Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: hjK6KMABiQ65POu5aX28zVZ5fOB9Vl4QQg6LAr7fRNo=
Subject key identifier: 71:BE:4A:EA:71:3D:64:25:49:41:1B:0F:EB:28:CD:C1:93:18:9F:25
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 0199FE46D2ED52A70D2B8915170F1F3A7D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 0A2E
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: EOMkzR6vmh5Ud9KqnHHN08pcgGvgpSSkV46X6YFgbZI=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d2:ed:52:a7:0d:2b:89:15:17:0f:1f:3a:7d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=71be4aea713d642549411b0feb28cdc193189f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:97:b4:2c:c2:6a:37:d1:e1:f7:d2:03:26:
22:16:cf:81:d2:e2:22:e1:2f:8c:8c:7c:3a:80:ab:
c7:93:a5:2a:4d:58:1c:0d:d9:bc:fa:d1:91:01:46:
60:e6:3a:4b:de:4a:85:de:0e:d7:4b:7b:89:42:fc:
a1:f9:65:ad:91:4a:05:61:2a:13:26:f0:e0:c6:e7:
2e:f0:42:8c:61:52:5c:0d:2e:3c:4e:fa:85:36:fc:
e3:03:f1:38:88:28:b4:30:7a:3e:a4:d2:a5:32:83:
6e:19:57:51:eb:f4:c3:4d:fc:c4:7e:c0:ed:5f:ea:
9f:b5:a5:0e:a5:dd:ef:d2:0e:e5:cd:ca:0a:ab:d1:
46:57:11:a4:37:18:97:e2:08:2c:2a:37:35:3c:7a:
09:ec:fa:f7:a5:a0:78:f0:28:3a:21:2d:f4:28:c1:
b3:2d:f3:6f:73:90:71:6a:ad:4a:b9:20:c5:53:be:
5f:c1:f8:75:47:8b:7f:0a:13:e6:1b:2b:a5:47:e5:
26:49:f8:7c:ed:58:eb:a5:e7:0d:e2:aa:1d:05:15:
81:97:ed:75:96:55:15:ed:b7:c7:af:bb:cb:0f:d3:
28:05:b3:a3:26:6f:52:b8:93:b0:e9:e5:e5:22:22:
52:24:47:a8:a7:fb:1f:31:45:90:dd:bc:aa:9b:6c:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:4A:EA:71:3D:64:25:49:41:1B:0F:EB:28:CD:C1:93:18:9F:25
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ad:64:dc:f1:85:9a:02:e8:82:72:86:19:8e:cc:c9:72:80:
f3:80:21:01:56:aa:a8:21:9b:ad:9e:3c:dc:8a:c5:8e:78:9d:
44:92:74:68:28:ec:4e:61:a3:18:7d:67:15:dc:6c:de:d5:e9:
13:7d:9a:b7:d1:57:b9:64:e6:1a:65:7b:ec:5e:0a:fd:c9:47:
d3:24:e0:85:f0:90:5e:75:f3:c9:47:ca:58:7e:cb:22:b8:81:
81:97:d1:db:24:06:f8:eb:95:19:4f:22:6e:a4:cd:b6:05:9f:
83:b9:d9:39:a1:18:4e:38:52:04:d1:2d:89:0d:e1:06:4e:45:
fe:f0:81:4f:29:ab:80:16:81:4b:ec:99:3b:97:34:ff:52:db:
58:d9:77:38:b4:fe:8d:f1:4c:4e:be:9e:41:a7:e1:66:cf:3b:
65:d9:60:87:12:10:89:37:b4:cb:e3:62:f3:85:55:d0:19:ea:
96:ba:71:ff:e5:89:f2:ae:db:8a:43:2b:62:c6:5c:f0:aa:a4:
60:23:53:e7:2c:7b:d7:42:6c:a5:40:fd:e6:02:ef:c2:c0:52:
5d:08:38:dc:15:92:f5:60:8d:d6:8a:ef:c8:27:a6:ed:63:43:
74:3c:de:3e:f9:b9:12:b3:d5:d4:c1:2b:68:74:10:65:2e:f3:
04:62:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:37 2025 by rpki-client