Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File: g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier: AGrYntQ6zaS2d5NbNiQStbw2KPhp707xsXPssW8xHNU=
Subject key identifier: 8D:3A:C4:13:F8:25:31:32:A4:26:10:0D:EE:48:23:45:FA:1B:A2:48
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial: 0199FBEB9DF0B6AB4B24DF35867E721E3ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number: 16B2
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: 3H6JuUlu8cf1X0MYKTF/iWtDwVPECMqCivNU/PhD1hM=)
2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9d:f0:b6:ab:4b:24:df:35:86:7e:72:1e:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=8d3ac413f8253132a426100dee482345fa1ba248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:ad:5a:a2:93:36:8f:be:c2:6d:fc:06:5f:
8b:1d:b5:9e:26:53:44:d9:0d:e6:de:4b:68:ff:11:
d8:0a:7c:b9:04:c1:fe:71:ab:17:84:76:df:95:11:
47:92:91:ca:58:9f:0f:78:21:ad:98:45:c2:53:f3:
04:9c:43:1e:4e:cc:2a:7d:d3:8e:39:9c:87:e7:13:
6c:23:f3:ca:17:97:e2:0f:f4:da:7e:ae:99:97:d2:
49:fa:cb:52:e5:ae:a9:26:5c:49:57:d2:af:f4:82:
f7:45:c9:f4:64:6b:62:e2:e4:dc:e9:3c:08:12:16:
08:52:41:1a:78:a2:c3:13:e6:77:55:4c:46:ac:e9:
c7:b4:b7:17:3a:6f:50:e3:f1:fc:f4:54:c0:b8:b5:
c6:4e:bb:d6:b7:6a:f7:8f:93:91:2b:70:0d:67:be:
6b:ba:19:93:ab:62:18:2c:91:99:28:a5:e9:38:1d:
09:af:80:41:7f:c6:85:4b:1c:d7:a3:c4:ad:e5:3b:
65:c4:5e:54:d9:38:53:0b:0f:82:1e:00:36:18:70:
d3:b7:8e:d2:1e:5e:f8:be:dc:ed:a9:08:ef:d9:d6:
67:c0:43:5c:8f:a4:b9:78:e9:dc:e2:b7:6b:13:4b:
d0:d7:10:1b:a6:d9:d7:eb:de:93:ee:d0:84:8f:93:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:C4:13:F8:25:31:32:A4:26:10:0D:EE:48:23:45:FA:1B:A2:48
X509v3 Authority Key Identifier:
keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5b:dd:7a:e9:46:3d:39:22:ac:ea:2f:64:48:66:8d:27:9e:
99:33:51:e5:03:52:24:24:e3:82:e3:8e:c1:18:ea:ac:07:ed:
d9:6f:b4:c3:bf:98:e4:e7:8d:70:6f:1b:f8:0d:62:5c:4e:68:
e7:61:5a:f5:00:72:c8:b3:33:ce:3e:cb:f0:42:8d:3f:60:c7:
c6:5e:93:66:c4:8a:7e:93:8d:42:20:ac:7d:12:f4:64:27:50:
36:64:91:65:54:6e:63:f6:5a:5d:dc:e8:14:3e:21:b9:2f:2f:
ec:ee:0a:df:10:dd:63:35:64:b9:73:c5:1a:d7:6a:58:34:db:
f7:7a:51:57:51:65:8a:59:9c:94:7c:72:42:3b:c0:85:94:55:
7a:46:98:57:fb:58:13:08:cf:e8:12:29:6b:e3:35:f5:71:84:
ab:eb:62:09:c9:a1:32:77:a6:96:21:ff:d0:61:f6:b9:fc:6b:
d3:ac:8e:04:ac:75:e7:7b:c4:7f:06:d0:5b:8f:7c:cd:16:9f:
f2:f1:18:c5:00:0f:df:47:36:e7:83:28:52:35:f6:65:ed:1a:
0d:24:0b:c8:34:85:ea:c4:ea:88:cc:7f:d9:21:10:de:2a:57:
a2:cf:33:b4:d3:68:c2:c9:71:4c:cc:59:a3:7b:c1:1d:83:51:
68:3d:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:34 2025 by rpki-client