Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier: reolipAqop14IvrJNevm1d0PcIbYaV7VUl+suni1Fww=
Subject key identifier: A8:BE:0E:BA:3F:AC:EC:A2:58:E0:59:59:2E:FD:E4:5C:9E:22:9D:8D
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 0199FB7C9E529D539EBDF9A569EEE355A853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number: 82
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: /QQX1pEjgxQe/SurAnuvw45JQWFwiFn3V5bJbDPUgss=)
2: 7dyKoqU_uGFj2QfjYZs5zvdLxIY.roa (hash: 0WWTmxFxwFqsreBzZrF6paaxfc63rbHSArefR/ThQ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9e:52:9d:53:9e:bd:f9:a5:69:ee:e3:55:a8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=a8be0eba3faceca258e059592efde45c9e229d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:7c:da:e2:c6:35:04:c4:a1:4a:4f:b0:7e:
b9:51:83:18:f5:d6:3f:7d:86:1b:fd:b2:91:8d:59:
9d:6f:7f:f0:4d:0a:86:29:74:22:6e:ee:c3:ef:aa:
4d:a4:e0:3c:6b:60:1b:03:65:ad:1b:77:5c:cb:e7:
f6:d9:4c:af:60:0d:97:8f:82:73:e0:26:b8:00:ac:
2f:28:d8:a0:9f:7e:48:6c:b8:f4:df:1b:fd:34:bc:
aa:87:51:cc:9c:5b:e2:4f:fa:e2:fe:89:70:70:d7:
b2:b3:84:41:88:ee:74:46:94:c9:60:1b:55:c2:76:
21:be:a7:8c:f9:35:23:d6:63:38:45:9e:54:b8:e3:
ce:5d:e3:7e:cd:75:c9:b4:f7:37:70:7f:13:9f:d4:
94:05:de:4b:ca:74:39:77:4c:d7:5c:29:9c:82:7f:
df:40:86:d7:1f:db:65:97:bd:b7:c5:00:73:e9:52:
9c:a5:67:a8:50:43:49:54:f5:0e:d2:09:ac:a3:3d:
85:7e:77:33:6e:42:12:97:a6:52:4b:17:b3:e3:ef:
50:77:ca:28:04:e2:14:5b:27:4e:fd:77:54:2c:cb:
9b:9b:f9:a3:c1:75:90:df:12:ac:b1:e3:b1:a1:72:
37:4b:7f:bd:71:c6:97:95:c6:73:72:ec:c5:28:d1:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:0E:BA:3F:AC:EC:A2:58:E0:59:59:2E:FD:E4:5C:9E:22:9D:8D
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:32:5c:02:11:37:e2:e2:2b:4a:88:1c:e8:6c:52:f2:eb:e6:
a9:91:da:0e:3a:db:55:02:02:51:43:23:f0:74:1d:c1:5f:99:
38:19:99:62:78:2c:9b:88:81:15:b2:0e:1e:9a:2f:a7:79:eb:
5a:04:2b:48:89:73:18:0c:6f:e1:c6:df:54:51:49:4f:cd:49:
cf:dd:b9:02:2a:15:81:77:cc:5b:c9:1e:67:1e:c4:b2:49:db:
e5:11:1f:48:4a:dc:ed:65:54:c3:e0:d4:83:e6:57:33:02:e3:
d4:55:19:cc:79:77:89:dd:0e:74:94:a8:84:d8:d4:9e:a3:fe:
27:77:f0:38:51:85:52:a1:ea:df:8e:0c:03:56:00:d4:fa:73:
4e:e0:ca:7b:1f:eb:a4:df:f7:88:40:58:d6:d4:0c:8a:49:99:
d1:09:8f:29:da:a8:ec:ff:86:0d:ab:69:7e:41:37:bd:15:d9:
b8:f3:e1:3e:48:e7:60:5f:3a:c3:a7:df:90:ff:2f:a5:c0:a5:
c3:13:4a:ec:5c:0b:40:af:62:92:c3:a9:67:9c:22:0f:87:5f:
d0:72:81:d2:56:34:02:63:78:c1:63:c0:7d:02:57:fd:0c:c2:
a4:b3:be:8a:1b:ad:8d:78:20:75:4b:ec:cd:5b:dd:01:3f:ef:
85:c6:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:53 2025 by rpki-client