
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier: 3CIN1Sn7P6qt5mw5pUd3AtLVnaBgkY4RBkH0GWj8EWE=
Subject key identifier: AD:3B:40:A9:C4:8A:9C:65:90:6C:DB:86:68:56:C7:9A:A2:F3:B9:98
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 0199FC58AB78C04C058EE05BD50EE300A991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number: 1215
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: cA3T/Tvuvo8x1AnY/5ZOFxxR7Ykupcyfh4LBof62aRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ab:78:c0:4c:05:8e:e0:5b:d5:0e:e3:00:a9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=ad3b40a9c48a9c65906cdb866856c79aa2f3b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:5f:49:f9:c6:6f:2d:21:bd:52:21:d2:4e:
aa:72:6f:03:a6:25:01:86:fb:c7:bb:84:3f:62:12:
e5:63:7c:46:41:e0:23:f8:05:cb:ec:29:26:e8:07:
30:f7:51:7a:80:74:d1:f6:9c:54:c9:b7:c2:ba:a5:
6b:af:ff:69:05:ec:d9:f5:d2:b5:c1:dc:72:50:8e:
7b:dc:af:69:4b:e3:bd:e2:8b:f5:01:c8:c7:cb:2e:
b7:7a:dc:a3:e6:ae:a4:7c:77:07:f1:c8:e5:22:29:
ba:c2:8c:b0:2e:06:60:ee:93:d4:be:b1:64:e9:c0:
e4:c4:a1:5a:3f:02:7e:f3:68:5b:94:b5:3f:fd:32:
15:d8:04:79:50:96:5b:56:a2:81:69:b1:76:85:60:
67:96:1a:cc:40:c7:56:58:31:0f:cf:7d:e3:2a:cf:
eb:4b:6d:36:cb:e6:17:b9:ba:06:80:ed:e3:42:a1:
1c:7a:b0:d0:4b:b0:3a:ad:0a:ed:13:0d:e0:5d:7e:
b8:50:20:d3:83:45:17:ce:b5:bd:fe:c2:d4:5b:6e:
43:97:0b:96:1e:14:14:01:0f:9b:c1:c3:e9:72:8b:
9f:5b:09:0c:25:a3:f0:fe:38:4e:9b:39:73:57:df:
f1:c3:25:5d:8b:de:a9:55:63:39:6d:89:2e:cb:ae:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:40:A9:C4:8A:9C:65:90:6C:DB:86:68:56:C7:9A:A2:F3:B9:98
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:68:4a:17:bf:7d:c9:7d:90:37:7d:eb:a2:83:aa:c8:8a:e8:
bd:76:d9:3d:ca:5b:49:82:c5:88:f6:c3:97:9a:69:1f:5a:1e:
9d:ab:fd:38:f8:78:62:ea:9d:b1:e9:92:fc:01:fb:61:18:54:
54:67:00:7f:41:af:d3:78:89:fb:e7:0d:93:aa:11:64:18:f6:
fd:dc:40:52:26:cf:02:63:69:a9:ab:83:ad:61:dc:46:9a:cf:
40:79:e3:37:72:bf:7d:d3:c0:d1:1f:45:5b:99:eb:75:eb:0a:
8f:59:b7:23:a1:4a:14:a4:7e:f0:49:78:38:6e:2a:ce:0c:c3:
56:09:45:be:a8:eb:0d:0d:4c:cd:17:f3:d1:31:b3:c9:0a:4f:
17:91:b0:24:5e:cd:2b:61:1d:1f:07:4f:7b:2b:ca:6b:46:ab:
56:52:9a:8b:a1:ff:ff:78:8a:74:d5:b4:8c:5d:1e:21:1a:d7:
75:22:59:e9:bb:af:6b:26:c8:c7:77:87:4c:0e:65:85:25:88:
4b:8c:1b:91:e7:60:d9:7d:a7:0a:89:90:3a:a8:2a:7e:6c:fb:
56:5d:03:24:b1:21:7b:5e:ed:2a:7f:d0:d4:33:be:11:67:ad:
b2:43:90:e5:2c:ba:bf:b2:92:c0:a9:23:b2:ef:f0:1b:8d:c1:
86:4f:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:12 2025 by rpki-client