Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: vYgJt+iBXCxB550qAQp4ykj+6XbsAdPP9JYoYzxqKuk=
Subject key identifier: E7:61:E6:72:6A:A0:AE:1F:6C:A9:6C:AD:71:6C:10:47:E8:34:9A:8D
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 0199FE10203C7E29CA5D72AF95BB8824D670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 20:01:33 +0000
Manifest this update: Sun 19 Oct 2025 20:01:33 +0000
Manifest next update: Mon 20 Oct 2025 20:01:33 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: LqlQ5BwhPDsl3eU/yJvm8sIGtOnUe8UAWnjoDcSAEJc=)
2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:20:3c:7e:29:ca:5d:72:af:95:bb:88:24:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Oct 19 20:01:33 2025 GMT
Not After : Oct 20 20:01:33 2025 GMT
Subject: CN=e761e6726aa0ae1f6ca96cad716c1047e8349a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:61:32:95:39:12:14:c6:65:e1:f2:10:48:
93:88:98:45:39:17:20:b4:f8:b2:a1:71:bd:23:2f:
dc:5e:4b:de:68:4e:be:ed:86:63:d9:47:5f:b8:f5:
8a:60:3b:15:92:17:ae:35:2a:fd:5f:1f:ac:99:41:
ad:c6:0f:37:ca:d8:8b:bc:82:19:98:19:d5:b4:21:
28:63:c5:9e:7c:60:ed:89:ab:e5:9f:bc:92:19:94:
4b:95:46:25:5f:49:f6:83:3c:fd:ae:89:93:04:1b:
6c:d9:25:94:63:4f:e7:b0:f3:0c:64:4e:2b:35:69:
41:71:aa:de:7b:0b:c1:66:13:04:dc:7b:c3:52:6a:
07:6f:17:43:f3:f1:2e:79:62:c5:45:b7:19:f3:5e:
84:10:41:96:ef:8a:53:43:96:09:5d:9e:be:dd:a9:
e3:04:87:45:50:ed:7b:a5:0e:f8:ca:1a:e8:b7:75:
a6:d5:d8:88:eb:1c:2c:58:4d:63:ee:a9:98:23:bf:
14:76:d0:ce:f3:95:11:2c:bd:65:9b:fc:34:21:8e:
39:b6:c3:6f:16:84:34:09:0a:11:60:38:a5:f5:f4:
56:9f:ee:34:c2:22:f0:d1:3a:82:60:a3:b8:9a:81:
27:cc:80:6d:5b:34:ae:54:8f:3a:62:83:94:c5:f7:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:E6:72:6A:A0:AE:1F:6C:A9:6C:AD:71:6C:10:47:E8:34:9A:8D
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b0:76:7b:ae:cd:4d:ca:88:5f:83:13:cd:f1:b1:47:e2:cb:
54:74:40:a2:2f:69:4b:cc:30:b7:06:58:72:c9:2b:c6:bf:fc:
cb:47:cd:4c:28:66:c3:be:f4:6f:bd:5f:5e:30:b6:28:a3:e8:
02:dc:7b:80:c7:08:6f:29:58:a5:95:e5:bc:fe:91:5d:f5:09:
ba:86:56:23:6b:7e:9e:80:b4:eb:6c:3e:e0:bd:e4:b8:b7:aa:
d3:74:65:69:db:90:1f:d2:2e:e6:ac:8b:e7:a7:30:19:cc:45:
1b:eb:25:dd:91:9f:f0:71:75:bf:b5:fe:19:a5:ef:88:e3:8b:
fd:12:bc:cf:af:6a:31:20:8b:8d:54:2b:07:11:ee:19:fb:9d:
65:24:a4:fd:cb:f8:69:bd:ce:de:7b:5b:04:6e:01:ae:50:9c:
73:96:a8:46:b0:09:9b:84:0e:fb:75:4c:39:f8:a0:44:d7:86:
07:95:01:23:05:a9:81:44:3a:d1:17:15:13:eb:c6:62:24:93:
ae:d7:d9:3c:7f:3a:14:78:d4:ae:da:bd:f1:c1:c5:e6:0e:72:
0e:37:6a:80:35:af:04:11:61:4e:e0:6f:6b:7b:e2:b9:94:85:
db:50:df:86:7a:ac:0f:b2:0d:b1:85:a6:0b:a2:75:77:63:7f:
9c:6f:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:09 2025 by rpki-client