Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File: g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier: ZI+pNnzUi1XWvAE/WFvnhVD+aAjnh6itH9cUTza9Na0=
Subject key identifier: 3A:3D:27:43:49:4A:94:E2:42:83:43:BD:41:74:4C:1E:0B:E0:08:5F
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer: /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial: 0199FCFD96F45BCF8CB146E45C8D12EDD0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: 9IVgnGxC9ZNlX1gJ3z50/mRSq/RXTZ3Tv3O42cXImKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:96:f4:5b:cf:8c:b1:46:e4:5c:8d:12:ed:d0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=3a3d2743494a94e2428343bd41744c1e0be0085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:aa:73:84:30:fc:a6:9c:54:46:16:6e:74:
86:10:64:fa:19:5d:6a:ee:45:8d:ca:d2:39:4e:59:
fc:e8:e5:1f:ef:df:47:6c:ec:1c:c6:64:4d:96:97:
f5:e1:47:7b:ed:25:12:1f:73:e4:35:7b:bf:f2:2d:
4d:f1:ab:38:d2:c9:13:c2:a1:aa:60:e3:5a:59:1f:
83:9d:c5:d9:e9:1c:bd:49:83:f1:91:7b:c6:23:78:
74:a1:d1:fc:91:14:6a:42:6f:83:14:7c:09:af:b0:
1e:16:aa:5d:14:fc:5a:be:8b:37:76:40:7e:25:c9:
b8:d2:9c:7e:9a:1a:c9:71:ee:76:71:41:eb:fe:7b:
10:96:4d:2f:2d:11:92:43:7f:16:5b:3a:04:e6:63:
b2:cb:f9:c7:56:f4:4b:85:4f:db:27:58:cf:a8:55:
90:f4:4e:f1:83:f0:6c:75:4e:8c:92:09:21:21:72:
5f:19:aa:34:38:c7:7d:18:91:43:3c:30:db:90:ed:
60:65:42:49:c4:c6:10:7f:42:15:48:c1:8d:1f:1e:
dc:3d:10:ed:76:1a:04:cb:3c:02:86:2f:fb:d6:e7:
04:f3:3c:88:87:f4:b9:a7:e8:cd:75:96:3a:24:be:
7e:6e:c3:ed:bf:94:0e:40:44:b5:6d:e2:83:70:f4:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3D:27:43:49:4A:94:E2:42:83:43:BD:41:74:4C:1E:0B:E0:08:5F
X509v3 Authority Key Identifier:
keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:44:21:0b:ff:48:fe:43:0a:1c:ea:72:0f:4f:f1:18:17:af:
23:53:7b:66:21:fd:d3:0c:01:10:0f:f1:a9:40:35:ec:57:3a:
1a:79:5a:13:db:bf:7f:0c:34:03:1c:c6:1c:2d:78:14:36:81:
e0:c7:88:4e:35:ba:1b:60:98:e1:18:cf:96:79:27:de:80:2e:
7c:aa:03:44:17:79:fb:91:9d:30:dd:23:30:af:b7:74:ce:f3:
a7:88:46:d6:e3:16:0a:d8:74:8a:61:01:7a:86:d7:c9:09:80:
2e:50:5b:e7:f0:96:7f:64:d7:ac:9d:98:98:66:8d:30:86:d3:
b4:73:d6:1d:f6:7f:37:39:90:6b:07:25:ca:e3:44:63:c7:75:
94:02:3d:40:e4:ac:50:80:d7:25:c7:06:eb:05:02:88:dd:d7:
37:84:55:48:b7:51:ef:b3:46:82:7e:db:9a:4c:7f:ec:07:d5:
93:11:a3:9c:e8:77:8d:ae:48:22:69:08:d3:1a:a1:af:45:c5:
b1:56:3d:76:78:c2:17:6c:de:34:9e:cc:33:70:3d:b2:d7:5b:
92:6a:81:61:cc:5a:44:ba:67:5c:b2:8b:7f:33:cf:26:f9:0c:
70:33:70:ea:73:cc:79:91:45:12:11:8f:5b:d2:f6:99:e9:85:
3d:c4:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:40 2025 by rpki-client