Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: vkJX2MHQO5OfQjFhRFcIc12ucGRkhF117OmuGlfsUew=
Subject key identifier: C4:25:2F:76:DC:9F:E0:98:E1:19:E9:EF:3F:9D:70:07:7A:56:D5:AE
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0199FC591BE3E382F320407EEDEF8D464F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:02:02 +0000
Manifest this update: Sun 19 Oct 2025 12:02:02 +0000
Manifest next update: Mon 20 Oct 2025 12:02:02 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: 3cN+JXOqkWj6UqDHX8K9JAHkBbaLBLgOLhsJWKWIebw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:1b:e3:e3:82:f3:20:40:7e:ed:ef:8d:46:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Oct 19 12:02:02 2025 GMT
Not After : Oct 20 12:02:02 2025 GMT
Subject: CN=c4252f76dc9fe098e119e9ef3f9d70077a56d5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:66:f2:bc:75:59:49:84:30:fb:57:bc:0e:
e0:3c:4a:06:30:03:f6:b6:7f:d6:64:5d:ca:3c:2b:
ae:54:25:da:d4:50:ca:12:39:91:a6:a9:71:88:4d:
3f:74:4e:cb:ac:6c:1b:4f:b4:f1:a3:91:19:fd:38:
2e:b5:6c:c5:8c:dc:63:e5:d0:35:94:d2:d5:e9:50:
55:03:21:cd:45:37:6c:5b:f6:ac:ac:12:8a:e5:ac:
9a:0e:1b:e3:06:5e:1d:9c:be:ec:d5:30:ca:cb:d2:
87:e9:3f:73:bc:7e:19:93:72:99:c6:ef:72:c1:a4:
a9:36:66:c6:5e:45:89:b9:2e:64:d5:d9:54:13:63:
76:49:de:a1:9e:88:75:a2:cf:ea:23:6c:68:3d:43:
72:13:21:d9:c3:6c:5a:3c:bf:38:a5:ca:f6:49:b4:
ff:15:03:e0:ee:81:09:70:d5:3a:ff:fc:1c:af:ed:
b6:b3:4d:24:fc:0b:68:59:58:06:87:42:a2:c4:71:
36:37:b2:e7:40:cd:2e:09:4c:8e:4e:3c:82:4f:cd:
6d:f6:c6:ed:87:61:37:61:a9:ed:ea:2b:28:84:bf:
4d:d7:86:9e:74:13:57:0b:40:0d:8c:3b:4e:9f:bd:
f4:7f:bf:5b:ac:ec:99:1e:22:5c:a9:6a:95:a3:e0:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:2F:76:DC:9F:E0:98:E1:19:E9:EF:3F:9D:70:07:7A:56:D5:AE
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e5:68:9a:44:ad:a9:c1:9c:e0:17:64:96:70:7c:ec:ba:f1:
4d:5e:40:5e:b0:2d:63:c2:e7:fb:c4:e5:3e:e4:b9:e7:fc:19:
71:82:4c:9a:3a:fc:06:18:ed:9d:2e:55:4e:73:8c:a1:42:88:
9a:47:d6:66:2b:ed:9e:25:e3:b4:c9:9b:5d:37:b4:3a:39:3c:
f5:a1:70:98:f0:dc:71:ba:e6:5e:5e:51:f7:ec:34:10:9b:64:
11:91:b4:a4:35:4e:10:cc:4f:53:dd:7b:5c:b0:ec:c0:5b:7a:
0f:53:a4:8c:bf:de:e7:4e:10:9a:dc:9a:e5:86:c2:10:8d:49:
bf:0b:7e:cc:8c:7a:d1:88:74:80:5c:bc:f8:98:e4:0d:e8:e7:
a6:3a:36:96:64:62:58:67:51:a2:91:f4:7d:89:62:6a:57:84:
4f:dc:46:a1:5e:8a:b9:2b:b3:ac:01:59:7f:57:b6:a3:8d:5b:
d6:12:3c:d0:7b:68:54:da:09:be:97:83:01:27:7f:96:28:0d:
48:61:9a:6f:8f:3c:29:7a:ae:56:3e:e4:5e:08:c0:f6:b5:6d:
07:ba:cb:3d:47:70:d3:a7:ed:24:8f:9a:0d:87:2b:02:3c:1b:
a5:23:33:66:f3:b9:06:62:f7:8b:d6:fc:f7:c2:c0:26:14:0c:
e6:40:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:48 2025 by rpki-client