
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File: gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier: 8nUjDh3b1AGA5boqL9V5qVTRmi/m5ZmFXKEwDb7Vjak=
Subject key identifier: 7D:0A:ED:40:C5:D5:D7:C2:8E:08:41:D4:5D:C8:A3:D6:C2:6A:9B:02
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 0199FCFD96C106E9209321A46D3CDE3DB704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: FG-bEioa4civ6jvoSnaUtHZPEQE.roa (hash: w4e7tpxeaBQHMoRYqhi0o1qJLopKx8fwD7s6iGDvqgY=)
2: aGlvUdVJOWbqaat4vglrkQH1tNo.roa (hash: svvIGknsbQhU6YBIsZkBO7bjTdjQ0GNK1yuIVKiea6E=)
3: eZ8arxnGDWk7xkVHJ1bRXWZ355M.roa (hash: AeIoI4f85DUeWbFvZ4SxFOX1IxHcOJjIFceKESNKiJo=)
4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: fP1/L5AMoymNAr1y/Y2fmJfGdnCYWrQly/ITj+9Rao0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:96:c1:06:e9:20:93:21:a4:6d:3c:de:3d:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=7d0aed40c5d5d7c28e0841d45dc8a3d6c26a9b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:fc:a1:3a:47:1f:50:13:c2:96:52:81:fe:
de:bc:40:7f:4a:34:96:b5:33:7a:2f:aa:e3:f8:f2:
d0:7e:da:44:cb:85:d8:d0:f7:b0:48:b7:6d:e1:14:
df:4a:20:e4:85:ac:1e:bb:0f:af:3b:5e:92:ee:6c:
86:91:5e:6f:a6:39:a6:ba:83:29:ec:23:90:b2:5a:
ca:2b:86:72:4d:bc:86:ed:d3:6e:2d:d6:17:b1:84:
43:c8:a3:ff:ed:65:5e:56:0e:3a:dc:c3:65:54:9b:
6d:4b:a2:55:af:c3:f1:d7:5d:1e:60:64:ff:d3:ca:
d8:5d:50:41:3e:ac:e9:e7:2b:cb:a4:5e:9b:b9:c6:
41:48:9c:ca:52:a1:9c:af:89:03:77:7d:ec:72:48:
2e:df:5b:59:da:04:7b:2b:d1:0a:ae:57:0b:5b:c2:
68:c4:46:97:9c:db:d0:4e:1c:0a:b4:a8:5b:b4:80:
50:de:f9:bd:2b:02:4d:ca:29:66:b0:05:76:67:40:
fe:0c:6c:60:8c:55:20:00:74:38:15:37:da:67:cf:
ab:cd:ec:77:5c:f1:bc:f7:5a:5c:c7:a4:a1:e0:9d:
71:85:a0:47:e3:d9:ac:c4:2d:97:70:48:68:ba:fa:
f5:d2:40:98:97:8b:c1:7f:c7:f1:ad:48:be:6b:2b:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:ED:40:C5:D5:D7:C2:8E:08:41:D4:5D:C8:A3:D6:C2:6A:9B:02
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:16:75:5c:35:55:be:c0:99:b3:49:18:4b:08:23:19:09:93:
ed:04:81:b8:1b:5d:99:98:8e:04:c5:16:ba:6e:d9:70:d8:2b:
04:18:6c:f2:26:ca:0b:1f:10:c2:3b:c8:56:30:47:ae:a3:d0:
56:b6:bd:67:a3:7c:8b:84:15:7a:81:70:04:b1:b4:1d:86:77:
12:f1:00:76:04:e9:fc:e0:03:5a:07:31:84:20:08:29:98:a7:
5b:93:5a:5d:18:b1:9a:bb:27:2d:4f:f5:6d:6d:9c:32:22:96:
1f:2f:a4:5f:18:f1:2d:a2:41:7f:9a:f4:f4:17:25:44:54:b6:
0d:61:e6:32:f1:7a:33:24:77:2f:df:7c:36:f1:39:92:8d:1a:
ac:6f:2e:b0:83:91:40:80:b9:6d:76:1c:90:69:50:11:e9:4f:
ff:14:36:3c:a6:f0:30:33:b9:5a:e1:00:e4:05:f5:37:da:82:
b1:fa:67:a0:de:49:26:ad:0c:78:ba:06:33:bd:62:52:53:30:
19:68:9b:d5:0a:6f:68:9e:c3:ff:d2:5a:89:d5:95:2e:34:ef:
ef:3d:97:8b:35:b3:55:74:64:c2:2d:63:36:9a:1f:39:61:bc:
05:dd:67:ad:c9:0a:0d:f3:65:fa:55:40:db:b8:9e:14:47:70:
33:72:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:56 2025 by rpki-client