpHLcNtFmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:a1:81:6b:2d:c3:b7:79:ee:be:d8:aa:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=049f2a6f52cee878271f720a3a55b5123a5b50a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:1f:79:eb:ee:22:35:93:42:53:c8:82:7c:
f0:60:41:7a:32:96:e3:7f:82:56:dd:5f:72:ed:47:
9b:5d:f5:14:bb:86:3b:38:4e:1b:32:90:ca:99:60:
d2:80:9c:70:13:eb:e5:63:76:18:f8:42:e7:8e:b9:
0c:bc:ba:f5:ab:99:24:1b:a7:0a:28:ed:77:25:34:
3c:4c:0b:b9:b5:42:11:6b:1d:5d:e1:43:6a:e8:50:
c2:aa:4b:ce:07:fa:7c:ac:92:37:12:68:92:7c:03:
bb:0c:c7:27:f0:89:0e:ab:eb:54:a1:7a:56:5c:16:
ab:d3:6c:42:2e:c9:9f:88:c3:96:72:13:08:dd:66:
8e:2e:bd:da:20:11:48:d9:af:89:d5:ae:f0:bb:4f:
05:6a:2c:eb:41:2c:f8:f2:d0:c8:2b:f1:cd:f4:55:
4e:0d:10:0f:f1:51:1b:35:25:45:d3:5d:92:cc:c6:
45:85:fa:96:ca:8a:fa:fe:19:f3:d9:5a:31:4a:45:
d5:f4:b1:37:d9:0c:75:62:e2:74:79:00:f8:d5:5c:
d3:82:6b:ff:d3:da:ca:5d:29:3e:98:89:2a:f6:59:
78:1e:09:47:5f:6f:0b:d7:eb:be:1a:5f:6e:c0:a0:
19:29:1d:93:07:38:a7:b3:52:29:67:78:6b:b8:8f:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9F:2A:6F:52:CE:E8:78:27:1F:72:0A:3A:55:B5:12:3A:5B:50:A1
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:70:80:a6:65:d4:5d:25:9c:46:0b:ab:43:1b:1e:f9:c4:
f0:fe:34:ca:1c:df:47:01:11:5f:4e:1c:c2:a2:c1:fc:f1:1f:
bc:24:9e:3c:ea:96:ce:4b:d2:5b:5a:19:8a:5a:c3:9b:e1:a6:
15:eb:22:b5:1c:19:e9:fa:9c:c7:57:e2:64:b5:5d:23:6b:30:
1f:a0:5c:b1:5d:34:54:6a:5c:96:bc:7e:44:3f:6b:57:e2:38:
a9:39:0f:c5:7c:6d:0a:a5:c2:32:97:07:4c:a2:75:c1:b0:a9:
e2:8d:b7:5b:4c:f7:47:5e:92:a0:77:15:4a:ab:7a:d7:62:51:
ad:d0:08:93:86:84:15:8c:e8:56:ea:ad:53:95:be:63:e0:99:
42:25:7c:19:c6:5a:5d:8a:70:1a:ee:23:0e:07:11:6e:21:7c:
d0:9d:32:42:0e:4d:63:0d:0a:cb:69:96:f3:ff:ba:47:51:6f:
cf:1c:43:14:8d:a4:ab:7b:64:77:e4:87:df:13:ba:f8:44:0f:
98:7f:b4:9a:bb:2d:45:0e:67:01:81:9a:15:ee:a5:c7:98:db:
cc:04:9f:d1:f1:3f:77:24:42:9e:b2:e6:97:37:92:62:b3:9f:
83:65:a2:85:79:1a:04:12:10:d2:cc:81:9a:d6:97:08:f8:52:
72:0d:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:33 2025 by rpki-client