Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: yACvjuKcKW2ib8XpQN5xeUbjb4FOdBeYiOFlvgIWhvE=
Subject key identifier: 69:DE:25:1E:1B:20:E1:88:F4:8F:FF:12:BB:D2:BB:32:9D:AC:6C:21
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 0199FF22A42B420B7837566F5DCEE9A2935D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 01:01:24 +0000
Manifest this update: Mon 20 Oct 2025 01:01:24 +0000
Manifest next update: Tue 21 Oct 2025 01:01:24 +0000
Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: CmeRh3/EiKbSO7eTtOYSy1OLKgSI8viXZg8YGIy7TyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:a4:2b:42:0b:78:37:56:6f:5d:ce:e9:a2:93:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Oct 20 01:01:24 2025 GMT
Not After : Oct 21 01:01:24 2025 GMT
Subject: CN=69de251e1b20e188f48fff12bbd2bb329dac6c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:53:f4:ff:7e:e5:89:5b:4e:cb:39:f5:a9:
2c:73:e4:7e:88:38:77:5c:7d:ea:80:5f:e1:d7:00:
7f:c0:d0:68:98:10:19:0d:10:66:f9:14:81:3b:5b:
64:8a:d5:5b:8d:fe:14:f9:25:e7:f1:a8:54:3f:3b:
32:c5:be:d1:c2:ad:2f:ef:7b:b2:ac:d8:ed:2c:12:
dd:14:a8:0c:46:20:d5:08:aa:41:d8:8d:0e:d8:19:
95:ad:1d:1a:9d:86:2a:83:04:2c:dd:f8:fa:e8:1e:
70:7c:e1:19:16:72:60:f6:1b:86:26:27:a6:c2:fa:
80:51:a7:c2:9b:67:8d:21:93:78:cc:cd:d3:a2:b5:
fd:97:df:ed:70:20:5f:08:2e:23:2d:ee:2f:a1:52:
3a:4c:b9:59:cd:72:39:ba:39:00:b7:c6:d5:20:aa:
14:c6:91:9d:48:3d:6b:72:2d:8a:1f:57:a2:e3:47:
13:9c:ed:7e:29:0c:8c:81:7f:2e:66:cf:57:69:89:
af:1c:86:4d:31:f5:31:75:69:2d:dd:15:e9:90:cd:
07:b0:b2:a2:aa:1e:b5:e7:1e:77:9e:7f:d3:c5:ce:
cc:42:4a:b8:cc:ae:2e:d1:6f:9e:7c:3e:d7:ef:09:
9a:2d:4b:0f:fd:6f:53:ce:69:15:43:63:4c:37:4d:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:25:1E:1B:20:E1:88:F4:8F:FF:12:BB:D2:BB:32:9D:AC:6C:21
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:09:d7:4e:3d:2e:d1:8e:d6:99:cf:82:15:b4:4c:38:0f:9d:
cc:db:f7:a9:48:92:77:10:f4:aa:fa:29:85:93:4b:81:ae:82:
ef:45:c4:fc:b5:1b:57:ce:be:73:f6:57:06:57:66:5c:f3:2c:
00:81:ba:9f:65:68:b5:4a:dc:cc:bb:d9:06:36:d6:fe:e3:4f:
53:39:40:b1:8c:58:a0:29:74:5c:57:10:70:e7:bf:77:a9:14:
c9:00:b9:35:a1:ec:67:ce:40:1a:3f:39:fc:91:cf:4a:c7:c1:
93:f8:06:db:f2:b4:24:a0:6a:e1:89:74:02:f3:0b:6d:f0:d6:
e2:f4:df:37:10:fb:50:48:38:aa:1a:36:dd:ee:9e:ef:8a:dd:
4a:b5:08:04:cb:da:04:05:3c:ea:5c:81:db:71:cb:94:e1:e7:
ce:ee:85:c0:6b:e5:dd:c9:7c:8d:22:17:ad:71:3e:38:38:1e:
26:03:11:02:24:c3:94:0b:98:c0:b8:46:70:7f:6f:0d:90:33:
dd:b2:5f:91:2a:39:30:6f:b2:25:1e:a9:ea:80:bd:8b:b5:61:
16:a7:e0:5d:d7:0b:dd:58:bd:02:a4:8d:71:8d:55:28:ac:4b:
3c:57:3a:b4:b2:e0:74:7e:b8:86:a3:f9:3c:77:b8:96:96:55:
43:3f:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:50 2025 by rpki-client