Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File: g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier: foXs87pj71ibxoKWlmpRAQ64E6BXIWPRS2Lm0omRH7E=
Subject key identifier: 06:81:9C:15:FE:C3:30:1D:EB:D0:B3:7E:32:B3:C1:B3:89:51:B8:FC
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 0199FC218E4A04CB9922D09FCF77EC1FDF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: eggvziqBBxjmdX3UkF+5BMfBecHNMfT6lpOHzBZ4Ok4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8e:4a:04:cb:99:22:d0:9f:cf:77:ec:1f:df:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=06819c15fec3301debd0b37e32b3c1b38951b8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:25:70:dd:b1:27:f3:70:5b:6d:e4:61:b4:
91:01:97:89:bd:e7:8e:79:2f:23:2f:ee:96:84:93:
70:a4:32:fe:f3:a8:c7:9b:56:7c:ba:4e:e0:1a:67:
c8:6c:f9:67:97:70:b8:40:81:ba:ef:bd:1e:d4:a5:
c5:6a:be:f3:14:11:d8:0f:f1:0d:76:51:5f:bc:1f:
8b:95:1c:23:cf:45:1d:b7:c9:e1:b9:bd:49:1c:0c:
f3:f3:d1:47:49:b8:63:1c:a5:07:aa:7f:16:b4:af:
54:71:22:4b:2a:83:8c:21:9d:29:44:23:cb:52:49:
65:fa:74:d7:08:f8:fd:00:87:e0:20:22:65:ba:ca:
26:e5:ea:7c:db:3e:0f:e2:05:c6:72:be:a3:44:f1:
c3:3b:8b:ab:a3:46:ac:0c:b8:15:5d:48:20:0b:bc:
79:2f:69:59:1d:10:fa:cd:32:d7:36:84:9d:84:7b:
e2:f1:c3:ce:d0:fe:d8:ac:35:92:89:61:0c:2a:71:
3f:9c:c1:d7:03:ab:5e:98:a0:11:30:fe:c3:b5:d2:
bf:74:dd:7f:18:97:50:fa:45:24:cd:bf:a9:18:4d:
19:34:5a:6f:90:1a:a5:b4:94:20:14:fa:f3:6a:23:
99:58:9c:12:48:c0:f1:99:a2:17:23:75:86:23:8d:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:81:9C:15:FE:C3:30:1D:EB:D0:B3:7E:32:B3:C1:B3:89:51:B8:FC
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:22:80:32:7b:f6:98:9a:73:f9:32:0b:e2:16:72:8b:84:d3:
7f:d3:07:a9:a5:23:e0:01:b5:8d:fe:d1:e0:c5:9c:18:76:6f:
dc:bc:78:59:f3:6b:3d:9c:8a:80:4a:11:ac:81:fb:3c:e8:6c:
46:cc:be:5d:f1:ca:5f:f1:26:4c:a9:6b:c6:1d:12:4b:f3:58:
b5:a8:34:fd:a1:ef:c3:be:c0:57:0c:f7:23:53:94:9b:a6:b8:
12:ee:15:87:39:5c:c9:13:6b:1a:5f:b0:85:20:dd:04:42:57:
71:02:c7:78:52:8c:2c:f8:f0:5b:9e:9c:f1:ec:eb:f5:da:89:
78:b9:c0:db:a9:ef:c5:6d:f8:de:c5:35:26:1b:f7:a0:3d:6c:
5a:9b:45:67:77:4c:3b:08:b8:dd:5f:29:e3:ab:ad:0b:85:13:
67:df:02:a6:9d:5e:5e:f5:56:25:ff:f5:09:c8:c7:2e:6c:2e:
a1:8f:de:c8:f1:a5:9e:78:d5:1a:fa:f2:4e:0d:65:7a:a5:eb:
ee:84:ee:0f:be:09:2a:b0:ac:ca:21:36:9b:88:82:66:2b:7d:
8c:1d:99:c6:e5:a3:32:e0:4d:df:78:d2:60:56:a1:50:84:51:
2d:01:b6:e3:ab:0f:0d:1e:e8:14:88:d3:d7:27:17:a1:1c:bd:
8d:34:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:11 2025 by rpki-client