Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: /QAfalsqG2YdhJWDAMEafthBOn1s+eEmq3khq0IEczU=
Subject key identifier: 86:9D:61:49:F3:10:A6:8F:A8:19:80:CE:8F:E0:BC:48:2F:24:2F:60
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 0199FAD813D7A77EF8E0A4F36E0C8037C645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:28 +0000
Manifest this update: Sun 19 Oct 2025 05:01:28 +0000
Manifest next update: Mon 20 Oct 2025 05:01:28 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: ntP2SLLVFhKntnJsT/xQm3Wabb0I1utQPoCNsviWAdI=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:13:d7:a7:7e:f8:e0:a4:f3:6e:0c:80:37:c6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Oct 19 05:01:28 2025 GMT
Not After : Oct 20 05:01:28 2025 GMT
Subject: CN=869d6149f310a68fa81980ce8fe0bc482f242f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:6b:8d:a2:7e:40:ce:0d:2d:43:1b:10:5c:
4f:7b:7f:12:8e:0a:dd:8d:f7:a7:b6:f7:0c:f4:bb:
14:57:3b:6b:a4:d1:99:9e:23:42:a5:33:20:27:0d:
be:63:c7:44:d8:f8:67:b1:3a:8c:b9:4f:a0:57:41:
c2:01:0e:a3:a9:cb:be:fc:b6:e5:fa:a4:f0:37:e4:
ef:79:a8:52:8a:a0:5c:71:2e:dc:1b:6c:0c:95:1c:
77:3b:45:d2:f4:f1:74:48:f6:87:e2:2d:80:5a:22:
b3:2e:88:14:8e:1d:04:bf:6c:16:0d:b9:ce:45:5e:
90:9b:5a:96:7a:c8:4e:cc:98:11:5f:72:03:17:d9:
3e:8d:78:51:94:a4:57:00:d0:0e:f9:22:ac:6d:f6:
a4:bd:74:03:db:fe:e3:19:24:9d:9f:fd:e9:9b:d9:
42:76:b7:ab:53:d5:eb:52:ca:08:39:7e:68:04:ab:
00:4d:e1:a0:e3:a8:5d:18:40:d2:5b:28:58:30:1c:
c2:82:4e:71:3e:78:a2:08:51:40:3d:fd:82:fb:2b:
0e:34:bd:0f:30:ef:3a:6b:86:e5:b0:4b:d6:37:c2:
23:88:22:e7:d9:bc:e5:18:00:62:68:cb:72:52:3e:
c9:32:89:5a:be:2b:e8:7f:1b:8e:4c:f2:e1:93:c8:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:61:49:F3:10:A6:8F:A8:19:80:CE:8F:E0:BC:48:2F:24:2F:60
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:17:aa:04:6a:bc:e3:63:ff:fd:e3:34:23:18:ac:7d:b6:a7:
3a:8e:44:eb:8c:18:8b:d0:ad:b4:b8:86:3c:48:b9:ff:ce:26:
a0:9f:d2:76:6d:66:71:60:ff:ac:0f:d0:5d:03:0e:d2:83:76:
8b:98:3e:72:60:76:8e:d1:34:e4:fc:f7:98:a8:38:50:55:ad:
d2:0d:c8:a8:44:56:04:f1:83:db:38:da:f0:5e:74:57:03:17:
26:cc:a9:6f:ba:07:0e:f6:b5:b2:3c:3e:65:b1:2c:71:c4:c1:
c1:6e:b0:2e:73:e5:9f:35:b5:32:2b:07:97:15:20:b5:e0:86:
6a:a7:5d:60:c4:ca:2e:7a:37:96:58:88:d2:4c:de:e7:60:cc:
dd:4c:d2:83:00:d7:0b:c8:a1:45:bc:2b:d4:d6:4b:c4:02:67:
7b:23:af:5a:2e:a7:75:15:d3:4a:d0:c2:97:c3:c6:e2:8a:70:
76:1e:8c:a7:3c:e3:0b:bc:81:ba:69:b5:2a:71:d5:4b:56:fb:
dd:dc:be:63:fd:55:f4:a7:f1:e6:20:47:c5:ee:02:24:56:98:
8c:b4:a2:ff:a1:07:81:0d:e4:8f:68:26:4b:07:bf:c4:3c:65:
69:8f:ae:d2:03:29:85:a1:c2:e8:9d:5e:95:81:8f:d6:3f:29:
2d:0c:e0:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62BPXp3744KTzbgyAN8ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDhkYTdjYmU4Y2E0MTg2NWJkYTFhMDgyZTAwY2I1YzI1
ODg3YWYwHhcNMjUxMDE5MDUwMTI4WhcNMjUxMDIwMDUwMTI4WjAzMTEwLwYDVQQD
Eyg4NjlkNjE0OWYzMTBhNjhmYTgxOTgwY2U4ZmUwYmM0ODJmMjQyZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuZrjaJ+QM4NLUMbEFxPe38Sjgrd
jfentvcM9LsUVztrpNGZniNCpTMgJw2+Y8dE2PhnsTqMuU+gV0HCAQ6jqcu+/Lbl
+qTwN+TveahSiqBccS7cG2wMlRx3O0XS9PF0SPaH4i2AWiKzLogUjh0Ev2wWDbnO
RV6Qm1qWeshOzJgRX3IDF9k+jXhRlKRXANAO+SKsbfakvXQD2/7jGSSdn/3pm9lC
drerU9XrUsoIOX5oBKsATeGg46hdGEDSWyhYMBzCgk5xPniiCFFAPf2C+ysONL0P
MO86a4blsEvWN8IjiCLn2bzlGABiaMtyUj7JMolavivofxuOTPLhk8jslQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIadYUnzEKaPqBmAzo/gvEgvJC9gMB8GA1UdIwQY
MBaAFINI2ny+jKQYZb2hoILgDLXCWIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgt
YTI5NjA5MmJlMTUzLzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85M2RhM2EtODdkNS00NDMzLTlmMzgtYTI5NjA5MmJlMTUz
LzEvZzBqYWZMNk1wQmhsdmFHZ2d1QU10Y0pZaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFheqBGq8
42P//eM0IxisfbanOo5E64wYi9CttLiGPEi5/84moJ/Sdm1mcWD/rA/QXQMO0oN2
i5g+cmB2jtE05Pz3mKg4UFWt0g3IqERWBPGD2zja8F50VwMXJsypb7oHDva1sjw+
ZbEsccTBwW6wLnPlnzW1MisHlxUgteCGaqddYMTKLno3lliI0kze52DM3UzSgwDX
C8ihRbwr1NZLxAJneyOvWi6ndRXTStDCl8PG4opwdh6MpzzjC7yBumm1KnHVS1b7
3dy+Y/1V9Kfx5iBHxe4CJFaYjLSi/6EHgQ3kj2gmSwe/xDxlaY+u0gMphaHC6J1e
lYGP1j8pLQzgFA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:14 2025 by rpki-client