Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: JXeWOY8H+J2ieyZMIw32hOem7V1XbkDqpCaAGIHNFQg=
Subject key identifier: 43:4B:3F:79:28:EE:19:18:70:E0:81:3C:B2:57:ED:7B:3F:76:E8:18
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 0199FC8F4A886ECC27B01229C774FE445F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0C06
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: KmgGmtIfxSHd1XwYHSdBqNp5nhfwxgLT1iOjs5jjxQM=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4a:88:6e:cc:27:b0:12:29:c7:74:fe:44:5f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=434b3f7928ee191870e0813cb257ed7b3f76e818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:eb:a8:91:51:22:f5:2f:3b:57:a2:de:93:
de:a9:69:cc:5b:f3:a0:3a:30:c9:35:0b:aa:1c:cc:
ea:35:7a:a6:3b:6b:b6:21:49:10:d8:77:c2:dd:6e:
3c:2b:3f:ca:85:50:b3:8d:d5:f0:47:f7:43:19:e8:
04:86:63:38:77:25:19:23:b5:e0:ee:d1:47:3a:eb:
a6:e3:ba:a5:6d:ca:b6:fd:c4:c1:d1:34:88:bf:b1:
5a:5a:60:1f:bb:3f:ab:76:cc:de:92:70:67:25:2c:
3b:11:62:69:9b:02:d1:ee:ff:80:a6:61:ff:d6:39:
b9:5c:0e:28:06:0b:58:fe:cb:7b:e9:a0:4c:2a:e9:
3d:1c:12:de:1c:03:75:4a:6b:4f:f9:88:39:17:72:
20:59:ad:b0:b7:aa:02:fb:9e:2b:50:42:39:0f:51:
ee:14:34:30:09:0a:2b:4b:e9:9c:b1:0d:d3:47:68:
ac:32:56:39:f4:6f:72:96:1c:a9:7a:8c:dd:db:97:
c7:3a:24:fc:5d:b0:e9:dc:44:72:a9:ea:25:d4:e7:
a1:69:43:74:7f:24:56:c7:2d:96:d2:b0:5c:c4:4a:
10:03:d1:1e:dc:bd:39:60:9e:19:ae:b8:ef:68:03:
32:e6:1a:45:ba:72:c5:c5:38:de:44:b1:2e:a9:ad:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:3F:79:28:EE:19:18:70:E0:81:3C:B2:57:ED:7B:3F:76:E8:18
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:67:8c:41:d1:6c:f5:23:29:7f:21:77:5d:05:ba:95:2e:
01:3a:6c:3b:cf:41:aa:e4:ac:10:b1:6f:a0:ce:bd:06:8c:9c:
41:50:2f:63:03:b8:28:19:24:1c:30:05:99:41:c8:09:cd:f8:
23:ce:e6:0a:1a:97:48:75:45:4f:08:bf:29:ac:cd:bd:92:29:
d6:67:a0:97:ac:e4:77:ab:5e:13:3b:fd:47:2e:39:0b:25:c1:
f4:43:df:f9:03:ca:35:c1:71:7f:4b:28:9f:ca:8a:7c:2c:b3:
0a:23:43:d4:6f:a1:a8:0e:b2:cf:74:ee:c2:f9:89:57:92:a2:
bd:7a:30:5f:28:d0:13:96:b0:fe:3c:0e:e8:ec:bd:c4:eb:7e:
7c:ce:7c:42:1a:e6:d4:67:ae:aa:40:9a:f4:56:ac:24:f4:37:
c1:6c:b7:11:3f:ca:fc:70:b6:61:fd:53:b0:99:b5:81:99:c5:
bb:52:5e:bf:22:82:5a:50:b1:bb:b5:4c:38:ce:7e:87:34:4c:
4b:a2:d4:c5:f3:fb:09:26:c4:7d:a8:75:0f:41:23:94:71:51:
ca:fb:51:8a:23:bf:4b:27:0f:e7:c1:28:d8:53:7f:02:dc:7e:
c7:4b:42:43:49:67:f1:f0:6b:19:18:70:48:5a:ee:e4:73:e9:
93:cf:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:49 2025 by rpki-client