
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: lKnzaXRlRw7t88rXPzwRAnUk2FlRQ8o870DnX699ed0=
Subject key identifier: 02:4D:53:C7:6A:00:A8:79:9F:4F:50:B9:21:2A:9D:67:B3:6E:3F:98
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 0199FA6A0F799E80B60BDF31D4D168540C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 03:01:18 +0000
Manifest this update: Sun 19 Oct 2025 03:01:18 +0000
Manifest next update: Mon 20 Oct 2025 03:01:18 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: 5T80miLTEEE0CtajV7z+XHUp/+d5N49vtWihH+S2QDo=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:0f:79:9e:80:b6:0b:df:31:d4:d1:68:54:0c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Oct 19 03:01:18 2025 GMT
Not After : Oct 20 03:01:18 2025 GMT
Subject: CN=024d53c76a00a8799f4f50b9212a9d67b36e3f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:de:78:98:80:a6:d3:33:f4:d5:94:8f:80:
7f:a2:2a:b1:0b:70:88:bd:46:79:a9:5a:fd:0c:01:
9c:33:a4:25:09:4d:3f:08:24:de:e1:b6:31:f2:36:
2c:dc:4f:24:be:55:e2:ab:85:69:73:07:25:95:7d:
01:bf:67:45:90:ea:a8:e3:9e:ec:75:87:65:de:10:
8f:82:71:1c:d6:0e:07:05:f0:f1:ed:71:ca:71:f0:
56:0e:7f:81:7f:7e:99:4b:c7:28:ac:c4:9a:7b:0d:
e1:13:36:e3:86:94:d3:c4:84:40:bd:95:29:f4:00:
9a:33:92:4a:cc:9a:d2:35:8a:f3:5b:c9:4a:3b:90:
1c:c9:d0:00:5b:16:c1:d0:72:7c:53:f1:2a:d2:f1:
88:29:d3:c0:27:66:cc:3a:7b:8a:a5:81:19:cb:1c:
62:3c:04:5f:76:da:06:aa:4a:06:30:bd:ee:e2:f0:
18:64:a1:86:fe:ed:a4:08:bc:e5:7e:1b:21:91:83:
f7:b9:70:04:90:ce:3c:31:68:19:2e:e2:f6:e2:bd:
02:ea:b5:77:f2:88:d5:d8:73:e6:7a:8e:30:2b:ba:
aa:d9:58:e0:f9:51:38:18:35:f1:8d:89:06:97:84:
ff:43:4e:f7:4b:64:9f:96:c7:08:da:e7:ca:7f:76:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:53:C7:6A:00:A8:79:9F:4F:50:B9:21:2A:9D:67:B3:6E:3F:98
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:b7:c1:c9:87:0c:6b:26:ee:b2:1e:46:8e:d9:e8:42:be:
e6:81:ae:22:c3:b8:90:29:ed:07:ed:e3:81:39:95:4f:65:8a:
a4:af:8d:64:01:ce:e9:c9:80:14:5d:41:f8:89:48:5b:f3:c5:
22:50:ff:13:c2:2a:7a:6a:79:d3:f0:dd:91:85:7e:73:f7:4c:
20:09:76:c4:a4:b5:94:de:03:c0:9c:d7:df:cd:f8:82:7e:c8:
58:ed:70:62:58:90:16:04:01:db:fb:e4:1c:52:60:d6:99:cd:
55:29:5c:d2:4b:ea:c4:36:7f:3f:c6:7d:66:1c:66:fa:1c:7d:
96:8e:98:a3:4d:3b:19:f9:63:c3:09:fe:4a:70:5e:38:d7:98:
cf:52:e6:00:12:f2:30:86:82:5c:09:9e:8c:73:0d:8a:6b:83:
1a:31:36:2e:c2:37:7d:d3:37:29:06:a2:f3:59:eb:93:cc:07:
79:d5:e9:88:93:b0:60:c4:48:5a:e9:b7:53:f4:e2:75:1e:7a:
74:fa:1b:99:66:f0:3e:0c:9a:81:f5:86:fc:0e:cb:0b:aa:cb:
28:f9:8d:1e:08:ec:d7:48:ac:9f:60:e4:45:73:5a:09:ba:d0:
04:71:da:cb:10:25:b2:c1:e1:39:05:9e:47:ab:f6:33:be:36:
61:cb:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:05 2025 by rpki-client