Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: u7m1mshbVT45k53my7yl6t6RdD6KQSpMG8pRDkTNun4=
Subject key identifier: 2D:C5:0A:9E:70:63:8D:FF:79:4C:8F:A1:8D:3A:3D:AE:25:4E:C6:B1
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 0199FBEAA848B47C12719757A637E3FA26C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 1306
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: IgPp6Rjx7AwW6oFls4VTwe5s3yHrme8UuMsl2UFga00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a8:48:b4:7c:12:71:97:57:a6:37:e3:fa:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=2dc50a9e70638dff794c8fa18d3a3dae254ec6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:66:4a:6d:9b:08:51:1a:94:9c:b0:c3:00:
f1:85:10:a4:27:00:7c:2c:b8:cf:4b:95:44:67:45:
b2:39:df:91:71:be:4c:6b:23:bb:1f:44:82:ba:fa:
67:22:c6:d0:d4:c2:06:92:35:85:60:79:e4:e6:d4:
6b:6e:1a:db:b8:f2:41:ef:63:e9:c9:5f:b7:3f:62:
5b:f3:f1:8b:d2:d6:6a:0b:04:90:74:44:b7:95:b8:
23:b9:98:a4:7f:9e:ee:8b:3b:87:5b:0b:03:5d:c6:
26:e6:63:2f:b4:34:ac:8f:d8:89:ff:60:26:94:67:
17:04:37:06:b0:1d:1d:52:3f:c5:f0:94:3d:fa:80:
83:c8:38:c0:7c:5f:11:0f:3c:63:eb:4b:bf:9f:dc:
8e:01:33:39:74:ce:65:50:91:c2:84:ba:49:a3:92:
36:37:7d:22:63:0d:27:17:f2:f5:3c:c6:7a:ee:f5:
30:0b:0f:9c:f9:7a:67:35:0d:02:21:30:9a:fb:54:
b1:b4:2e:49:ec:07:d0:c6:25:46:aa:47:55:08:71:
ba:fc:4e:11:e1:98:3c:06:80:d2:b1:76:a3:7c:d5:
fa:a6:f1:04:a3:1a:8f:b5:24:21:4f:6c:b1:e6:48:
77:c9:6a:56:c1:3f:ee:9f:f9:58:ee:08:d4:a5:3f:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:0A:9E:70:63:8D:FF:79:4C:8F:A1:8D:3A:3D:AE:25:4E:C6:B1
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d8:71:b2:c0:f0:71:ef:ab:f1:08:6f:fb:2d:c7:a5:fb:65:
06:59:12:59:6c:f5:0f:2c:0f:75:23:de:2e:98:11:60:91:bb:
78:f8:4a:4a:df:f9:44:3d:1e:78:50:5f:03:e0:63:46:96:79:
c9:1c:e5:ed:f3:0a:22:35:43:8c:3c:3f:a3:fe:a1:9e:64:f6:
f6:c8:65:94:5e:45:9c:fe:a0:66:85:00:85:f0:c1:dd:85:65:
6c:52:80:d8:1d:c1:7e:24:9c:3f:1d:9d:7f:91:cc:3f:9e:ef:
4b:74:5f:77:c3:d0:73:05:3b:7c:80:2e:f4:f2:fb:a7:70:61:
24:e4:01:aa:db:c7:49:04:0e:de:ef:7b:47:50:6f:cb:3c:0b:
ce:c4:24:38:a3:96:a6:9a:fd:1c:bb:4b:e5:c3:8f:d9:d7:42:
5c:65:2e:d4:c1:af:5a:6e:1c:dd:4a:85:5c:b2:90:47:ae:74:
67:b5:74:3a:90:2f:79:f9:01:a5:5d:43:7d:34:16:71:cb:25:
b6:fd:68:e7:9c:8e:fe:8c:48:64:6a:2a:74:23:3c:8d:aa:10:
2e:c7:aa:2d:07:4f:57:a3:51:94:54:3a:ba:60:1c:eb:a6:87:
42:d1:4f:1e:1e:fd:97:09:29:f3:4f:bf:50:f4:05:9a:c7:ac:
d6:8b:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:23 2025 by rpki-client