Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: eYvOFnBHiA5vzrgSt0yZIzTaoKChnyOKTg1sOqeF23s=
Subject key identifier: 88:7B:78:BA:C7:9D:F9:7E:C7:69:B9:DA:64:72:E5:B5:B6:72:AF:8D
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 0199FC8F4F63084600EC79AFA1D47293FA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: sCZEYXsZV5keXPWusvapqnC26TNHdhlZWtx4OnHYbWQ=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4f:63:08:46:00:ec:79:af:a1:d4:72:93:fa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=887b78bac79df97ec769b9da6472e5b5b672af8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:18:aa:f0:ae:dd:24:fe:f8:d8:9f:ac:e4:11:
b2:19:d8:55:8b:a9:ca:eb:74:5e:65:66:3b:12:7e:
fa:57:70:d1:83:ff:74:17:c4:d7:0c:a7:ca:25:13:
a6:ea:31:3f:da:f4:b4:b3:d8:fa:5c:6d:80:75:f7:
02:cb:0a:79:3b:59:3d:14:90:1a:fc:fb:4e:51:f2:
2a:4e:3c:9a:86:99:8b:62:57:1b:35:d6:d3:66:8b:
ee:8a:c8:ca:b7:68:99:e7:5f:fa:28:a0:30:27:7e:
03:3d:63:98:ef:2d:72:88:7b:7c:8c:57:7c:5e:93:
9b:28:9a:87:2a:18:19:c3:9d:79:25:5c:a5:93:af:
72:e5:47:8c:d1:f0:0a:c4:69:e2:8d:ae:86:0c:78:
93:15:77:a4:88:00:bd:84:cd:c5:11:88:73:2f:20:
f9:cc:4b:ad:9b:a1:b1:39:4e:22:de:d9:70:ac:92:
47:6b:10:89:df:c3:4c:25:fe:31:8e:ac:50:ec:1f:
af:b7:d5:6d:19:f3:cf:35:a2:8e:6f:aa:b7:13:56:
a4:fe:42:f6:2d:a6:85:ef:49:84:9c:80:51:ef:6d:
b4:69:c8:3b:85:38:2f:19:55:6a:e5:7a:0d:fc:cd:
cb:9d:50:aa:20:60:96:d6:2e:c3:8f:a5:f0:13:73:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:78:BA:C7:9D:F9:7E:C7:69:B9:DA:64:72:E5:B5:B6:72:AF:8D
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:17:98:46:81:ed:c7:c7:41:65:a4:ef:d1:ec:87:f7:26:09:
ea:1b:6f:bc:97:7f:43:18:07:c7:18:ec:bc:f3:c5:ef:5a:fe:
30:3f:0b:af:4f:75:9c:22:2a:b4:e5:7e:77:d6:59:ee:7d:4d:
31:83:75:17:db:ce:98:39:e7:57:e5:6c:50:de:c4:40:ea:86:
73:9a:64:dc:6e:38:8c:5a:bd:50:3e:55:2f:fe:c8:7b:6d:4f:
07:7c:f5:11:0c:21:b1:7c:9a:69:4c:28:05:5c:49:e6:2e:bf:
0b:eb:61:54:43:3c:de:92:1a:49:8b:4a:c4:38:2f:82:1f:14:
e9:87:16:b3:3c:aa:b4:3a:f0:18:4e:08:52:6a:8c:9d:cb:f5:
63:de:72:5e:7c:11:99:de:b5:c9:d0:f1:18:99:7e:00:3c:81:
11:bf:09:81:a0:a3:22:9f:7a:c0:94:b7:22:51:68:7e:2b:90:
2d:2e:8b:4b:9e:db:7b:35:47:6c:72:01:2a:cc:64:b9:34:9a:
20:25:b5:b9:46:1f:18:87:e7:fe:c7:68:e6:89:9c:9c:15:d0:
6b:e9:dd:b4:c4:3c:a6:32:3e:aa:b8:3a:52:04:f2:b9:bf:b1:
87:a0:c4:3a:91:45:dd:a1:5d:40:86:0b:13:13:a9:a1:c9:fd:
b3:88:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:56 2025 by rpki-client