Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: Pzx9tcUBDdSdT/ZN8vnmWJYa1vuGYJ6tc5N1x6b46Cc=
Subject key identifier: D5:A9:5E:CA:42:92:8E:06:8A:12:2F:42:72:62:7A:91:86:CD:51:41
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 0199FC58A15FF76AA93719B3C8E184CFEDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 16B7
Signing time: Sun 19 Oct 2025 12:01:30 +0000
Manifest this update: Sun 19 Oct 2025 12:01:30 +0000
Manifest next update: Mon 20 Oct 2025 12:01:30 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: Rr4iD0wONdWx8H1t23SMdlOXy+cHiz4ZWclfHLJcepg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a1:5f:f7:6a:a9:37:19:b3:c8:e1:84:cf:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Oct 19 12:01:30 2025 GMT
Not After : Oct 20 12:01:30 2025 GMT
Subject: CN=d5a95eca42928e068a122f4272627a9186cd5141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b9:ee:93:fe:be:51:37:b7:62:b8:f4:c9:4c:
26:ab:f3:71:6b:1f:83:58:dd:b2:a3:0f:fe:00:37:
81:30:e9:f9:af:f4:fe:85:9d:a9:64:34:22:40:6b:
a9:4b:70:40:f2:3e:8e:a0:e8:f8:a4:58:3c:b3:86:
64:2e:d5:36:8f:4b:5c:5f:33:03:47:1b:8d:a9:6b:
6a:9b:e6:ea:a6:1b:f0:3c:4f:a0:37:2b:f5:70:fb:
3d:98:e9:0f:b4:30:45:53:10:f5:75:9a:0e:31:9b:
9f:ea:58:17:d3:74:df:c2:ce:f9:52:ff:21:30:2a:
0b:ac:13:fd:39:51:f4:45:ae:1a:b1:94:46:39:c6:
5a:56:ea:75:8f:1c:ba:3b:bf:97:27:01:ad:32:ac:
7c:cd:2d:44:64:93:ca:1a:a8:75:eb:ef:ce:22:0e:
a8:d3:3d:b7:c1:12:d5:60:f2:12:67:1f:73:9f:6e:
2f:34:31:c2:93:2c:45:22:7a:16:57:b2:24:06:f2:
12:d3:8c:53:54:ae:4f:b5:97:12:05:af:0f:7a:c2:
28:4d:ca:b8:67:1a:d8:e3:02:35:6f:53:f8:1c:76:
70:78:55:7a:2c:6c:2a:dc:e1:85:43:ff:5d:1f:cf:
cb:59:c5:fa:f7:b6:a8:75:d9:1a:61:4e:44:6c:a9:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:5E:CA:42:92:8E:06:8A:12:2F:42:72:62:7A:91:86:CD:51:41
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a8:df:8a:dc:14:f5:08:72:46:13:b3:55:2b:e8:4b:9e:fe:
2e:d1:74:77:25:bd:e4:0e:f1:22:18:31:ad:92:0c:16:c3:f2:
ed:db:29:f1:04:58:53:c1:b4:d6:e4:54:e8:9b:ea:88:52:a3:
a2:f8:c5:ed:14:d9:53:66:9e:34:f3:b4:3f:84:92:38:2b:b6:
23:f1:d3:51:d8:29:88:ae:1b:d6:87:e4:02:1a:ef:97:dc:77:
5f:54:b3:f6:b5:62:71:91:ea:25:e8:ea:a6:98:72:69:b7:4d:
ad:28:0b:1f:e1:88:51:39:6f:9b:21:75:bc:2e:32:2a:96:9a:
f7:80:86:f5:f5:5a:b8:fc:68:8a:42:20:90:6c:88:3c:08:90:
85:5c:e2:17:ae:ef:2f:2c:7b:52:57:0a:f7:c1:50:33:f0:08:
61:f7:5c:53:d3:49:06:be:d8:39:8c:25:34:27:dd:ba:49:a7:
19:1a:2b:0c:f0:9c:f0:a0:76:fd:e8:95:d6:33:5d:fa:e6:d4:
9d:dd:1b:1e:f3:99:c3:63:11:da:e1:19:a2:15:f3:d4:28:b3:
a1:ed:3a:2b:cd:6c:d4:fa:62:4d:5e:e7:75:11:7e:31:cf:e4:
c2:90:ee:02:51:5a:42:ec:e9:f7:56:0c:7a:54:83:07:45:80:
ad:72:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:58 2025 by rpki-client