Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: lqknCzMh/8oCnTbcUcmVFZL4stPR7DN0//7i4npivVM=
Subject key identifier: 36:BE:A0:6E:E3:9C:E7:69:07:CA:DD:4C:88:7D:13:4C:F1:AB:41:66
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 0199FAA104A765EBC53C6B28DBF3CE2855D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 04:01:20 +0000
Manifest this update: Sun 19 Oct 2025 04:01:20 +0000
Manifest next update: Mon 20 Oct 2025 04:01:20 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: AGXFA+1jsqgHcbf5MIHelVWd9YrKnYAqwtZ47Vvi1Aw=)
2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:04:a7:65:eb:c5:3c:6b:28:db:f3:ce:28:55:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Oct 19 04:01:20 2025 GMT
Not After : Oct 20 04:01:20 2025 GMT
Subject: CN=36bea06ee39ce76907cadd4c887d134cf1ab4166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:73:c4:f7:f7:b3:88:54:b0:07:63:dd:c7:
f3:80:cc:e2:e8:5e:96:53:03:81:cb:f3:2b:36:91:
42:96:51:86:e5:f7:1e:8b:9c:8e:5f:be:72:28:94:
e6:3e:3f:24:56:94:c0:ab:31:b0:05:e0:f4:33:b5:
7e:37:20:87:32:d7:33:96:0b:b2:69:6d:49:31:5d:
24:a7:87:35:91:36:d2:7c:fa:a4:51:35:fe:26:19:
82:33:a4:e2:2c:9e:ea:97:e3:ab:4c:af:4f:ca:b3:
45:6b:cf:4f:76:36:d1:10:84:4b:23:c4:26:0f:18:
73:8d:3d:4d:32:2f:60:ca:7d:2b:f3:5a:e2:06:13:
25:fb:52:38:eb:98:45:f9:59:87:20:57:ef:d5:2f:
b5:45:b5:11:09:a9:e2:98:97:a6:90:18:f9:b6:9e:
17:9b:92:f8:b9:45:a4:d1:1b:a8:33:81:8d:82:61:
c7:7c:09:f5:e8:2f:7d:b5:4c:18:02:f9:8f:80:84:
88:89:4d:0f:a8:09:ef:c0:88:7d:bd:94:82:49:95:
5e:e7:00:49:41:b8:1a:ab:4f:1d:53:38:f6:39:fc:
2d:5c:3f:35:ce:e8:4a:60:14:b4:f4:ff:1b:8a:1c:
ef:8c:ce:00:a8:d6:93:66:56:86:eb:c8:0a:e2:6d:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:A0:6E:E3:9C:E7:69:07:CA:DD:4C:88:7D:13:4C:F1:AB:41:66
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:14:a4:36:e5:d4:ec:b1:cd:65:0a:d5:40:07:cd:2c:7e:cc:
a5:25:5f:9e:26:d0:d4:c0:3e:0f:99:7a:37:bc:4e:ae:ab:e5:
6b:63:db:50:07:5c:a2:da:81:09:2b:a5:7b:67:99:a1:1f:d9:
7e:6a:60:44:6b:dc:5c:14:37:71:d3:91:05:25:b9:0f:7a:77:
86:b7:db:1d:d8:11:76:9f:d5:99:a5:31:1c:47:f5:58:fe:3b:
21:6d:b9:2d:82:a3:41:e3:ed:56:01:88:90:cd:e0:f8:b8:a7:
16:a1:d4:c6:cf:db:98:5d:c1:05:be:5b:9a:d9:c4:6d:4c:5a:
d6:ac:4b:fe:ba:33:89:79:3c:27:c4:e0:44:a8:8f:5b:88:53:
c3:20:ec:25:2c:82:10:66:27:3b:11:fc:eb:c0:d7:12:fd:6b:
7a:3a:8b:64:ed:7a:9f:0c:29:37:e1:f6:d1:b5:10:84:f2:65:
e0:02:37:c9:6e:53:d4:60:a7:47:3c:f1:ec:25:f1:49:71:50:
56:d2:16:34:1b:b7:1d:1b:c2:18:66:9c:98:f8:3a:49:54:e3:
ef:65:41:24:50:f4:64:5c:40:f9:fc:d6:1a:7f:db:69:7e:aa:
38:f1:1b:74:7d:2c:10:9b:53:49:e3:a2:20:63:18:25:ac:39:
79:b9:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:49 2025 by rpki-client