Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: U4pUcV2Y1zNS89jjtXD5LV7eAmmWdfr2uESljE9fNb0=
Subject key identifier: 18:99:9C:C0:75:AE:11:C1:40:B2:AE:E8:5E:3E:07:59:73:CA:B2:CE
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 0199FBEAB575401DEFFEDD2B539B08EBFB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: EpWzmJSV342Kf7uzIn1XhgcLooxTYYNfOb86Gfg4m2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b5:75:40:1d:ef:fe:dd:2b:53:9b:08:eb:fb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=18999cc075ae11c140b2aee85e3e075973cab2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:48:60:f4:a6:93:f5:76:28:fc:ed:f2:04:
d7:8a:0a:16:3d:32:62:11:28:da:1d:ac:3b:41:a9:
0b:bc:fd:cb:de:c8:a5:06:84:a9:ea:0d:56:db:57:
b6:c8:dd:69:64:0c:6d:de:db:e5:6b:e1:84:07:04:
a5:e5:76:fc:5f:79:6d:2e:6e:a5:05:17:46:4a:de:
4b:83:53:23:72:7e:79:34:ed:1f:19:c3:bc:cb:68:
41:4c:cd:3d:32:c2:2c:25:a9:01:2a:c2:14:74:55:
ef:71:17:0d:64:63:93:cf:11:64:e9:18:49:45:87:
05:d6:6d:31:67:16:2e:36:14:52:d5:70:ef:cd:b3:
f8:ce:7a:f9:f2:29:07:eb:35:aa:b6:a1:4d:83:45:
19:ef:42:6e:3f:ff:a9:e1:95:d4:8c:09:3a:cb:98:
58:50:f7:b1:0f:86:3d:40:aa:a1:65:32:43:05:ad:
ae:c3:1b:ac:95:9e:61:5d:ce:64:72:6c:1c:66:cb:
f9:af:15:6a:68:75:fa:bd:2e:b9:e1:1a:ae:99:3b:
73:87:f2:45:77:ec:82:f8:9c:d0:a9:e6:dd:8d:1b:
33:6c:7b:ec:1b:21:ef:33:6f:d5:3d:c4:0d:41:08:
18:9e:2f:eb:0d:f4:d0:d2:88:69:a0:61:ed:7f:73:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:9C:C0:75:AE:11:C1:40:B2:AE:E8:5E:3E:07:59:73:CA:B2:CE
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:80:3e:ed:83:72:8f:8a:99:c8:cc:58:41:86:fd:85:8e:89:
40:0f:64:9c:2b:31:91:60:cd:04:3e:7c:22:81:b8:4b:0a:54:
29:bb:02:38:69:b4:a2:f1:39:03:2d:d8:ea:7e:5e:ec:72:f3:
5c:94:f4:16:d7:f7:23:15:48:16:24:b5:1f:44:fb:35:c5:d1:
73:4e:9a:6e:ca:9a:bf:6d:93:43:f6:c5:36:a9:4a:ad:e7:cc:
30:f9:52:af:04:cb:48:6a:85:c7:df:2c:0c:28:7e:4f:e6:9d:
85:cc:62:78:10:49:40:c1:49:5f:2d:5c:35:76:51:af:3e:af:
8b:ce:6e:5c:70:96:4c:5f:b8:e3:4a:32:c7:06:8f:eb:2e:71:
84:cf:69:ad:07:06:18:5e:ed:f0:99:77:ce:a6:7c:94:e8:77:
3f:da:47:42:18:2f:01:b9:bb:68:9a:86:f9:47:03:f8:64:ab:
d7:9f:97:eb:97:e2:c5:c7:ca:92:ef:67:bc:18:5e:1d:28:3c:
c8:d8:2d:ed:aa:86:14:41:c0:e0:e9:4a:ab:95:4d:d4:25:58:
41:6c:21:0b:2d:cc:8a:91:c3:1e:a1:1b:95:c3:dc:54:00:00:
cc:01:de:5d:39:d7:65:c5:4e:11:c8:eb:1f:c5:0e:79:6d:d7:
b5:c9:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:08 2025 by rpki-client