Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: SV73BbCQzCwsRPIaQFI7pq+HJj4nYZiuAfq9aF+2GL0=
Subject key identifier: 14:B1:8E:5F:59:71:22:20:FA:45:B9:BE:6C:94:19:ED:CC:D2:BF:37
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 0199FBEB81C7171216CCED481ED4A3196BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 15B9
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: xHe+XBUn1EToNsmS2T/1W2vEdGbfXR4fbu1fhxC4xsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:81:c7:17:12:16:cc:ed:48:1e:d4:a3:19:6b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=14b18e5f59712220fa45b9be6c9419edccd2bf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:da:20:01:36:c9:a1:47:71:5a:b8:55:9a:
6b:b5:cc:0c:58:a2:31:30:08:7d:ad:7a:40:d9:7d:
62:aa:3c:23:24:1b:e6:90:94:e4:f2:61:19:ce:62:
83:64:31:2e:dc:35:68:f6:ae:0d:22:76:6c:b4:0f:
6f:25:83:9f:48:37:a2:4b:44:c8:59:6a:bb:97:5a:
4a:11:d5:15:9a:b0:dd:f0:dc:a6:b6:09:cf:01:71:
91:0f:7e:64:48:7f:04:68:af:54:62:c2:45:81:d5:
30:fe:d0:88:6b:9b:4d:5d:05:18:90:56:d6:e0:3f:
00:d1:c3:9e:13:2c:1e:c3:80:44:12:ca:3c:3a:b4:
2b:fa:aa:1b:7c:cc:d6:d4:de:00:36:f9:c7:28:38:
ea:1d:9e:10:bc:58:6e:b8:a6:11:61:a7:f4:27:51:
35:00:b3:61:f1:b5:30:a3:a4:88:17:ca:f6:38:68:
f8:ee:a1:4e:14:f7:65:4a:37:de:d2:58:8e:c4:fc:
1a:a3:68:32:34:34:f9:c0:f7:a5:e5:a1:8b:a4:f6:
11:df:69:e0:3b:7f:22:b6:ad:4c:70:96:4d:6e:40:
69:42:0e:a7:7d:a5:ba:9e:ed:d8:3f:ef:42:7f:66:
57:7e:62:0f:25:5c:25:a1:d8:19:ee:5d:a9:96:01:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:8E:5F:59:71:22:20:FA:45:B9:BE:6C:94:19:ED:CC:D2:BF:37
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:bf:db:a3:b2:28:c9:7e:ea:e0:fb:26:2c:9c:cc:c9:30:c5:
0a:8a:68:0f:a1:08:5e:17:3a:5c:1a:84:fb:a7:28:48:cc:70:
7b:8d:f9:7f:f4:43:b9:f5:2a:16:b1:de:bb:95:f7:c9:2e:1d:
38:5b:38:f3:7e:b1:d0:41:4b:06:dd:3c:98:57:f7:ef:c5:a5:
90:d2:83:a0:67:54:7e:52:ca:02:36:41:a7:0f:f6:85:c5:a1:
e2:f0:4d:d7:24:0a:16:2f:81:b7:21:08:3b:ef:3b:8d:44:cd:
c8:7f:e6:29:83:f1:36:2c:96:74:6d:79:ad:15:bf:43:88:32:
63:44:0c:76:23:39:96:6b:43:97:1d:92:55:77:86:e5:14:bd:
41:a2:9c:59:ca:4d:39:a3:ca:72:23:fe:0a:cf:b9:ed:af:53:
23:ce:9f:67:96:27:35:59:cb:39:65:bc:ca:6a:7e:51:ba:c4:
d8:d8:b3:5e:89:ba:04:90:67:d7:43:3c:52:7e:06:a4:77:69:
db:54:a2:12:8d:68:f6:62:c9:e7:10:fc:53:78:38:5c:fa:d0:
d9:13:91:55:ea:36:30:cf:b2:c8:25:47:9f:fb:f9:c4:b1:27:
de:2b:6b:b3:86:af:ac:4b:bb:dc:5d:4c:c1:b3:63:e2:9f:29:
c6:76:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:12 2025 by rpki-client