Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: cnJHlP+5wDNpvOPazIe6UNz0yVVjI9ICKmeVsMCB8mw=
Subject key identifier: BA:2D:D9:FE:EA:85:0C:86:3E:F5:F5:DD:8B:82:2C:A6:E7:A0:D0:DC
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0199FC8F1A2E2EC7BAC6A408A15C11A3A637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: n/ysNFz9EvT1YHDzLtP65JJyX/cv8I+HS8A4C0ui028=)
4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1a:2e:2e:c7:ba:c6:a4:08:a1:5c:11:a3:a6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=ba2dd9feea850c863ef5f5dd8b822ca6e7a0d0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:13:38:2f:37:ec:1b:25:22:77:47:ea:2e:
65:12:96:d4:f4:db:37:d8:6c:3c:15:ee:b0:a4:93:
20:67:8d:5b:50:4e:77:95:28:c4:f6:8b:2c:57:17:
49:d2:a8:7f:b1:c2:83:10:26:36:aa:38:1e:58:9d:
f1:60:d4:b6:e6:82:3c:f9:ab:dd:30:c4:83:63:65:
6e:f9:d7:10:bb:bb:1c:e8:82:96:7b:cf:0d:92:96:
66:c9:4c:7d:b8:22:36:7d:e2:96:f4:31:bd:c5:3a:
fa:36:e0:60:64:c5:0e:d8:c8:37:fd:b5:cd:c6:a8:
a1:fa:55:33:7e:75:dc:e7:a0:03:61:e8:6f:2b:dc:
47:84:63:c3:5a:b6:59:01:da:43:3b:af:ec:ca:95:
f2:70:aa:65:e0:ce:43:ae:fd:28:45:0a:60:d3:96:
b6:5b:5f:56:6b:4a:9d:23:bf:eb:ae:63:09:65:9a:
ad:e5:f2:37:5e:7f:36:b5:47:08:06:68:9d:a2:1c:
77:dc:d9:bb:2a:31:a7:94:df:6a:d1:34:d2:d0:e7:
d0:54:4b:b5:c4:8c:90:c5:57:e2:c9:f1:c1:8a:22:
9c:1c:63:cd:ac:4b:f1:ec:ea:06:dc:b0:37:c7:c0:
6e:30:23:40:16:09:c8:b2:28:65:c7:bc:3e:b5:41:
57:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:D9:FE:EA:85:0C:86:3E:F5:F5:DD:8B:82:2C:A6:E7:A0:D0:DC
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:88:33:1c:c8:9c:ff:11:42:fc:c2:d9:49:d4:f1:56:8a:
25:5a:f4:aa:9d:00:2c:3e:3e:8d:63:f4:54:21:75:77:18:67:
f4:a9:75:b3:23:5f:8f:fb:43:5d:e3:6b:c2:bd:73:5e:ad:06:
6b:cf:fd:d3:55:21:d8:64:db:30:97:39:46:a2:44:ec:c4:2f:
b6:92:ba:8c:01:b9:59:48:07:21:8d:6f:eb:b5:a2:0d:5d:26:
22:55:bb:54:cd:bb:a8:4c:10:f3:a4:b5:ec:55:38:38:99:49:
8a:73:a6:6d:6d:3a:23:04:c5:cd:bf:f2:39:ba:3c:04:15:75:
6f:ab:c7:0b:de:fe:03:93:17:45:7f:83:71:32:be:7c:ec:66:
2e:b7:c1:80:95:53:ef:c1:e3:cf:0b:6c:9a:ba:cd:5c:ce:76:
f2:3d:a3:8e:29:77:31:39:4d:42:55:a8:b5:b4:15:23:fb:7a:
b9:09:33:7c:f4:db:d8:5e:5d:7f:31:5e:a2:bf:9c:9f:da:ce:
da:b4:2e:ac:a1:e2:7c:84:b1:2e:91:24:e8:a1:f7:1c:91:23:
25:ad:6b:dc:3f:bc:ec:cc:f9:c4:d6:92:25:ef:0d:2c:9f:dc:
4b:a3:48:4e:5f:60:4f:6c:5d:49:1e:9b:30:38:d2:98:44:9f:
72:c5:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:28 2025 by rpki-client