Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: dD1j1fGGCJvTUgA5mEzbtVqfLqQd0nIJa96i9PJpDA4=
Subject key identifier: 7C:35:FA:27:CA:C2:36:F5:42:B0:E2:55:02:1D:82:E0:96:88:9E:8E
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 0199FCC6502D8C8774F31B3385A2CFCDD425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 13EA
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: Fr9OYpou+SCeSKxeS9eIaO7XpQYiXwRlr86pQHgiwzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:50:2d:8c:87:74:f3:1b:33:85:a2:cf:cd:d4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=7c35fa27cac236f542b0e255021d82e096889e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:68:2c:dd:06:65:22:d7:78:d0:bc:88:b6:
af:15:71:a0:8f:21:20:b5:f8:86:10:1e:7b:41:87:
1d:69:dd:ad:37:b9:f4:14:b4:3f:74:f6:72:f3:19:
2c:d6:3a:99:3c:e9:c0:dd:3c:82:ae:f0:52:12:fe:
a1:52:76:a8:0e:ea:09:68:4f:5c:fd:96:3b:90:3e:
d3:56:c6:58:e5:f4:d3:13:2f:dc:72:a1:b5:83:54:
71:8d:78:ad:32:ed:16:a5:4a:80:31:d6:63:c8:ac:
c3:d4:4e:9f:82:ba:59:1e:14:1d:be:0c:00:e5:1c:
46:de:3c:65:61:13:f8:2d:14:72:04:bb:83:41:ec:
47:31:39:9e:e9:e8:8b:18:1a:37:6b:05:82:1a:68:
3f:f9:6e:6a:ee:f8:0a:a2:7c:9c:ff:18:73:d2:f7:
fa:50:7b:8e:d4:e7:f8:60:c7:ac:57:4e:c4:c1:30:
87:5a:17:46:37:85:77:71:34:2e:e5:9a:fa:2f:38:
5c:73:c3:6b:bd:e0:74:46:c6:3e:cb:28:31:8a:52:
20:89:e7:68:7d:fe:56:a0:70:4e:b2:62:86:b4:90:
93:fc:76:27:91:aa:fe:b0:18:f5:45:40:58:ba:05:
28:ff:c2:b4:54:2e:bc:0d:19:64:53:2b:65:47:da:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:35:FA:27:CA:C2:36:F5:42:B0:E2:55:02:1D:82:E0:96:88:9E:8E
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e4:56:ff:b2:8d:05:db:37:9a:dc:16:ea:84:f0:43:23:3e:
63:25:b0:e7:3a:32:06:5e:ae:d3:3c:79:4c:4a:f4:56:9e:08:
b7:cf:9d:de:c1:67:c8:22:ea:7e:f7:8e:00:8d:74:fb:eb:b5:
83:af:b8:eb:c5:2d:6f:6e:5c:9e:1e:aa:e4:e8:bc:f7:07:05:
fc:03:46:3b:98:60:ba:70:aa:bd:b9:9c:5b:66:2a:ea:2a:b2:
6d:b6:c7:6f:6d:3e:56:b5:53:92:92:c6:3e:77:c0:26:f4:03:
e2:55:fa:e1:03:72:13:a1:f6:5f:6b:84:95:28:8a:48:84:db:
28:d7:70:3e:81:c1:08:36:15:0e:6a:83:62:35:ac:5b:81:02:
c4:a2:d7:02:71:f1:9f:74:9e:0a:cf:23:b4:8d:e6:d8:f1:19:
6a:5d:86:b1:cc:a5:fd:6a:48:b1:b0:55:da:46:aa:fd:7c:2f:
07:3a:af:f7:27:97:fc:00:51:25:97:25:14:41:b7:40:51:c2:
3b:90:6b:1f:eb:de:36:ff:df:bc:17:6b:24:c0:0d:6a:7b:8b:
97:1e:d1:65:ef:81:bc:ba:5b:97:6c:6b:da:64:a3:63:48:26:
2f:9f:ca:9a:9e:1c:54:d1:89:87:ac:a0:87:a3:87:06:c3:82:
09:d6:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:17 2025 by rpki-client