
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: ITeNsone9m2xxkMk9C7jpKJE9bz8LatyvIdlCbe8yOk=
Subject key identifier: 2F:52:D4:D4:63:2C:27:EF:FA:59:22:D8:44:D7:CF:B5:60:35:61:82
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 0199FC591253098CEB0027681988B5EF22EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: x/c84sss/EtcTCiD6qBmSwXO1MI9VxMDIMXGjAq/EKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:12:53:09:8c:eb:00:27:68:19:88:b5:ef:22:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=2f52d4d4632c27effa5922d844d7cfb560356182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:9b:81:af:ed:f0:c4:09:39:e1:bd:ad:99:
b6:6d:42:4f:d2:18:d6:8a:b4:30:fe:3e:6b:16:30:
17:ad:7a:c0:56:cc:e0:ba:2b:5f:44:e5:49:b3:b8:
65:7f:92:8e:53:e0:6d:f3:29:22:62:cd:fc:40:35:
d8:ad:03:63:1b:ac:4c:8d:d3:17:5c:7c:2d:51:1b:
c8:5f:e2:a4:0b:f1:5d:dd:4f:06:d5:a5:d5:95:c3:
a2:24:46:7c:3f:9b:a1:14:f4:59:8b:c5:51:79:19:
8d:97:2e:09:47:dd:92:91:88:37:37:58:36:85:d7:
fb:04:3b:4c:3c:37:d9:dc:3d:d7:8b:d8:66:a3:2c:
ee:78:24:f3:14:49:89:0d:bf:b7:51:53:4e:b3:7e:
d2:b3:70:7a:90:24:f0:e5:19:00:77:cb:8c:47:b4:
c8:87:93:d2:f2:a2:f8:73:10:94:98:95:c1:03:cf:
f9:67:3a:4e:88:d7:f1:54:c8:39:55:12:af:b6:fc:
88:a1:70:e6:af:41:7c:28:18:87:f9:f7:0d:be:63:
cd:75:bd:fe:53:88:42:ed:8c:3e:75:73:15:c1:4d:
cc:03:2f:c1:38:8d:72:f1:aa:ec:f9:a3:a9:57:cf:
cc:1a:ec:13:cc:22:86:d4:9f:57:fd:bc:2d:70:e3:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:D4:D4:63:2C:27:EF:FA:59:22:D8:44:D7:CF:B5:60:35:61:82
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:97:a5:2d:13:a3:88:fc:dd:f1:ca:11:23:1e:f8:54:3f:c9:
f0:80:8d:36:80:53:4f:86:91:58:07:a7:45:a3:ab:10:d3:15:
ce:8e:7c:1c:80:1e:a1:6b:8a:51:c9:c0:48:b2:17:81:ae:8b:
5f:f4:82:02:76:d0:b9:48:0f:ee:d0:21:80:b0:1f:17:fa:4c:
23:7e:8e:36:b7:1b:fa:9c:8e:23:6a:f0:8b:0a:aa:2b:0d:d4:
06:ba:b5:f3:c8:11:42:fe:e9:29:fa:46:e6:6d:50:cb:e2:2c:
35:6b:67:e8:2b:8f:94:5a:d0:aa:54:05:87:97:fa:56:1d:88:
22:36:3e:25:72:09:77:41:80:a4:c3:7e:6a:89:e8:8f:87:90:
8f:3a:37:a9:04:c0:8d:66:d2:1f:3b:09:9c:30:d5:68:cc:0c:
cc:94:92:e6:69:26:5b:2b:86:ca:8e:d5:03:d6:1c:12:05:36:
7b:3d:00:02:f6:6c:29:46:51:e5:04:06:48:25:ce:13:6e:3e:
be:25:2d:ad:18:86:d3:36:d9:64:ab:9b:77:b6:77:2c:63:9a:
56:d1:83:e8:6a:cb:8a:be:d5:8c:8c:ed:38:37:9a:6a:19:86:
51:d2:0e:8c:15:19:04:a7:26:b8:e7:e7:4e:68:d1:08:c8:e2:
13:e3:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:12 2025 by rpki-client