Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: wgnZIunuFI6imkOWiYiASHcac99F49vhISLq1E1VPTw=
Subject key identifier: 04:2B:13:8C:97:7D:06:AF:CD:19:EA:8C:19:AC:D0:C1:00:8D:C1:84
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 0199FD3414DFECA8E1662A55E220B05C70B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 06F3
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: i2bcXsF7740ZeTZvakJpe9DBD+ko7cc5eCaLT2k1ssk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:14:df:ec:a8:e1:66:2a:55:e2:20:b0:5c:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=042b138c977d06afcd19ea8c19acd0c1008dc184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:f4:72:9c:e5:df:75:0b:be:8b:c3:eb:31:
39:e4:ef:0d:a8:31:a3:49:59:35:9e:79:06:66:62:
96:b6:bc:b8:2e:12:8c:3b:f2:fb:b7:10:81:40:36:
d1:46:c9:69:9c:32:3a:c9:a7:56:9e:0c:c5:13:38:
9a:b7:32:90:a4:26:cd:0f:9b:b9:aa:f4:fc:47:74:
3f:87:b3:73:01:bc:c0:8a:d3:cc:3b:cf:62:f3:8f:
a5:66:f4:dc:35:7b:ce:ca:fb:88:a3:8c:93:85:47:
bb:34:5c:82:09:3b:80:b6:89:02:8a:eb:8e:63:22:
58:89:7b:ac:fb:92:59:37:0b:7a:a2:70:8d:c1:66:
38:c6:7e:29:fa:c0:01:e0:e5:7c:69:93:c3:11:e1:
84:d2:a4:d0:89:cb:99:00:2b:ed:ee:4a:94:57:56:
03:ca:3e:ba:9e:ac:2d:b9:80:8a:1d:29:76:74:b8:
95:ec:ea:de:c1:8a:88:87:3a:ba:09:bb:86:1a:07:
0c:12:66:f3:66:25:52:e7:40:47:67:85:48:14:c3:
b1:70:4e:a3:70:24:04:67:f0:54:10:c2:39:6a:f8:
0d:82:55:bb:02:ee:e8:f9:9f:f8:5d:26:4a:d0:d4:
c5:66:8c:32:06:6c:26:06:77:bb:58:86:d4:04:5a:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:13:8C:97:7D:06:AF:CD:19:EA:8C:19:AC:D0:C1:00:8D:C1:84
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:54:f9:07:72:1c:90:c5:41:8e:d5:1b:b1:e9:17:68:f7:50:
6d:f6:69:d2:af:7e:27:7d:e4:ca:8e:a1:64:3b:95:70:95:ee:
92:47:70:1b:5b:28:a5:ea:09:54:4e:a2:26:4d:57:a6:83:8a:
76:72:63:5f:0f:b2:97:1b:e6:78:3e:d2:55:60:76:7e:b4:78:
0d:63:f4:03:39:fb:f7:f2:b5:03:04:b6:c7:b8:b8:de:b4:b3:
83:3c:b5:ad:7d:00:a1:8b:50:4a:6d:77:df:7a:d3:77:04:4a:
de:d3:e0:f4:25:68:0c:55:6f:68:bf:32:7f:0f:e1:de:80:f3:
31:f2:a9:2e:c3:d6:d0:02:74:14:5e:7e:ab:68:1f:fb:6e:3d:
d8:ba:05:89:dc:df:ab:2f:85:97:84:ff:e9:f4:f1:b3:4e:18:
f3:c1:e7:28:0f:b1:7e:02:14:55:f6:ae:c8:43:71:de:6d:09:
b5:1e:81:15:52:e4:c3:9b:ff:22:14:74:42:c6:6e:1c:b1:06:
fe:53:bc:2d:5f:e0:4d:12:08:62:e6:19:23:a8:c5:f1:70:14:
b0:11:44:a8:35:27:9e:3b:d6:19:eb:ec:2a:88:95:bd:5e:df:
28:1b:34:b7:5d:57:7f:a3:ff:ea:4b:c8:90:ed:74:27:10:e1:
65:33:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:49 2025 by rpki-client