Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: 5dhsflEr6WG9lLxMfN+RI7HrXoGECibkxvGTAAiB4LI=
Subject key identifier: DF:41:FF:75:D6:8D:38:20:0B:7E:FD:9F:CD:85:52:31:31:05:AD:57
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 0199FCFDA8C348BEDC2DB3524C9476902B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: B8h5GisaKJuPnTZea104kw+IAS6TY/91/NLJV3zhggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a8:c3:48:be:dc:2d:b3:52:4c:94:76:90:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=df41ff75d68d38200b7efd9fcd8552313105ad57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:6c:ef:c8:12:f9:64:ba:79:6e:a7:e9:08:
a8:80:10:8d:17:7b:ac:72:7f:be:b4:9b:bc:9e:c8:
27:de:f1:a3:02:a5:90:6b:24:69:fa:8a:1a:73:dd:
75:d0:91:8f:cd:20:14:f8:00:73:87:cf:6d:15:73:
a1:f2:4a:4e:ee:22:9a:13:06:51:97:ed:04:17:9c:
e2:d5:aa:7e:f4:f5:0f:32:0c:09:3d:0f:6e:b1:9b:
fc:b6:84:59:87:0d:f3:9b:a7:d3:a5:11:a5:47:3b:
11:bf:d5:00:50:f4:8c:c7:dc:47:ac:26:20:85:52:
cc:9e:05:96:dd:aa:02:c8:39:20:85:7d:58:b5:38:
3c:bc:29:41:95:95:42:b3:c5:4e:a3:5d:be:39:b9:
b3:21:71:69:b6:eb:6e:cd:40:8a:dd:f7:32:1a:1f:
9f:5e:d0:3b:d1:65:77:f8:57:cd:35:64:51:28:63:
53:be:fe:8c:50:f6:85:48:2a:2e:7c:26:12:39:1c:
8d:c8:96:37:22:61:42:a2:40:ff:84:c4:3b:48:7b:
bf:35:bf:06:bf:da:b0:03:99:ee:63:0b:df:cf:78:
c9:de:a5:d5:d4:e4:8d:81:31:78:04:6c:66:bc:c4:
e3:83:76:c4:a7:f4:b2:b2:22:60:e7:19:55:3c:6a:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:FF:75:D6:8D:38:20:0B:7E:FD:9F:CD:85:52:31:31:05:AD:57
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:77:f5:f9:77:ad:eb:32:6f:bf:ce:29:63:9d:7c:c4:df:
1e:16:8e:d9:b4:a6:5d:4a:60:13:f0:3e:63:e4:22:7c:1a:34:
ce:0d:3f:e5:c6:52:53:e6:b2:53:c8:0d:34:be:d9:d6:10:45:
ac:ff:86:1e:c7:a3:31:71:86:bd:0f:b3:3d:b2:49:4f:7f:4d:
d1:c0:90:65:17:99:95:4a:37:ac:98:fc:3a:9d:7a:3a:06:1b:
d5:42:61:92:a2:6f:f7:c8:e7:73:60:6f:3d:c1:38:73:cc:9b:
a6:9e:63:2c:e4:82:ef:25:d3:78:51:4d:43:5b:d8:61:dd:08:
e1:35:31:e1:90:f8:4f:f1:75:e5:e5:12:b4:bf:48:d6:27:07:
7f:81:ac:99:73:b3:3f:90:8c:83:03:26:6a:0f:1e:55:0e:3b:
93:da:dd:95:a6:32:3a:4b:0b:3c:b2:3c:ea:67:63:fb:0d:fb:
a6:7e:b4:9b:16:c8:9f:ca:c2:2e:28:29:a9:4d:5e:34:e3:4f:
e6:6a:61:a2:ac:f8:f8:d9:61:0e:ff:e8:b7:aa:71:a5:1b:96:
ee:78:a7:59:32:ae:69:45:29:9a:16:a1:18:d1:96:d9:85:44:
7a:eb:22:86:45:74:c6:d5:47:7b:5e:e4:73:b4:aa:c3:cb:7c:
40:1a:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:02 2025 by rpki-client