Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: Sb+Eut9J0hEXF/kPwofnd+H0VlxTmpRPP6hKvPH+mSc=
Subject key identifier: EE:E8:65:2E:E8:11:00:1C:C7:3B:04:E1:29:74:C8:D0:1D:19:55:A2
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 0199FD348B282FD3FEA280777E1D75290C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0E13
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: HQawOXzQZH+737i/qbo5dmTeYo4HfOGg/HTAm5L3ej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8b:28:2f:d3:fe:a2:80:77:7e:1d:75:29:0c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=eee8652ee811001cc73b04e12974c8d01d1955a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:1f:9c:78:85:f8:b9:ee:f4:1c:f3:1f:e8:
6e:80:dd:d5:6d:a7:eb:b2:d2:dd:74:b4:66:b9:82:
8d:31:45:72:b0:a9:aa:ce:c4:c0:5e:55:02:13:ce:
bb:cb:ed:5d:b9:48:5a:6f:21:8a:88:b5:f6:36:0d:
3b:59:bf:2e:7c:3f:27:70:34:41:e3:92:4c:33:d4:
ce:8f:83:ce:6f:bb:86:7a:1c:9f:e6:e2:e2:82:5c:
30:d3:e1:6c:85:0c:b0:60:85:b0:3c:32:c6:60:1c:
eb:2d:d7:c0:34:1f:78:9b:57:9a:9a:b2:82:59:24:
a2:f9:90:55:68:61:1b:16:9e:80:98:47:11:a2:0d:
5f:3c:0a:fa:01:45:1a:79:14:fa:56:c5:33:01:91:
e4:ad:c0:9f:b5:fd:b3:ee:02:e1:c4:17:ba:25:97:
8d:45:b0:6c:e0:d3:8e:1c:4c:78:45:31:d1:b9:66:
56:7b:e7:3e:61:90:35:03:c3:7d:77:af:85:cd:b6:
dc:9b:94:a5:35:5c:80:99:fe:90:f5:cc:81:ba:5b:
8a:e7:19:52:88:d5:9a:08:ac:73:76:c1:52:77:5c:
67:96:6e:e5:2a:2b:04:5f:44:a3:1b:52:67:82:1a:
1b:40:0e:5e:49:57:9b:91:b2:5e:db:b4:d5:25:b1:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:65:2E:E8:11:00:1C:C7:3B:04:E1:29:74:C8:D0:1D:19:55:A2
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:06:8b:a0:8b:98:15:45:b2:1b:04:10:a5:d5:6b:cf:b3:aa:
23:34:21:06:a2:99:88:16:a9:8f:8d:54:6c:a8:0e:8a:f2:8e:
d8:43:c5:34:5f:ad:c6:00:07:ec:3b:13:c9:28:96:88:f4:d5:
05:11:1e:3d:9b:72:e0:1b:da:66:0a:42:ac:9b:71:f1:11:d0:
c9:18:68:3c:74:ac:bd:c5:e4:21:e3:11:8c:62:91:45:b9:a6:
07:2f:5c:2b:24:af:bb:d7:c3:5a:b9:c3:23:73:2d:01:d8:48:
5a:23:0b:e6:c5:8c:56:60:d9:01:2b:1c:22:64:81:d2:17:a1:
e0:f0:ec:3a:e0:56:a8:2a:0b:da:78:22:1a:04:88:f1:4d:5f:
57:b0:bc:98:b7:21:30:9c:ea:81:cd:81:2c:a2:87:42:8a:86:
f7:fc:04:d6:e7:3f:86:14:bf:dc:80:bd:ef:8b:05:05:13:22:
e1:8f:7f:9a:63:43:9d:96:95:a7:41:09:32:59:c7:a0:c4:f8:
47:db:d0:d6:1c:1d:e0:c9:2c:a5:3f:98:a0:32:91:50:01:51:
57:dc:8e:c1:96:81:67:12:b7:0d:4f:a9:e0:8e:76:11:ec:19:
63:a5:51:cd:ac:5d:26:a3:b8:fe:20:dc:0c:8d:ac:c5:5c:8b:
4d:b8:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:05 2025 by rpki-client