
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: Bg4Fk3FODmvGHwseFSt93UfD3QoYHSwQI/KobdWqq+0=
Subject key identifier: 67:65:7D:61:A4:DC:F0:BB:12:0C:80:63:C2:58:18:FA:A6:D9:F8:01
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 0199FBEB459DCC0B6770DB27452716B92079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0DF3
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: +bcnQTv6Gzp6h/Wa+h80BJfV2qmrDPwGGADARePg8Ag=)
2: kT72_rs6FeeCr3dDSGrEzG7Qc-Y.roa (hash: aU4YilQ/j5WNVY1Q5u9ZzL1FCZbvOH4ANv0D/Jw9+To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:45:9d:cc:0b:67:70:db:27:45:27:16:b9:20:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=67657d61a4dcf0bb120c8063c25818faa6d9f801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:22:4c:3e:ca:ba:95:e2:65:a0:50:9a:c1:
ce:14:80:ba:87:59:84:c7:7f:01:29:e8:34:e2:a4:
26:01:7a:fb:56:85:09:f6:fa:5c:f2:f6:7d:2a:66:
cb:9b:00:56:59:dc:fc:66:ae:5c:f6:b9:f1:99:f1:
f6:5f:2c:66:e7:87:5d:d1:84:bb:d7:04:b0:51:b7:
12:08:60:b7:dc:e9:be:bd:dc:5c:02:5a:dc:9f:62:
ab:8a:77:3d:f4:f7:55:4c:a4:9f:fd:5f:85:41:a7:
be:58:54:75:a0:41:eb:25:d1:be:90:ce:32:40:f4:
b9:48:43:fa:ed:fb:20:ce:07:13:f0:6b:00:a6:e3:
b2:02:d8:3c:9d:95:4e:b1:de:48:19:05:9c:d3:89:
6d:91:5f:3f:8a:d4:4a:19:74:60:05:17:75:f3:22:
c3:6f:3c:27:9a:88:77:27:89:d5:08:9e:53:4b:1a:
ca:71:60:fd:6b:04:f8:ea:5b:74:23:6e:33:1c:0e:
61:3c:d2:4c:aa:b5:8e:f0:35:51:30:e1:58:59:39:
db:96:70:3d:b5:aa:ce:de:1d:a3:84:52:fb:6d:88:
1f:8f:61:e7:58:26:53:1d:0b:f3:26:17:c2:6e:ce:
4c:55:65:0c:90:20:2e:25:c5:e1:fd:e7:14:2e:bd:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:7D:61:A4:DC:F0:BB:12:0C:80:63:C2:58:18:FA:A6:D9:F8:01
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:3e:9b:b6:66:f2:ba:35:85:90:2a:45:b0:2f:e4:5c:46:
c1:33:bc:ff:f2:4b:d3:da:48:de:04:e2:c8:31:07:eb:4f:45:
e7:bc:14:ea:59:cd:0b:55:56:2f:6d:a9:35:c7:b4:70:e8:cb:
c7:8b:44:b7:5a:41:87:64:6b:18:2a:16:dc:b0:11:22:80:c3:
d8:40:1f:c7:a2:61:0b:18:7a:61:2c:5a:a9:be:87:50:54:de:
5d:8b:04:ce:66:33:fc:60:5f:5a:77:b6:64:03:e8:e7:c0:ff:
d2:58:4d:be:dc:3f:75:fa:e8:fd:8f:b3:bb:a0:d2:0a:11:81:
79:af:4b:f4:56:87:4c:31:09:e5:8e:2e:8e:8a:03:e2:f4:71:
3b:f8:11:ec:9b:68:6a:58:97:1b:97:38:6e:06:2b:e2:3f:73:
09:dc:65:d3:fb:7d:5f:73:0d:b6:71:48:2c:d6:29:7b:38:f9:
17:01:44:36:a3:d7:54:97:b9:6b:14:f5:0a:4c:a9:bd:7c:7a:
0f:0e:f7:52:9c:c8:8c:90:c2:d8:6e:c7:ad:ff:88:58:41:ac:
15:a1:14:40:a8:8a:81:04:45:ae:44:80:5a:29:dc:be:49:2e:
9f:15:e7:de:9d:b2:3a:1d:61:69:e2:dc:5a:3b:03:13:68:7f:
79:c5:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:34 2025 by rpki-client