Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: BFK2vUoX1jtBkRS11Nh9+P61Gao0phPebNEo0ZEG+as=
Subject key identifier: F6:37:CB:F3:9B:27:65:5E:7B:29:F7:4E:07:ED:73:E2:8B:54:68:BD
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 0199FE469CAF4738C983143ADBC1FD6DCB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 069B
Signing time: Sun 19 Oct 2025 21:01:04 +0000
Manifest this update: Sun 19 Oct 2025 21:01:04 +0000
Manifest next update: Mon 20 Oct 2025 21:01:04 +0000
Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: jkTa/qdvKzX5faiya+HuaN7J+mfUoZ0QMPM194/Eal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:9c:af:47:38:c9:83:14:3a:db:c1:fd:6d:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Oct 19 21:01:04 2025 GMT
Not After : Oct 20 21:01:04 2025 GMT
Subject: CN=f637cbf39b27655e7b29f74e07ed73e28b5468bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:19:1f:8d:27:ff:fd:47:97:82:90:7d:08:
d1:d1:dd:8c:12:41:dd:8d:2f:47:f7:41:98:0f:e5:
65:e1:aa:76:07:bf:cc:43:0f:c0:68:33:f4:45:2a:
3d:92:c9:c4:e0:dd:1d:5b:98:48:7a:af:1a:32:f1:
80:98:b9:55:3a:32:4d:ef:df:75:7e:7c:93:ad:a9:
d1:cb:3f:47:43:3f:7e:bb:2f:44:39:18:4b:85:10:
2c:8e:bd:34:27:85:c9:b9:34:c2:24:6c:6d:2d:5d:
f7:99:4b:52:6c:6b:58:da:87:81:c8:c2:e8:09:35:
b6:3c:0c:08:5c:a5:5c:c5:11:1d:54:45:c2:52:b9:
91:a2:4f:80:96:ec:5f:e3:57:4f:90:5b:d0:2c:de:
9a:72:28:08:c2:ef:6a:82:27:14:dd:be:de:2d:92:
1d:63:a9:6b:ae:0c:8f:b3:ff:a9:bc:8b:31:9d:9e:
70:08:b7:87:e6:2f:b7:3d:71:9e:c6:dc:dc:f3:f3:
27:e0:28:b4:f5:b7:fd:cc:4b:5f:a5:79:97:04:cb:
ff:e0:af:d9:00:63:86:87:fa:40:03:c6:9f:78:bc:
ac:bd:38:df:ae:e9:1d:77:05:6d:06:58:1e:40:bd:
5d:41:1c:ed:aa:45:62:9f:ca:db:b7:a0:e7:f4:a5:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:CB:F3:9B:27:65:5E:7B:29:F7:4E:07:ED:73:E2:8B:54:68:BD
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:13:b0:df:80:c1:f3:c6:60:06:b5:e6:b1:60:74:17:4b:fb:
e7:a8:15:0d:bc:88:11:a6:07:19:a5:66:bb:ea:11:aa:ea:4d:
75:ad:b5:50:54:4a:0b:9a:1b:a5:f7:23:c1:c0:ae:ae:a7:31:
aa:34:b1:73:e1:d4:70:8a:11:6f:42:f9:72:43:7a:d4:c7:d0:
1c:ed:7e:ef:04:42:f8:28:9b:c9:d4:9e:ba:60:05:00:d1:71:
5d:fc:d3:fa:7a:74:f4:46:24:22:8b:b0:cb:63:37:d0:81:31:
16:84:6a:4c:61:24:2d:34:16:a5:02:ef:0e:93:14:8f:95:3e:
bc:d2:91:74:cb:db:72:a7:6e:48:73:f5:97:4e:2b:52:81:5d:
59:9a:d8:f3:71:9e:7c:fe:7e:c5:8d:c5:0f:5d:4d:d9:33:ea:
91:bb:c5:d9:ee:74:38:73:6f:c3:8f:4d:9e:9b:5b:c3:00:74:
cb:cf:ea:87:b4:a1:b9:fd:6a:b1:e8:de:5f:12:4f:67:e2:a4:
04:08:24:88:07:ca:f9:e7:e5:41:c6:01:0d:17:68:bc:53:aa:
e1:25:dd:1c:88:c4:8b:e1:73:04:83:cd:51:7f:2a:39:39:4d:
c1:70:2c:df:fa:c9:02:18:40:7b:78:4b:f0:3d:f5:61:c8:6e:
e1:55:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:22 2025 by rpki-client