Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: CCsDwc5HaiNI3F/PQPRQwtjS3FOvatEM5QV5ETWZzKI=
Subject key identifier: 5A:68:F0:3A:F0:1E:39:6E:D2:D8:4F:BE:7A:01:FB:41:12:C2:58:60
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 0199FF227AABD4C536CBA8CAB256BC5EA5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:13 +0000
Manifest this update: Mon 20 Oct 2025 01:01:13 +0000
Manifest next update: Tue 21 Oct 2025 01:01:13 +0000
Files and hashes: 1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: KFgaSqQ/wWmLkhtJ7SI8SKhtsl76+7XfKlhtsuGVZYU=)
3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:7a:ab:d4:c5:36:cb:a8:ca:b2:56:bc:5e:a5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Oct 20 01:01:13 2025 GMT
Not After : Oct 21 01:01:13 2025 GMT
Subject: CN=5a68f03af01e396ed2d84fbe7a01fb4112c25860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:f4:fb:10:1e:89:cc:3d:2f:0a:02:ab:8a:
84:df:35:0c:31:ec:10:2a:a5:be:a5:87:79:46:47:
44:8f:8f:af:c3:23:b5:ca:87:97:ac:70:cd:7b:82:
4e:4c:96:da:d1:4f:0f:c6:89:a9:8e:db:e1:69:ff:
0d:db:b0:80:5c:50:e9:2b:67:4a:ca:5f:0d:d4:47:
48:49:11:36:c2:a3:74:17:e7:96:2b:32:5a:7a:27:
c4:f8:3c:36:3b:3f:f6:34:5a:d6:a5:43:0c:a9:52:
79:68:12:08:0d:f5:42:b3:8c:ff:cf:9d:50:a0:81:
6b:4b:93:d7:fd:fd:14:f7:df:6d:89:c8:04:cb:5d:
52:d1:da:69:dd:90:db:dc:ad:b3:64:b5:da:a0:4f:
17:6a:0d:a3:25:5d:23:63:05:ed:54:8d:d3:cd:fa:
9d:7e:9d:53:e6:e6:d3:f1:34:b3:5c:2f:13:eb:8d:
9d:48:03:40:6d:d6:23:3b:d8:23:a6:b4:18:da:61:
2b:7e:87:21:32:72:f3:ea:c2:57:3a:ab:69:38:66:
74:7a:c0:02:24:ca:d0:97:0f:af:ae:fc:1e:d6:50:
99:9c:84:6e:e5:19:cc:1e:a9:05:c0:ea:31:42:b2:
24:e5:37:1d:2d:74:bf:9a:f2:8a:78:ba:02:08:51:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:F0:3A:F0:1E:39:6E:D2:D8:4F:BE:7A:01:FB:41:12:C2:58:60
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:64:9e:67:9b:00:c5:0f:22:1e:bb:1a:eb:65:80:be:29:
2f:21:76:71:3b:88:78:0d:36:c8:c7:21:67:8a:62:fd:1c:28:
39:fb:a0:bc:40:e4:bd:8d:b7:d9:27:ea:9c:b9:2b:db:53:33:
ba:eb:38:ea:05:43:53:df:42:9b:bf:63:db:58:c7:f1:4e:a9:
25:7a:a5:30:4b:db:53:23:65:ee:bc:1d:65:c9:71:52:a8:58:
d8:61:e8:78:1f:4f:e7:e8:e4:4a:b2:43:21:8e:52:df:de:06:
28:c6:23:fd:d5:1b:9d:a6:3d:8f:fb:93:75:3e:9e:de:ff:d0:
b7:cd:ad:ed:a2:92:eb:61:d5:5f:ca:c7:0a:a7:9c:a7:44:2e:
d8:3a:2d:ad:10:d4:ec:1a:20:3d:52:a0:bd:2f:36:30:01:57:
8a:8f:6e:bb:c0:0e:99:23:66:8b:1b:c3:18:d9:0a:b0:56:3a:
23:02:bc:c2:d6:4b:df:c2:66:86:7f:95:c2:40:91:90:75:e4:
ce:cb:34:63:72:5e:a2:cf:49:3d:d4:3b:19:7d:08:4d:7e:26:
ea:c2:70:5e:3a:5e:53:f4:b4:7c:93:0d:a2:20:20:9d:f6:cc:
fc:9a:0f:51:f8:1d:41:16:c6:0f:6c:f4:ab:92:32:7e:73:23:
7c:fd:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:40 2025 by rpki-client