Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
File: gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json)
Hash identifier: 63gLxkOy9E5R38SiVJEyr/yY+izU9b2EeTfKBskMsAY=
Subject key identifier: A0:F3:E1:F5:0C:CC:15:7A:E2:B2:2E:DF:34:BA:A8:3E:0E:5D:E4:4C
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial: 0199FB7CBC2FBBF1C844DB7B28B74B4590F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
Manifest number: 06FC
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: HuWSmht5WAvI31ALVxohsMAOFVU.roa (hash: NEqYNw5Ua7Qih23DC5eW2LfJiM7edWxcLo1N0yMRd5I=)
2: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: johgt1YSa5Uq8+y3mKiakSm0wkUd/zL3wcE0n1u3rm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bc:2f:bb:f1:c8:44:db:7b:28:b7:4b:45:90:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=a0f3e1f50ccc157ae2b22edf34baa83e0e5de44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:98:83:96:81:b6:23:e7:ee:61:e4:ec:4b:
83:e9:9e:91:83:ce:59:1e:5d:16:d1:19:68:9e:14:
76:22:5a:fe:23:34:0e:7f:26:dc:09:e7:3f:44:84:
8d:e9:15:c9:df:b9:f2:d6:34:05:20:d8:ac:e6:70:
9b:60:44:46:b5:fc:dc:8e:c8:ab:75:4d:90:4e:c1:
0d:8d:f5:73:44:6a:10:31:49:79:7f:62:25:9d:8a:
29:19:1e:9b:5e:19:53:ab:34:75:82:1a:79:22:eb:
fd:ab:d1:cc:46:80:ef:93:46:b8:36:87:b2:89:72:
43:43:a1:76:d2:cf:fd:71:25:d1:d0:d2:16:5d:a9:
b5:25:ba:03:0d:b9:90:59:f3:8a:f8:cb:34:7a:2c:
23:82:f5:0e:bd:a5:30:bd:c3:b9:10:99:57:f0:0f:
10:0e:12:2b:99:db:3a:56:b2:df:71:4a:cb:c8:fd:
02:d5:41:17:f5:65:fa:55:0f:96:fd:2c:c9:b9:ba:
d0:b2:0c:07:9e:9e:10:0d:48:33:ea:1c:ac:35:86:
ae:61:69:6e:a7:bf:90:2b:5d:88:9b:2a:de:c2:37:
41:53:a1:15:65:f8:1f:c9:f4:4b:48:84:22:64:4e:
0c:e2:58:b7:c0:a9:76:33:8f:4e:6a:c1:d2:3b:cf:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:E1:F5:0C:CC:15:7A:E2:B2:2E:DF:34:BA:A8:3E:0E:5D:E4:4C
X509v3 Authority Key Identifier:
keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:76:48:25:d5:25:c0:71:02:2f:99:fc:67:f5:62:2d:b2:c1:
02:b7:fd:fa:60:0c:cd:d3:27:c5:be:c7:67:3c:f7:f9:e4:6c:
9d:84:41:c9:dd:dc:a7:be:b7:8d:ad:b6:f7:93:95:59:e7:87:
f5:14:5b:30:8b:db:54:1a:af:6b:cd:dd:7b:c1:01:c7:71:b7:
37:e1:6f:6e:31:35:5b:de:85:a0:af:fb:af:e4:65:be:98:62:
56:38:8b:e1:17:a4:d5:49:6e:12:4e:41:50:d9:45:b1:69:6a:
5a:2f:29:22:a9:87:28:77:be:52:5c:98:ce:37:d9:f9:0a:0c:
54:a1:46:81:2d:b0:17:32:ae:98:27:86:3d:35:88:e3:c5:15:
c4:39:50:f4:b5:ab:78:80:3a:f8:e4:22:4e:3c:be:1a:d7:67:
ee:b0:8b:eb:14:4d:52:7b:a4:98:23:a4:7e:90:04:f7:cd:fe:
c7:fc:e6:1a:4b:f7:09:c8:d8:d9:fe:64:90:2b:f7:5e:1e:06:
b1:bb:2d:89:66:d1:b7:a1:75:76:d2:8c:bd:a2:f3:a5:e9:bc:
e4:c2:c1:a7:4a:99:a5:1f:d7:b2:28:ba:e1:43:cc:a2:b0:47:
0e:d0:03:9a:ff:37:40:2c:5b:d9:16:9d:4f:dd:1a:20:73:72:
08:1c:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:01 2025 by rpki-client