Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: 0sApzx0UVhfGw3g9k9zb5dCyhM7nGm154vAkM5AX3Eg=
Subject key identifier: 13:55:41:EB:35:D2:35:71:0C:16:1A:B2:3A:5E:00:CB:F0:A3:C8:44
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 0199FF23183EF15CAA32DE045DBA45E8B176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0AA0
Signing time: Mon 20 Oct 2025 01:01:54 +0000
Manifest this update: Mon 20 Oct 2025 01:01:54 +0000
Manifest next update: Tue 21 Oct 2025 01:01:54 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: TsnAysN+ZK9lRk5Be8eTsicZVvEcFP9fnp625pMrVRY=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:23:18:3e:f1:5c:aa:32:de:04:5d:ba:45:e8:b1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Oct 20 01:01:54 2025 GMT
Not After : Oct 21 01:01:54 2025 GMT
Subject: CN=135541eb35d235710c161ab23a5e00cbf0a3c844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:e3:92:a7:15:61:4f:b3:b5:e9:79:9e:21:
a2:bc:5a:cc:41:8c:65:ef:8d:84:ab:8b:79:a4:33:
f8:b8:ed:29:da:49:5b:e8:0b:2d:61:9b:c1:48:36:
be:35:ed:ca:62:f9:3a:32:7a:f5:49:80:19:62:7c:
c2:79:49:68:8b:4d:6c:dc:c5:9c:a5:68:ec:45:25:
d0:73:f6:9e:c5:17:4a:7f:c6:29:1b:b8:93:3a:d8:
e0:4f:df:ca:d3:dc:55:27:3d:39:1f:8d:af:8b:11:
7e:38:f8:95:fa:1c:3f:e2:21:fa:46:a8:4b:0f:40:
5b:85:67:18:00:a3:e1:ff:27:51:6c:36:78:f9:33:
71:67:fc:2f:6e:a8:e9:b0:8e:01:b5:79:8f:45:94:
c4:30:f2:d1:eb:a7:41:ce:18:3e:73:8c:a5:df:aa:
c0:6c:06:5e:10:bd:87:5d:f3:e7:b2:30:50:3b:ce:
6b:d0:de:5d:06:30:66:84:b4:b2:6f:f6:2e:bc:66:
40:e3:66:85:cf:4c:13:86:33:c5:f7:7a:e2:57:b7:
f3:33:44:d5:ea:ab:b8:34:c1:ae:00:36:7e:4b:0b:
e6:6b:8b:11:c8:59:35:86:a0:0a:a1:35:01:68:b1:
6c:c2:44:34:24:ee:54:4e:a1:24:d8:87:b9:90:72:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:55:41:EB:35:D2:35:71:0C:16:1A:B2:3A:5E:00:CB:F0:A3:C8:44
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f0:d3:49:c3:03:ea:ac:40:b0:43:2c:b5:56:55:64:5f:a2:
87:8d:a2:b2:6b:ff:54:c5:8d:63:dc:df:58:8d:1f:a0:69:92:
6f:f1:6e:e8:68:31:bd:45:d8:8b:a2:cb:87:5d:5a:45:d9:1e:
96:87:61:06:75:82:71:6b:eb:3a:a4:5c:bd:a8:6c:2c:a6:4f:
36:ca:a8:f6:e0:bb:9c:74:c0:6a:8e:0b:1a:ae:20:c3:45:8c:
ac:85:92:41:bf:39:84:f5:89:8c:b4:b4:1e:ee:40:0e:17:57:
7c:62:6c:06:19:6a:51:1b:43:6e:41:d5:f9:ce:7d:40:e7:7a:
42:0b:72:44:75:ba:8b:df:8e:91:81:f5:b0:88:74:bd:1b:94:
55:bb:68:fb:a3:8f:66:56:8a:6c:6d:ba:d0:32:1e:4f:3d:f6:
db:a6:c7:60:01:98:96:74:82:2f:12:4d:87:58:4a:c4:3e:01:
b5:e4:e4:5c:33:76:0a:46:7b:44:2a:41:85:cd:54:76:8b:69:
5a:ed:81:ce:3f:51:9f:e7:4d:30:42:86:99:08:01:ee:6c:3b:
64:52:fd:db:a3:a4:8c:21:4c:a1:50:d8:11:1a:57:4d:8d:43:
12:df:78:22:ec:42:d4:5c:a2:d8:94:38:9e:66:60:87:3d:7a:
f3:b1:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:42 2025 by rpki-client