Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: Ht6En3bV5KEqbHcYzxqGnUDJC8rhHiY1cMGjGXetoF4=
Subject key identifier: 68:85:67:C1:DE:AB:EF:8E:5C:0F:6D:8D:00:B7:D3:D2:57:3F:41:F6
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019A0259BC3C8E72959248108CA8502FCAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 0289
Signing time: Mon 20 Oct 2025 16:00:26 +0000
Manifest this update: Mon 20 Oct 2025 16:00:26 +0000
Manifest next update: Tue 21 Oct 2025 16:00:26 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: S2hM1M/h03E+nIypgLyjoODfONlnMZmUjSJ3S+4zyLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:bc:3c:8e:72:95:92:48:10:8c:a8:50:2f:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Oct 20 16:00:26 2025 GMT
Not After : Oct 21 16:00:26 2025 GMT
Subject: CN=688567c1deabef8e5c0f6d8d00b7d3d2573f41f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:e8:da:ee:10:52:9f:3e:05:b1:22:e8:e7:
55:2e:1f:6e:4e:64:51:79:e2:27:a9:51:0d:c6:76:
e0:63:87:d2:20:b6:7e:be:f9:d3:6c:ad:44:38:99:
34:23:e4:a7:54:f4:31:62:96:1d:a7:b8:f7:1b:e1:
a3:6f:42:b3:2c:fe:67:1f:ab:c4:63:c0:d4:42:68:
d8:d4:b0:4f:35:3f:78:e1:64:45:73:e7:1b:0f:c2:
21:43:29:09:c1:3a:63:b0:32:1d:a0:c1:89:dc:8e:
dc:66:36:49:25:4b:0b:24:d7:33:7d:a4:2f:a1:e6:
47:25:41:ac:e9:af:37:28:5d:8a:47:7a:10:a5:92:
df:90:50:62:c7:42:9e:3a:c8:49:ef:cd:9c:d7:85:
ee:92:d7:c3:90:d3:c9:ad:7a:99:88:dd:f5:7b:f5:
db:7f:16:9a:81:bf:4b:7f:f8:f2:0d:06:64:23:e6:
03:7b:52:18:ca:23:be:d8:af:be:46:c9:0b:8a:80:
ac:7d:45:c3:24:9d:3f:72:05:e2:e0:10:0a:66:de:
4d:03:cf:ed:7a:b2:39:6a:0b:13:52:14:88:20:68:
38:f5:52:0e:b9:26:0e:99:bc:e6:25:16:6d:23:8e:
db:f5:23:f4:ae:66:ce:ef:51:34:d3:c4:80:ae:b9:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:67:C1:DE:AB:EF:8E:5C:0F:6D:8D:00:B7:D3:D2:57:3F:41:F6
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:09:bb:cd:75:d8:40:ff:df:8b:33:29:b1:7a:df:24:70:de:
81:53:44:0b:75:cc:8c:98:e2:8c:c7:78:b7:7a:7f:36:54:5c:
9f:bf:e5:5e:d9:c7:1f:2b:8f:63:40:99:a6:97:67:3a:56:2c:
e7:a8:9f:2a:92:9e:51:6d:ea:73:e7:52:78:13:ac:91:31:07:
9b:85:0a:37:5c:0c:28:8a:d6:92:a1:a1:23:e2:75:9d:d9:c0:
5c:8e:49:c4:c4:39:5a:ef:57:1c:aa:e8:22:b1:9b:ad:c4:33:
3e:c6:9d:b7:15:35:ca:38:d8:43:34:a2:a9:8f:a7:65:c0:3e:
5b:23:6d:ec:a1:50:30:80:44:67:a2:e2:af:a8:7f:32:fa:f9:
20:58:31:c0:81:0e:e1:1d:7f:ab:0c:5b:41:78:b8:e0:76:58:
e1:85:09:8f:ce:b2:c2:bd:23:55:37:84:6f:9e:a3:28:9e:d7:
30:70:e0:bf:3c:54:0c:47:b9:ff:9e:ad:25:b2:8d:26:52:ed:
64:dc:39:7b:d7:c0:9a:82:09:2f:44:ff:68:44:74:fc:d6:51:
28:ba:a6:88:28:4c:27:f9:89:c8:37:b6:94:54:e4:f4:6d:02:
92:b8:21:ac:df:e2:5d:bf:9a:d0:50:d7:b1:9a:d5:f4:38:5d:
78:59:63:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWbw8jnKVkkgQjKhQL8rpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy
ZjdmOTUwHhcNMjUxMDIwMTYwMDI2WhcNMjUxMDIxMTYwMDI2WjAzMTEwLwYDVQQD
Eyg2ODg1NjdjMWRlYWJlZjhlNWMwZjZkOGQwMGI3ZDNkMjU3M2Y0MWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupPo2u4QUp8+BbEi6OdVLh9uTmRR
eeInqVENxnbgY4fSILZ+vvnTbK1EOJk0I+SnVPQxYpYdp7j3G+Gjb0KzLP5nH6vE
Y8DUQmjY1LBPNT944WRFc+cbD8IhQykJwTpjsDIdoMGJ3I7cZjZJJUsLJNczfaQv
oeZHJUGs6a83KF2KR3oQpZLfkFBix0KeOshJ782c14XuktfDkNPJrXqZiN31e/Xb
fxaagb9Lf/jyDQZkI+YDe1IYyiO+2K++RskLioCsfUXDJJ0/cgXi4BAKZt5NA8/t
erI5agsTUhSIIGg49VIOuSYOmbzmJRZtI47b9SP0rmbO71E008SArrnbtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiFZ8Heq++OXA9tjQC309JXP0H2MB8GA1UdIwQY
MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt
NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw
LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwm7zXXY
QP/fizMpsXrfJHDegVNEC3XMjJjijMd4t3p/NlRcn7/lXtnHHyuPY0CZppdnOlYs
56ifKpKeUW3qc+dSeBOskTEHm4UKN1wMKIrWkqGhI+J1ndnAXI5JxMQ5Wu9XHKro
IrGbrcQzPsadtxU1yjjYQzSiqY+nZcA+WyNt7KFQMIBEZ6Lir6h/Mvr5IFgxwIEO
4R1/qwxbQXi44HZY4YUJj86ywr0jVTeEb56jKJ7XMHDgvzxUDEe5/56tJbKNJlLt
ZNw5e9fAmoIJL0T/aER0/NZRKLqmiChMJ/mJyDe2lFTk9G0CkrghrN/iXb+a0FDX
sZrV9DhdeFljtw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:13 2025 by rpki-client