Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier: aADk0G0LeW/cHIpgSKFg/xrOaIP20Qu4gjQ87voHZSk=
Subject key identifier: 76:60:DB:F7:35:0A:F1:7D:07:6E:D1:3F:80:15:B2:C2:F8:ED:9B:50
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 0199FBEAEEB155290137E12258C948ACBCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number: 0F68
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: 9tpmr/e0eldyyrdlZT8KeiUxDrY0PHid4yuqllNsit8=)
2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ee:b1:55:29:01:37:e1:22:58:c9:48:ac:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=7660dbf7350af17d076ed13f8015b2c2f8ed9b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:b6:e2:2b:29:4f:97:28:bb:86:7d:e1:5f:
d5:4d:7a:88:aa:5e:68:62:8d:0c:07:a2:54:e6:c1:
02:c8:9c:0a:09:2c:a7:30:28:04:9a:12:27:1b:5b:
49:b2:b2:b9:f5:8b:6b:88:ef:4c:94:91:ac:25:23:
9a:b2:aa:a5:64:ff:2a:dd:49:05:ad:77:56:95:fb:
55:30:8d:dc:de:8a:33:ce:15:22:81:3a:af:56:9c:
8f:b8:41:8d:9a:b1:e8:24:41:f5:02:f8:2e:43:dc:
97:0a:26:8d:4a:6d:f6:9c:b9:b8:16:d5:85:0d:85:
bb:e6:fb:59:6d:a1:f7:45:94:f2:3d:14:d7:a8:0c:
b1:09:a3:c3:0b:23:d8:32:a4:6a:db:ed:40:29:08:
bd:e8:bd:6b:56:e6:21:f4:07:7e:b4:a1:22:da:b1:
85:44:c9:01:f8:f1:04:b3:fe:16:55:73:2c:08:e3:
14:b3:7a:54:2c:86:90:0c:6c:52:36:e8:cd:cb:f2:
ed:4c:ac:1e:65:21:92:b8:d8:0c:11:d8:9c:ba:80:
fa:6e:1d:6a:38:ed:5d:c5:8c:be:6b:c3:bc:9d:bf:
eb:e9:ed:39:c9:ab:73:a1:da:49:60:c1:92:80:0b:
a6:6e:69:8a:2e:47:ba:c7:46:83:e0:68:6c:ba:90:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:DB:F7:35:0A:F1:7D:07:6E:D1:3F:80:15:B2:C2:F8:ED:9B:50
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:d5:bc:b0:66:6e:d2:59:7a:0a:67:a2:05:7d:93:ae:cc:
c4:12:da:e8:80:95:fd:e2:36:91:68:57:ad:71:d5:f0:ba:56:
c4:37:6d:c8:06:54:a8:72:9e:cf:e1:82:de:8f:80:8f:6b:74:
76:1e:05:7b:23:9e:8c:f6:f6:e3:26:82:0b:bb:b4:fe:ad:06:
bc:1e:b8:71:22:35:03:a7:9c:59:56:83:90:0b:50:86:3c:44:
bc:bb:74:79:e2:c7:f6:bb:78:ef:57:05:fb:a2:07:04:15:23:
32:17:fc:bc:77:c8:51:07:d7:65:34:b6:04:60:11:e8:81:db:
53:fc:ae:ea:f0:4a:9b:f5:f3:e1:b6:e7:29:eb:23:ca:c8:5b:
b1:a6:52:2d:e8:4c:1d:b3:49:44:c6:e2:0a:84:de:cd:cd:55:
2f:13:90:e1:70:73:ef:d9:7f:ad:47:05:95:c2:a7:71:09:81:
55:d6:e7:22:53:52:99:8d:5e:64:dc:21:d2:32:71:9e:d1:9e:
52:7e:ff:5c:3e:7a:df:68:bf:82:49:85:52:71:30:6a:02:03:
f0:91:ff:94:da:cc:36:b0:ed:75:6b:0a:3d:f4:c2:e3:bd:74:
ae:53:6b:0a:1a:63:27:88:44:93:db:05:d9:4c:7a:6b:5c:e2:
4b:53:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:22 2025 by rpki-client