Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: VBfpXVALTD0mLsGnyzVOUY/O2gsHLa22SX96dRvRs/Q=
Subject key identifier: 83:F5:AF:83:B9:CC:AE:F6:25:F6:00:37:75:10:F9:32:0D:C3:BB:20
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0199FCFDA96EA973AAAD7650D64A2123CE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: lrW4nLZXoNSCmZQ6iK0NfRqwN3oJ77n98QVi4vIhulY=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a9:6e:a9:73:aa:ad:76:50:d6:4a:21:23:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=83f5af83b9ccaef625f600377510f9320dc3bb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:14:6c:2e:12:4f:83:d6:ff:d2:2e:9d:19:
cf:c7:b0:86:2e:e2:71:b5:90:f3:d2:2d:c9:a8:66:
7f:63:7b:0f:de:38:59:49:20:5e:b2:c7:e8:54:c7:
5a:3b:6b:90:db:7b:e4:1f:92:b7:17:e7:43:30:f6:
f6:70:32:ac:13:69:4e:9b:7d:0b:c8:e2:be:f2:db:
29:8d:25:d6:91:f2:88:a5:3e:8f:1b:52:68:e3:1a:
eb:9f:35:b7:54:9f:bc:92:34:ef:6f:4f:7f:d2:ab:
db:d5:e1:65:eb:6a:5e:04:9d:46:bc:25:c0:24:01:
c0:8f:88:c8:db:26:c5:78:70:ad:77:67:f7:38:59:
9a:f7:d9:c9:16:6f:6b:76:34:73:2a:f2:5d:9b:59:
97:b8:2e:9c:22:8b:b8:bd:4a:0d:3a:15:f4:9f:fb:
8f:9e:e8:bc:f0:43:87:49:75:e0:8b:67:3a:91:55:
0f:a7:f4:0e:ee:8e:84:6b:6c:88:d0:ce:31:28:3c:
42:57:69:7b:74:1a:94:1b:37:6a:24:f5:d1:74:aa:
67:c3:a5:b4:1d:84:59:87:62:0a:8e:3f:6b:69:03:
f5:df:5f:75:53:cc:72:00:19:17:8a:4e:6b:74:a4:
8d:e9:b2:1e:8a:63:b5:6e:d9:0e:23:14:58:ea:5c:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:AF:83:B9:CC:AE:F6:25:F6:00:37:75:10:F9:32:0D:C3:BB:20
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bd:4d:e5:db:17:65:dd:87:fb:30:84:d2:88:ad:f6:02:da:
d3:ff:1d:5e:5e:d4:dc:94:e4:fd:6b:ac:11:99:8e:cc:97:72:
72:73:59:11:ac:c4:9d:9b:a6:f3:12:19:43:d7:fe:03:bd:72:
db:a5:9a:1c:6d:90:fd:7a:82:c4:be:61:8c:e0:9b:bc:0e:e4:
c2:61:dd:82:58:44:95:35:e9:fa:fd:ba:f0:3e:45:34:6c:0d:
54:d3:dd:51:3d:5a:96:a8:ad:ed:f0:c3:ae:a1:fb:7a:97:c4:
0c:ae:a6:3f:2b:d9:59:e2:ea:10:9e:98:98:9f:33:83:89:7a:
98:d6:06:b7:00:b2:c5:a9:21:24:0d:c8:e8:ad:06:a9:14:94:
d9:a0:82:30:5c:d7:ea:71:1e:41:9d:dd:f4:51:5c:2b:cc:d4:
83:5a:71:07:03:4f:59:65:71:0d:e2:bb:f5:33:e2:c3:b4:ac:
00:9f:83:f2:d7:80:b1:c5:86:bd:d4:05:71:06:60:61:33:7c:
36:40:05:38:c7:75:f7:95:f4:af:6d:0a:8f:16:49:d7:a5:2a:
f2:2d:98:2f:a2:2b:c9:d6:99:b0:64:cc:32:8d:03:de:d4:0c:
30:aa:04:eb:38:10:97:91:6a:41:30:ce:90:cc:d7:80:ac:cd:
0e:25:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:09 2025 by rpki-client