Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier: JTos1zidVFdo+135eLHXGmZCeOmjhJvvrU3AAZGkEfE=
Subject key identifier: B3:2F:E9:5D:A6:3B:45:2E:14:17:A7:79:2F:06:62:30:61:AB:DF:38
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 0199FC21786AEDDC817A2C4B0695EED68069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: mOfZxwL0L9lShEQxm13zrgPTaza4Xt7c/J2TDf11Vq4=)
3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:78:6a:ed:dc:81:7a:2c:4b:06:95:ee:d6:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=b32fe95da63b452e1417a7792f06623061abdf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:f6:b4:58:3c:b8:e5:ad:bf:c6:dd:0f:44:
71:92:a9:01:72:09:4e:b0:0b:e3:0b:10:0b:76:d6:
ca:8b:b5:8e:fa:1d:97:08:1a:48:b0:06:03:99:12:
e8:48:15:aa:4a:8c:fd:ed:41:f5:c1:2f:d9:51:42:
e8:c4:39:92:47:b1:37:e2:03:7c:4f:c2:96:37:08:
1b:26:f2:90:b5:bc:a8:8f:9a:a7:86:4d:5a:2e:b0:
8e:94:ee:e4:7d:34:4f:ab:40:06:da:96:0a:0c:25:
2e:c6:9c:23:e0:4e:d7:46:86:ec:66:c2:3c:9e:ae:
42:75:bc:c9:7a:64:74:9d:b6:ef:7b:f1:e6:9c:53:
9c:7c:20:69:57:f8:47:f3:39:00:b5:29:bf:77:a3:
9a:eb:5e:44:4d:2d:1d:94:0e:c5:3b:c2:e1:0f:93:
0e:49:b3:b5:89:b7:89:41:6f:1a:e7:6c:59:75:6e:
fa:e7:ae:f5:09:b2:30:64:52:b1:b2:1e:df:df:ea:
24:c8:58:d6:37:7a:25:8d:2f:39:03:35:62:60:4e:
ac:87:ed:79:7f:21:27:c4:dc:70:1f:93:c2:17:a6:
48:27:64:d0:7f:59:45:f3:cc:3e:c2:a6:0d:76:b3:
e5:41:76:c1:18:18:63:f6:c4:3b:54:fb:cb:61:c6:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:E9:5D:A6:3B:45:2E:14:17:A7:79:2F:06:62:30:61:AB:DF:38
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:15:9e:b7:86:7e:68:24:d3:b5:66:f4:d8:17:b5:0c:31:e4:
ed:6b:dd:41:2a:6d:cb:14:d9:95:be:3f:c5:a0:a5:33:35:56:
cb:2e:da:19:eb:de:88:f6:aa:7a:5f:2f:59:04:e4:7b:48:40:
56:bc:a3:06:98:6f:0b:9d:94:0c:8a:6e:10:52:3d:f3:a4:e8:
0f:4b:07:13:71:72:8f:ee:56:fe:40:60:fb:05:66:07:4a:61:
be:2b:f2:4c:15:72:10:a1:37:52:fd:32:87:bc:b2:04:cd:d5:
ee:6b:f5:06:64:ef:41:a1:bb:b3:de:0c:e1:6f:13:b2:b6:64:
90:48:46:c5:87:ef:ae:e7:03:41:13:a6:d4:73:9e:c7:cc:16:
1a:d2:f3:f1:84:12:07:4f:88:44:09:ab:17:cb:e5:a5:47:96:
90:f4:91:45:35:03:fb:87:37:29:3a:a7:e8:48:0c:6e:3b:6d:
fa:ef:07:58:e0:d2:ff:40:a8:68:1c:cf:2d:1e:3c:75:99:fb:
c3:69:fd:bd:55:f4:12:e9:91:9a:e5:52:41:db:4a:8a:6b:49:
40:68:1d:a2:f8:f1:54:5d:5a:51:48:19:d5:0b:8c:cc:1e:af:
b9:7a:74:3e:dd:5f:0e:57:3c:4f:cb:ed:50:70:f4:71:d1:53:
11:bc:90:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXhq7dyBeixLBpXu1oBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTBlOWEzZDIwY2ZhYzZjYmUzY2NmNzRhYjU3ODRhNzc2
ODI5MzMwHhcNMjUxMDE5MTEwMTE1WhcNMjUxMDIwMTEwMTE1WjAzMTEwLwYDVQQD
EyhiMzJmZTk1ZGE2M2I0NTJlMTQxN2E3NzkyZjA2NjIzMDYxYWJkZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwj2tFg8uOWtv8bdD0RxkqkBcglO
sAvjCxALdtbKi7WO+h2XCBpIsAYDmRLoSBWqSoz97UH1wS/ZUULoxDmSR7E34gN8
T8KWNwgbJvKQtbyoj5qnhk1aLrCOlO7kfTRPq0AG2pYKDCUuxpwj4E7XRobsZsI8
nq5CdbzJemR0nbbve/HmnFOcfCBpV/hH8zkAtSm/d6Oa615ETS0dlA7FO8LhD5MO
SbO1ibeJQW8a52xZdW765671CbIwZFKxsh7f3+okyFjWN3oljS85AzViYE6sh+15
fyEnxNxwH5PCF6ZIJ2TQf1lF88w+wqYNdrPlQXbBGBhj9sQ7VPvLYcbahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMv6V2mO0UuFBeneS8GYjBhq984MB8GA1UdIwQY
MBaAFBjg6aPSDPrGy+PM90q1eEp3aCkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMt
OTVhYjgxYjc3NjkxLzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMtOTVhYjgxYjc3Njkx
LzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRWet4Z+
aCTTtWb02Be1DDHk7WvdQSptyxTZlb4/xaClMzVWyy7aGeveiPaqel8vWQTke0hA
VryjBphvC52UDIpuEFI986ToD0sHE3Fyj+5W/kBg+wVmB0phvivyTBVyEKE3Uv0y
h7yyBM3V7mv1BmTvQaG7s94M4W8TsrZkkEhGxYfvrucDQROm1HOex8wWGtLz8YQS
B0+IRAmrF8vlpUeWkPSRRTUD+4c3KTqn6EgMbjtt+u8HWODS/0CoaBzPLR48dZn7
w2n9vVX0EumRmuVSQdtKimtJQGgdovjxVF1aUUgZ1QuMzB6vuXp0Pt1fDlc8T8vt
UHD0cdFTEbyQ8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:05 2025 by rpki-client