Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: pCDvZEuLWgVC6F22WfR5+7ghF3fxGygcFkt6gkllSzQ=
Subject key identifier: 34:4A:C1:F0:CB:6B:F8:B1:4C:F6:09:51:5E:F5:C3:05:2F:C2:3C:64
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0199FEEB7F40CF7487EBB5BDE446C74BC4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 00:01:10 +0000
Manifest this update: Mon 20 Oct 2025 00:01:10 +0000
Manifest next update: Tue 21 Oct 2025 00:01:10 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: Uarm4IlLFkL0rbRaGu9O1MmZY3i0KDT/l0b9Ce0PW5M=)
4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:7f:40:cf:74:87:eb:b5:bd:e4:46:c7:4b:c4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Oct 20 00:01:10 2025 GMT
Not After : Oct 21 00:01:10 2025 GMT
Subject: CN=344ac1f0cb6bf8b14cf609515ef5c3052fc23c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:3b:6e:74:01:e7:1a:f9:9b:5b:54:d2:4c:
81:1c:26:29:ec:d1:ae:85:79:a1:a4:4b:ea:94:6f:
d1:2f:2a:58:57:ae:6d:50:b9:eb:d4:dd:b2:3e:20:
4e:7b:84:9f:e5:d7:5f:e3:ea:0e:a2:77:32:8e:6a:
04:e3:62:a2:d8:76:74:d9:53:a7:08:2c:eb:da:ea:
da:31:87:22:30:ea:2b:b9:7d:4c:7d:a5:dd:2f:33:
d7:5c:de:54:f4:e9:67:9f:6f:93:b3:76:3f:62:00:
02:af:cd:a3:12:6d:6c:55:56:d8:f9:a9:ce:5d:45:
53:c6:84:c9:08:49:3b:65:44:94:14:6e:aa:d8:6a:
ab:81:94:90:52:17:ac:ed:3e:16:28:55:39:00:c9:
55:2c:2c:ef:10:0b:26:40:ec:db:b3:97:4d:f3:ee:
8e:39:78:ac:47:cb:2b:e0:40:dd:05:b1:c9:aa:7e:
d3:4a:bf:0f:43:77:cb:32:65:36:0c:f0:19:b6:09:
18:9d:44:2a:d7:1b:c2:16:e3:cf:91:dc:ce:d0:5c:
b5:7d:aa:42:d6:c1:4b:6c:11:f4:15:bc:87:8c:a5:
c6:7b:0f:93:06:ab:41:cc:7d:7a:91:68:5c:cc:c8:
29:50:a8:f0:a9:87:c4:48:91:68:d6:e1:b4:e3:bd:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4A:C1:F0:CB:6B:F8:B1:4C:F6:09:51:5E:F5:C3:05:2F:C2:3C:64
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:62:88:c4:4f:84:4d:b7:cc:7b:4d:f5:9b:89:80:7f:00:
0b:0f:58:f3:af:ca:30:6c:b7:71:ef:08:b2:03:af:1b:1a:a6:
2d:47:6d:97:e9:ed:06:10:15:c2:9d:5c:95:00:16:21:c8:68:
c9:4c:4d:fa:ea:49:71:40:92:59:cd:6c:8f:36:6b:a0:65:a9:
cb:63:27:77:45:49:91:f0:a6:15:e9:c4:6b:52:05:e3:f8:17:
38:37:56:ac:c1:28:3c:11:cd:e2:98:32:a3:89:ce:6a:9a:f7:
21:2a:a3:65:81:6f:86:0f:ab:8a:5d:34:8a:c1:00:ea:51:12:
4b:38:ce:d8:5f:32:20:c6:c5:e6:e0:ad:9d:7e:0f:9d:ea:a3:
99:02:81:a1:6b:69:49:24:f5:fd:16:8b:60:58:5a:3b:fc:d6:
e8:73:f8:12:b5:44:17:97:1e:a3:2c:78:31:56:6e:bd:bc:d1:
0c:3d:2c:30:3b:34:ab:a7:fc:ec:48:dd:1e:55:20:c1:fd:82:
20:ec:b8:95:10:d1:f2:b7:6e:65:b1:bf:99:c1:6b:14:f8:33:
89:a9:1d:7c:27:11:fc:43:e8:57:b1:ba:22:5b:47:e2:8c:d9:
44:ff:a9:4d:2c:ab:13:fb:2c:68:c6:03:30:c2:74:0a:e9:41:
8d:5c:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:47 2025 by rpki-client