Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: K19IvuD4CMYJhhTeRac4iortQVOLIMIqg28OufQbNhw=
Subject key identifier: 0D:11:B4:48:CA:4E:C3:5C:84:0E:51:60:C0:CF:16:BA:F7:0D:7C:F1
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0199FD6B3131F59C318E20CE0E60C4811D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1717
Signing time: Sun 19 Oct 2025 17:01:24 +0000
Manifest this update: Sun 19 Oct 2025 17:01:24 +0000
Manifest next update: Mon 20 Oct 2025 17:01:24 +0000
Files and hashes: 1: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
2: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: xwo6cefYfWtc2IIpi52iHdQWouBs4loOk9RnfcOQZew=)
3: xsF-Dd6o-l_a87roQtNh3lGC3vI.roa (hash: ZsJnAVgXupQhihFkS/Z0iHmXyj+ORB01GBNhDS2qOK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:31:31:f5:9c:31:8e:20:ce:0e:60:c4:81:1d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Oct 19 17:01:24 2025 GMT
Not After : Oct 20 17:01:24 2025 GMT
Subject: CN=0d11b448ca4ec35c840e5160c0cf16baf70d7cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:f5:16:9a:35:39:d0:b7:c2:0c:f1:2d:7b:
df:7c:de:1a:4e:53:0e:6b:5b:86:71:ac:26:67:97:
b8:00:e8:d5:fa:ae:0f:2f:e7:58:c5:bb:1c:50:69:
b7:eb:05:c7:c0:c9:b2:1b:c2:81:06:13:86:7f:57:
16:9e:ad:71:d0:36:8b:8b:4f:0b:85:ea:02:ae:50:
04:1a:fe:41:e7:98:fe:01:9a:57:1a:30:87:30:59:
f9:8c:39:8a:12:69:14:32:81:46:63:97:22:d7:0b:
6e:1f:df:90:1c:74:ce:32:35:33:88:05:f8:33:8e:
2d:40:0b:2e:da:ca:cb:27:ab:9d:6d:57:c3:4b:3b:
58:18:fc:4f:c3:19:90:04:37:30:81:17:7b:9d:07:
c6:90:44:66:f7:02:96:ac:96:cb:55:cf:ab:43:94:
a4:cd:33:20:53:e2:58:a8:18:3b:a7:6f:81:f6:fa:
60:3e:b4:8e:45:c6:ea:9b:88:ab:8c:f5:7d:8f:c4:
66:8a:87:16:b2:7b:05:20:a6:9e:bf:95:98:e4:6b:
41:87:3e:3b:66:dd:cf:b1:58:1d:ec:fa:e4:6a:f7:
7c:75:da:23:74:4a:86:8a:c1:41:e4:d9:b1:af:47:
51:e4:91:d8:d3:07:a8:26:29:cc:25:85:51:0c:0e:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:B4:48:CA:4E:C3:5C:84:0E:51:60:C0:CF:16:BA:F7:0D:7C:F1
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:a0:3c:c9:e7:17:3a:02:51:a0:a9:76:3d:d3:13:16:80:
2e:af:89:f4:cd:cd:d9:0b:b7:52:1a:3f:87:5f:1c:22:50:42:
4b:8f:44:8b:bd:0e:94:c6:68:f5:b0:e9:2d:5a:4b:7b:75:d5:
2f:5e:04:87:3d:ca:de:93:8b:e4:98:6a:a4:96:9a:e0:40:11:
4c:08:5d:96:5a:ed:b4:92:7e:27:cd:2c:80:94:41:18:17:e4:
a7:bf:e5:04:c6:28:ce:05:f8:42:b5:a7:33:6d:80:c9:d4:57:
39:37:70:15:23:35:06:8a:42:83:89:67:9d:e2:a1:45:ad:c3:
7e:f0:07:ff:79:8a:07:87:60:1c:17:c3:8b:3e:95:b8:d5:86:
b1:33:03:b3:65:78:e6:70:f7:aa:ed:f1:1b:15:0e:b6:d6:c7:
2d:89:68:10:1f:c2:e7:6b:8c:81:f7:fa:c0:86:79:6f:8f:5e:
44:ae:9b:34:87:13:d7:75:32:fb:3b:1b:5c:81:e8:f0:45:dc:
e2:27:33:3d:71:80:f8:61:1d:f6:26:57:96:f5:2d:81:64:40:
8d:b4:20:80:8f:0c:e4:f3:f2:6b:51:58:05:1a:62:82:89:41:
74:63:86:b9:fe:02:c9:71:02:7d:fd:a7:fa:b5:22:64:e3:32:
f5:74:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:03 2025 by rpki-client