Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: FickQIQicoGOvLrjaIMkW9zOFo/YoYKJxDdtCpVC4mQ=
Subject key identifier: 1B:47:0D:FF:AC:FA:7C:47:C8:3E:09:AA:73:28:AC:08:AD:7C:EF:E6
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 0199FD3431D4EC8025D63C49DE30CF67722B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 118F
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: FtXW+ExjH+rUBa5b4sPqSwrZn3p8zICdfBDC/n0pIPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:31:d4:ec:80:25:d6:3c:49:de:30:cf:67:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=1b470dffacfa7c47c83e09aa7328ac08ad7cefe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:2b:b2:2f:4e:27:5a:1f:28:4d:26:9c:b7:
f0:c5:22:43:77:9b:64:5c:9e:c2:24:8f:4b:8e:63:
f4:6b:aa:b3:4d:14:72:04:30:39:06:90:c6:17:a6:
55:9c:11:44:c5:70:91:72:ae:73:db:43:0b:42:e4:
68:01:d9:a4:78:6d:33:42:b8:17:35:fd:17:31:f9:
a4:ec:23:2f:79:c7:6f:cc:8f:e2:fd:8f:3e:41:1b:
ff:78:c7:b8:18:e5:8f:ee:69:5d:fe:aa:9c:40:46:
09:fa:55:ca:10:f9:e5:8f:d4:b5:4c:46:b2:a7:63:
a1:b4:dd:3e:23:5c:0d:7c:df:ca:2e:d2:c8:6e:83:
ae:78:37:af:9b:91:82:84:51:af:26:2f:5f:6d:e9:
a1:70:75:f1:31:48:ca:8e:22:9f:07:88:e6:0d:e8:
f8:ad:46:47:2a:94:23:66:87:85:20:fd:97:c2:83:
c8:41:0e:ce:35:5f:37:e3:27:48:eb:90:87:c9:ac:
88:22:71:4b:c0:79:2a:e0:15:60:ce:db:b4:40:37:
ea:b2:6b:c4:db:3e:28:16:55:97:f0:82:dc:08:3b:
1f:e0:30:ec:08:17:f5:52:a2:44:9d:e4:aa:98:d9:
fe:1a:29:f7:12:ad:05:38:5e:63:52:fa:0d:7c:8c:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:0D:FF:AC:FA:7C:47:C8:3E:09:AA:73:28:AC:08:AD:7C:EF:E6
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:a6:9d:a2:7f:29:77:92:da:b5:2b:cb:6b:42:1e:ab:c2:
7b:01:04:0a:5f:39:9b:2b:0b:ac:d5:17:3d:2b:c9:11:75:d1:
16:42:e3:97:45:a7:f9:56:af:73:9d:0c:c2:b2:84:af:73:1b:
d8:5e:da:6f:38:66:a5:d2:9e:01:76:c1:2e:ef:8a:8e:aa:c4:
d4:e1:e0:78:c5:aa:cd:4b:47:5e:f2:8b:7f:44:6a:e4:64:7d:
6a:6d:7d:7e:b6:73:1f:d8:8c:01:2f:7b:5b:06:03:e7:51:84:
9a:69:c3:d2:50:d9:9b:70:38:90:c2:05:0b:91:73:b4:3a:83:
05:c2:4d:91:e8:e4:06:d0:e3:86:a8:b0:6e:28:8d:81:2b:ca:
f6:9e:22:6f:c7:99:6a:4a:a9:9c:36:97:55:66:6e:9b:f7:b8:
16:e5:bb:1f:b9:4e:d7:39:bc:9c:29:e5:51:d6:b9:af:75:30:
4c:b5:4a:eb:00:2b:e1:00:ec:85:fa:47:81:8a:0f:62:85:56:
3c:73:5b:7f:ce:2d:d1:38:53:e7:d8:cd:0c:b3:ad:30:ac:ad:
45:b9:cc:91:d6:2a:fc:42:ed:1c:36:72:32:81:c0:60:80:2a:
36:c3:fa:d5:e9:6c:9c:31:6e:08:c4:ef:ee:2d:45:4d:0f:f2:
51:07:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:00 2025 by rpki-client