Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json)
Hash identifier: ki2Jg+DS6owaNsmsD5fq1jPj+KhEXbHjeI8l3LVk8Gc=
Subject key identifier: A6:40:5B:B0:62:BB:52:66:1C:AD:CD:7C:C5:6E:48:5E:D7:FE:2E:AC
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 0199FCC687311B41B8C3F08D97759EE461B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
Manifest number: 1425
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (hash: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=)
2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: ms+R6Cjlvmbksgi5sHHYo0ezVz01h7Uh1hicWqv2t5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:87:31:1b:41:b8:c3:f0:8d:97:75:9e:e4:61:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=a6405bb062bb52661cadcd7cc56e485ed7fe2eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:bd:b4:92:35:ea:80:f6:12:ec:7f:a2:0b:
cd:5a:8c:fd:67:45:68:5a:ab:22:30:ba:a7:58:00:
a1:29:ca:ee:6b:5d:a0:90:e2:2c:75:97:c8:57:b4:
33:92:28:fc:ab:7a:25:d8:8f:47:08:c9:be:73:2c:
8f:58:9c:7c:e5:d9:bb:a8:1e:39:15:36:2f:16:0b:
8b:d3:ef:c8:12:f6:07:3b:08:c5:09:00:7e:de:50:
d9:b0:aa:77:2e:06:f5:f2:3f:55:78:4c:0c:e1:d6:
aa:4b:f5:e6:ac:7d:bd:1b:2e:aa:c9:64:6b:9b:42:
1c:a4:85:11:05:5d:18:37:9f:48:2c:f7:da:f8:30:
78:86:84:4e:c1:ab:0b:44:f7:ff:4f:17:e6:46:ae:
13:04:59:c9:f5:a4:c7:03:dc:8c:1a:b2:d0:ab:43:
5f:38:82:07:31:ae:d5:81:ef:99:c6:3f:8e:30:0d:
e3:05:82:be:45:5a:c1:79:25:f9:26:9b:64:4e:ab:
ff:cb:c8:b7:75:5d:26:05:69:ae:fd:b3:27:70:ff:
eb:77:31:d0:55:49:a6:d9:83:18:22:1d:5b:1e:1e:
41:3a:5c:96:e2:72:d6:63:59:7d:42:66:7c:84:de:
d0:02:e3:4f:78:0c:3e:a9:42:98:ed:65:23:a9:9f:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:5B:B0:62:BB:52:66:1C:AD:CD:7C:C5:6E:48:5E:D7:FE:2E:AC
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:28:be:3a:e0:5f:8c:50:60:99:60:21:1b:a4:46:00:5a:33:
ad:92:ca:33:71:00:7a:a7:96:c0:a6:0e:11:a8:53:93:c2:8f:
96:cd:c3:e9:39:9c:82:8a:51:ed:45:e2:ce:6a:f2:98:96:74:
90:19:a5:83:e9:3c:1d:fc:f4:0f:5f:f5:65:5c:f5:40:1c:a5:
d8:64:5f:27:cd:9d:ba:1c:ff:77:da:0e:a9:3a:00:1f:16:10:
b3:77:21:9e:31:86:57:54:40:6d:38:03:0e:3b:1d:c4:24:c1:
a3:35:07:ad:a0:f5:ea:70:2c:22:03:e5:ea:d5:fe:19:e8:f3:
cc:a6:1d:c1:a7:3c:4c:98:8f:d6:f7:60:c6:88:46:c3:6b:2f:
af:95:7b:29:94:d8:8e:97:a0:12:77:49:64:6e:d8:f2:7b:b2:
6a:9b:10:18:d3:64:0d:f0:05:d7:c8:8f:88:53:46:2e:a5:ff:
31:e7:77:9b:c8:b1:8d:63:ee:5a:3f:9c:a0:ec:33:97:7c:a2:
ba:4f:7f:ea:de:0c:eb:d1:52:0a:6f:0c:73:d7:ee:90:ea:16:
b0:de:74:92:c3:1f:0c:ee:84:98:03:8a:83:39:1e:ac:54:c7:
f5:56:a9:a7:28:6a:a7:78:3e:24:e9:58:a8:5d:45:d0:fa:6a:
18:9f:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:56 2025 by rpki-client