Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: rygqY08scuzzZDFlu0L5CUyZ6XFLJQIyNpqCmdrrSfw=
Subject key identifier: 86:87:8E:9E:68:F1:E0:D9:E4:FB:D9:77:4A:81:C2:C6:64:69:D7:12
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 0199FE469B506EBD9FFC6D385B878064241C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1381
Signing time: Sun 19 Oct 2025 21:01:04 +0000
Manifest this update: Sun 19 Oct 2025 21:01:04 +0000
Manifest next update: Mon 20 Oct 2025 21:01:04 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: z5ZJBeoSJuCrqIvb/tk+OR49rLSEF1/Js436Yp+23D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:9b:50:6e:bd:9f:fc:6d:38:5b:87:80:64:24:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Oct 19 21:01:04 2025 GMT
Not After : Oct 20 21:01:04 2025 GMT
Subject: CN=86878e9e68f1e0d9e4fbd9774a81c2c66469d712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:5e:c8:b3:b2:c5:e8:24:d6:14:7f:1c:5d:
60:cb:28:90:07:f4:1d:86:52:58:b0:14:b1:30:4d:
74:5d:30:11:2d:85:b0:c0:54:92:46:c8:53:5f:0f:
fa:4d:09:84:94:28:e4:fc:10:68:0c:92:bc:a9:61:
01:98:57:2f:e7:6e:54:99:79:75:94:07:c9:8d:ff:
e6:a4:6b:be:cf:db:d9:dc:ee:17:5c:f1:cd:22:51:
ec:df:a8:7d:eb:4c:c8:3c:87:08:b6:2d:f9:d7:e9:
48:fe:79:18:1b:3a:30:85:7d:fd:bc:75:c2:f3:1e:
82:b5:b9:40:1b:25:43:f6:d1:36:da:93:74:ee:2f:
b7:4e:7c:2a:42:74:50:6c:31:7c:3c:d1:03:1f:cf:
cf:33:13:69:d4:0f:25:e3:0e:73:d2:e7:28:28:b8:
02:d4:ec:88:f4:0c:82:d3:05:2f:2d:28:7b:4b:b0:
d3:49:bb:ca:5c:ec:4b:ab:e7:6a:24:5c:c2:50:f2:
38:74:d7:8c:eb:c7:33:77:10:77:53:1e:67:9e:ee:
ce:32:44:59:77:2e:c2:61:ce:94:aa:e5:40:43:ce:
33:c7:8e:08:fa:f8:4b:d8:48:3e:d0:f4:26:45:53:
28:e4:df:64:fc:1c:fa:9c:ce:6a:61:39:42:2c:2f:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:8E:9E:68:F1:E0:D9:E4:FB:D9:77:4A:81:C2:C6:64:69:D7:12
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:85:6c:17:df:64:e5:47:d6:23:7d:e1:5b:31:64:f4:79:
69:e3:2d:3b:ed:fb:c4:98:78:18:9a:26:be:a3:c6:57:8b:1b:
5b:a3:1c:db:d1:84:7f:05:a5:32:2b:f2:58:c2:40:22:12:2d:
93:64:44:a0:9a:01:a5:41:3b:d4:0c:1c:39:3a:2b:31:a8:99:
97:91:22:f0:e6:33:be:a2:0f:7a:1a:48:f2:42:40:c8:a5:9d:
88:23:d8:df:23:08:43:2c:78:4a:1e:89:f3:a0:57:8f:5d:3e:
d8:81:02:8c:ce:c8:14:66:08:88:3b:27:68:ff:86:e1:ee:c4:
b2:b8:a2:57:82:d8:9b:34:24:4a:7f:63:e9:ec:97:6f:05:05:
e5:2a:4f:47:80:0f:54:38:3a:bd:2d:d8:bb:0d:6f:14:4d:b6:
b8:1e:03:54:09:32:a8:b5:4f:61:e6:65:b3:ab:1c:38:ea:00:
94:3f:3b:f1:78:72:b5:a7:40:e8:0f:d2:f2:c3:00:76:0a:87:
fa:a7:5b:3f:ff:24:44:1d:8a:48:c0:6f:b5:30:7a:d0:fd:3c:
de:b1:a1:60:7f:27:73:f2:0e:be:79:71:47:11:9e:f1:69:d1:
19:9e:ff:b5:09:42:e0:4d:c9:30:85:d1:10:ad:c1:40:a9:f3:
81:35:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:17 2025 by rpki-client