Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
File: gfOofhE2a1RaWhJ7gyh2U7GMilY.mft (raw, json)
Hash identifier: 5Ie/9dU6Y8spyDPbMimEo035RVtzyzRK6WEIqIU+Kns=
Subject key identifier: E2:8D:98:5B:E3:71:80:33:83:59:88:9C:E3:2B:66:23:31:2F:50:DA
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial: 019A00A352B66E898565AEAA02264AC11BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
Manifest number: C7
Signing time: Mon 20 Oct 2025 08:01:34 +0000
Manifest this update: Mon 20 Oct 2025 08:01:34 +0000
Manifest next update: Tue 21 Oct 2025 08:01:34 +0000
Files and hashes: 1: gfOofhE2a1RaWhJ7gyh2U7GMilY.crl (hash: uAJaJVCKv4VlkjMsjFtL3pnlE+o2lKyVVvCpykEOhQs=)
2: lKUbuVCydMPLYxDoh9127xl2Npc.roa (hash: en7K6suh3CPitlX5oTwC1BzuohYZ/bNPoP5vdVZR6Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:52:b6:6e:89:85:65:ae:aa:02:26:4a:c1:1b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
Validity
Not Before: Oct 20 08:01:34 2025 GMT
Not After : Oct 21 08:01:34 2025 GMT
Subject: CN=e28d985be37180338359889ce32b6623312f50da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:44:87:98:5f:99:c0:ef:de:6f:68:c4:85:ef:
14:04:72:1d:f9:89:15:41:ee:0c:88:71:e1:21:33:
da:1c:f5:07:5b:ab:76:aa:25:af:23:79:b2:a4:38:
38:46:ee:9d:e7:ea:a7:43:81:64:4f:0e:8c:18:45:
27:74:af:1e:6f:3c:94:e6:65:ee:a7:7d:cd:f7:cb:
80:c6:f1:a6:6e:1e:57:e0:1f:a8:03:4e:41:bd:5b:
d2:6c:be:8a:06:8e:54:c9:ee:cd:74:0f:f2:06:b5:
33:60:c6:a7:c5:14:8d:e1:66:d2:da:fd:e9:17:28:
82:ec:dd:94:6f:40:20:8a:96:e4:17:4d:96:8d:b3:
c7:83:61:bc:75:cb:bd:24:fe:40:8e:36:20:df:06:
cb:bd:3e:c9:98:5c:ff:86:9f:57:41:0d:ff:1b:f0:
52:a7:81:97:77:14:94:a8:32:18:de:df:ad:dd:d3:
dd:7f:09:46:6c:58:05:96:e0:e9:33:05:bd:8f:45:
51:a5:ca:6f:24:90:e7:2a:60:8d:4e:d8:af:b0:bb:
41:b2:06:81:19:0b:cc:5c:a8:20:65:15:84:2c:5b:
8a:0f:20:d9:79:6c:7b:ca:7f:be:3f:d8:b6:5c:5f:
4d:79:46:a7:4f:1d:72:05:22:97:13:bb:e5:e9:c4:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:98:5B:E3:71:80:33:83:59:88:9C:E3:2B:66:23:31:2F:50:DA
X509v3 Authority Key Identifier:
keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:ef:ee:42:c1:90:53:f3:17:de:05:ff:5c:77:b7:05:77:
1b:ad:81:d5:a2:14:91:b5:b6:71:e0:51:c3:3f:9d:17:a6:49:
0c:60:9d:98:f8:23:89:a0:ca:5f:c0:32:71:0e:93:a9:ce:b0:
f9:ef:af:a8:6e:02:80:01:c4:b2:cc:1d:b6:e2:fa:1f:dc:06:
bc:7d:6d:9f:4c:6a:d7:8a:dc:d4:c1:70:93:b4:93:db:2e:11:
b8:ae:74:2a:55:26:bf:38:46:bf:b2:67:bb:73:3f:c8:aa:7b:
d9:96:99:ef:e8:6c:3e:fc:6c:63:60:f6:33:67:b8:f9:69:94:
c2:8e:8d:1a:5f:33:4f:a5:ea:14:bb:01:75:46:72:68:d3:e9:
5c:29:e9:81:66:ae:f1:74:ff:f1:38:5b:e4:d3:1e:e7:e1:91:
57:2a:45:43:aa:ed:1d:2c:0a:55:b4:e2:04:eb:85:65:48:b9:
c3:82:c5:40:2f:65:ee:76:ec:3b:1b:5b:7f:2c:5a:87:2e:7c:
2f:3a:14:ab:9c:57:5c:68:27:5a:0d:e7:86:1d:c3:c0:87:2b:
b8:57:63:ed:5f:8a:34:91:ed:54:56:a0:d0:80:4e:0d:35:12:
60:58:63:57:2b:de:be:75:f9:be:c0:72:bd:71:c3:29:e0:be:
cc:cc:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:49 2025 by rpki-client