Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: 6xzZOq6W3bttkgs7UrJCzhEXmIwTAQHoqtiPhs3mE9Y=
Subject key identifier: 5C:5A:4D:A8:4C:FD:ED:95:4C:24:EA:25:0E:97:B7:2A:E5:DE:2D:DB
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 0199FDD92EB8DDCC2C3D12D31908C6B9CAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:32 +0000
Manifest this update: Sun 19 Oct 2025 19:01:32 +0000
Manifest next update: Mon 20 Oct 2025 19:01:32 +0000
Files and hashes: 1: 1H2Y74rOLQCMhy2O3X9ouFiEkFY.roa (hash: fzT1x1Cd9KzjMSBAyqcBMyBoif3guu8C9asSN6fBGTo=)
2: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: W0wBntnB6Lf4mLz1si9qFDjwKNsoP8gORSGQqDBhRZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2e:b8:dd:cc:2c:3d:12:d3:19:08:c6:b9:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Oct 19 19:01:32 2025 GMT
Not After : Oct 20 19:01:32 2025 GMT
Subject: CN=5c5a4da84cfded954c24ea250e97b72ae5de2ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:0c:6a:5c:86:d0:16:c3:ae:e0:59:42:e8:
6e:ec:1e:ad:dc:8f:83:44:30:b9:ac:4b:cf:5e:af:
40:c6:1b:3b:23:d3:ea:b5:8b:13:6d:68:3f:30:3b:
b1:c6:ba:d0:26:3a:30:39:4e:9f:0a:b2:a6:35:73:
af:c1:0a:8a:ce:61:15:f5:62:da:28:47:13:ba:45:
05:a6:4c:c2:61:10:c0:b0:31:6e:53:fd:cc:2d:7d:
67:29:ff:bc:66:77:f1:71:36:28:2d:d2:d0:31:05:
e1:1f:30:4a:b8:6c:62:e7:76:0d:83:7a:37:81:67:
4f:56:0f:08:0f:41:a7:8a:59:d8:c6:51:89:0c:19:
73:55:70:ca:77:71:bd:cd:89:0e:d6:81:78:d6:7e:
0d:7c:a4:83:49:58:04:2c:06:0f:c5:0f:60:e9:16:
ba:a2:2d:bf:3d:37:2d:e5:e2:8f:f8:55:2b:7e:c1:
45:70:65:ae:a4:e8:4d:0c:d0:d0:50:7d:49:56:bf:
fc:ae:38:6b:0a:8d:8f:a3:16:91:45:10:8f:cb:5b:
91:c8:24:c5:56:b9:bb:82:02:bf:48:01:c0:53:68:
d5:37:f9:a5:93:f7:7e:e6:5f:98:30:23:1b:2f:75:
4a:97:ac:dc:5a:c6:ea:92:a0:7c:33:a0:ec:0b:5e:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5A:4D:A8:4C:FD:ED:95:4C:24:EA:25:0E:97:B7:2A:E5:DE:2D:DB
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1f:40:e2:4c:9c:94:e9:cd:cf:fc:d6:28:88:35:93:b8:72:
62:18:dc:49:45:87:74:d8:a9:4f:ee:78:a1:06:a3:ff:41:04:
34:14:be:d0:94:fc:f7:0f:9b:3d:8f:ea:d0:77:c9:88:9a:67:
8f:4f:78:e5:70:46:d8:95:16:10:59:43:61:a5:ec:d4:51:97:
41:df:6a:28:95:b0:ca:ac:5a:bc:1f:6d:6d:da:4f:be:46:2c:
0c:50:e1:b4:e8:f3:46:38:fe:a0:ce:41:3c:07:a2:80:a6:f2:
13:87:73:bc:78:d5:34:c2:d3:b9:26:68:7f:a0:b5:1a:84:cc:
37:14:4e:d1:84:ad:0b:88:67:34:55:84:bf:0c:6e:9e:a0:e0:
7c:42:b9:2f:55:8f:74:74:1e:3b:e7:ba:38:6a:19:79:94:9a:
cf:38:c8:c6:80:b5:2d:66:37:7d:85:f5:a1:cb:a9:2d:20:4c:
b2:6f:ab:a1:7b:c3:99:6d:8f:2f:e5:f3:c9:d3:be:1e:b8:47:
30:a8:51:78:b8:8a:d2:10:ec:18:7c:c3:e1:67:1f:04:76:c6:
ec:ad:39:59:24:e9:55:6a:bc:5c:16:ee:5b:2f:45:db:76:ae:
54:e5:03:9a:8b:78:25:b2:e7:7e:2b:6e:be:af:54:3e:47:d3:
66:b1:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:59 2025 by rpki-client