Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: WpA4qAUEg2AqzLn7QBQSufCBwzEcHImVYH0+y4t6DOY=
Subject key identifier: F9:C7:23:88:BB:A4:B6:B3:FA:30:4B:27:30:C7:B2:B6:66:3F:B2:20
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 0199FB7CA2B34493B5DE8B098AAEA390B94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 0CAD
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: V38Ul/4W4qanr8QQMdIYBe+NLq+Ber0dMosbaTCLy6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a2:b3:44:93:b5:de:8b:09:8a:ae:a3:90:b9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=f9c72388bba4b6b3fa304b2730c7b2b6663fb220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:26:86:e4:c6:e2:22:92:d0:0a:a7:e7:c2:
b5:48:36:42:c6:d0:d8:f7:7b:42:26:89:4c:a2:99:
cb:91:20:0c:bf:d1:5b:9b:85:fe:3f:a8:98:ce:be:
5a:0a:0c:e2:3c:73:29:09:65:c5:e0:56:73:08:ba:
65:ac:52:78:01:40:e1:14:f4:c9:1a:50:53:f9:27:
b1:25:78:ef:66:f4:93:05:6e:b5:6b:0a:81:e3:4b:
01:01:bb:0a:3e:58:2c:f6:87:c5:ce:dc:9e:bf:bd:
85:85:93:08:49:84:1e:ac:55:b7:89:50:87:4d:f9:
16:d3:4a:b7:0e:79:70:19:3d:6f:2e:f4:01:f9:75:
c3:6f:e2:d6:cf:72:c7:c1:32:63:94:be:39:21:08:
fa:b9:d6:22:b4:4b:76:01:d2:ad:a9:1c:ca:9b:63:
12:0b:d8:fb:ad:cd:72:cf:72:a6:64:68:b6:fd:09:
2f:73:ad:04:7b:05:3a:36:3f:64:53:bb:fc:87:df:
71:21:8c:eb:1d:a8:41:93:80:2a:f8:9f:bf:6e:6f:
d8:64:b2:d1:a5:c6:9b:15:20:b9:86:81:6d:d5:c5:
84:fe:98:a1:62:39:92:1b:67:f5:15:16:d1:01:71:
66:e0:9e:24:8e:f5:fb:26:53:2d:57:80:d9:5f:ff:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C7:23:88:BB:A4:B6:B3:FA:30:4B:27:30:C7:B2:B6:66:3F:B2:20
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:4d:0f:55:25:dc:99:56:0a:46:01:be:7e:5d:b8:75:05:
55:ec:ce:dd:7b:fe:af:54:5f:aa:c2:0d:d3:c7:c7:b6:0d:d3:
67:f3:44:2c:fb:16:7e:a9:8b:4a:f4:99:77:68:34:c5:99:96:
81:ae:51:0a:fa:94:34:2a:bf:46:e7:0b:9a:0e:35:84:45:4c:
33:51:ac:a9:3e:aa:28:49:fd:85:ed:74:cb:88:b9:c1:26:f8:
f6:de:1e:08:b8:8b:f5:94:9d:54:f6:fb:3a:79:75:7c:87:35:
3a:da:bd:05:86:c9:ed:9d:bf:f4:6a:39:0c:9b:08:cd:ce:68:
b3:9e:93:06:01:e1:7e:7e:84:5c:f4:d4:24:3c:8e:0a:4a:94:
4a:ba:d3:02:22:21:c6:83:c3:2b:62:9e:70:38:b8:42:f4:0c:
6c:bb:24:41:6d:0c:f8:91:d0:ea:ae:dc:36:05:86:e1:0f:08:
a6:70:45:69:7d:a5:d6:68:72:79:8d:ec:e5:9b:56:63:6c:f6:
d5:9a:83:b6:51:d9:e8:c9:c0:32:99:1f:3f:54:41:30:09:82:
36:7f:17:d7:7c:37:fe:a0:a1:04:0b:84:98:2b:2c:14:ab:75:
56:17:7e:b8:fa:94:95:77:2a:45:40:83:d9:2e:25:13:8d:20:
0e:ca:9b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKKzRJO13osJiq6jkLlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzk2NmRhNWVlYWQ1MDkwNTA5MWMzYjU5OWM5YTQ0MDc0
NzM5ZDAwHhcNMjUxMDE5MDgwMTEzWhcNMjUxMDIwMDgwMTEzWjAzMTEwLwYDVQQD
EyhmOWM3MjM4OGJiYTRiNmIzZmEzMDRiMjczMGM3YjJiNjY2M2ZiMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDImhuTG4iKS0Aqn58K1SDZCxtDY
93tCJolMopnLkSAMv9Fbm4X+P6iYzr5aCgziPHMpCWXF4FZzCLplrFJ4AUDhFPTJ
GlBT+SexJXjvZvSTBW61awqB40sBAbsKPlgs9ofFztyev72FhZMISYQerFW3iVCH
TfkW00q3DnlwGT1vLvQB+XXDb+LWz3LHwTJjlL45IQj6udYitEt2AdKtqRzKm2MS
C9j7rc1yz3KmZGi2/Qkvc60EewU6Nj9kU7v8h99xIYzrHahBk4Aq+J+/bm/YZLLR
pcabFSC5hoFt1cWE/pihYjmSG2f1FRbRAXFm4J4kjvX7JlMtV4DZX/9pfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnHI4i7pLaz+jBLJzDHsrZmP7IgMB8GA1UdIwQY
MBaAFIPJZtpe6tUJBQkcO1mcmkQHRznQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQt
ZjU3MmEwZmNlMGVlLzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQtZjU3MmEwZmNlMGVl
LzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATApND1Ul
3JlWCkYBvn5duHUFVezO3Xv+r1RfqsIN08fHtg3TZ/NELPsWfqmLSvSZd2g0xZmW
ga5RCvqUNCq/RucLmg41hEVMM1GsqT6qKEn9he10y4i5wSb49t4eCLiL9ZSdVPb7
Onl1fIc1Otq9BYbJ7Z2/9Go5DJsIzc5os56TBgHhfn6EXPTUJDyOCkqUSrrTAiIh
xoPDK2KecDi4QvQMbLskQW0M+JHQ6q7cNgWG4Q8IpnBFaX2l1mhyeY3s5ZtWY2z2
1ZqDtlHZ6MnAMpkfP1RBMAmCNn8X13w3/qChBAuEmCssFKt1Vhd+uPqUlXcqRUCD
2S4lE40gDsqbbQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:44 2025 by rpki-client