Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: 372ngpVHTaCejMBbbt4WZq/q8L8aHGEtjtv8ULbPlqM=
Subject key identifier: 2E:72:9A:57:07:A5:99:40:6C:2C:1A:4F:4B:8F:5A:34:1D:25:3F:78
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019A00356B4B1992457E78DA0B4924FC0A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0C69
Signing time: Mon 20 Oct 2025 06:01:32 +0000
Manifest this update: Mon 20 Oct 2025 06:01:32 +0000
Manifest next update: Tue 21 Oct 2025 06:01:32 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: XQr1/F0FfzP3YHkZEzJOGj7vx7BiVugFSF6bIll9IGQ=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6b:4b:19:92:45:7e:78:da:0b:49:24:fc:0a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Oct 20 06:01:32 2025 GMT
Not After : Oct 21 06:01:32 2025 GMT
Subject: CN=2e729a5707a599406c2c1a4f4b8f5a341d253f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:35:28:ff:c8:4a:08:3e:51:1e:34:c1:58:
d9:f8:04:a6:4c:11:6f:7a:55:f3:a9:69:a4:77:19:
da:bc:aa:8d:2f:ed:87:78:85:8f:62:17:31:2f:38:
a7:29:3e:ae:90:a6:e7:c7:f7:96:53:f8:c3:b8:d4:
fe:54:f3:78:71:80:8c:3b:92:c4:88:eb:95:73:44:
f1:86:d4:bf:6d:ba:12:8f:22:d7:63:8f:04:11:8f:
42:76:37:bf:7d:1d:54:5d:a1:30:ad:b3:ff:f7:54:
91:55:37:99:22:56:75:17:e8:62:a5:1b:8f:75:f5:
c5:00:3a:49:a9:18:d1:0b:01:19:a0:68:8f:0d:5e:
2a:42:78:02:2c:62:5b:2c:05:31:ad:2f:57:6a:42:
9f:da:d3:5c:bf:7d:b1:83:85:3c:0e:de:4b:83:a0:
04:41:5b:d8:4e:57:ae:2f:52:0d:14:5e:4b:42:8f:
95:81:7d:56:da:0d:db:98:83:e7:6c:d1:e7:c9:8f:
43:9d:75:c8:23:e8:53:4a:d2:05:4d:a5:32:f4:e0:
72:46:f8:a5:94:d1:15:0e:3f:a9:f3:0a:3a:e3:f4:
13:77:e9:78:c0:08:93:bd:1d:49:0b:70:01:0a:6e:
65:18:77:b6:6c:73:76:88:ed:1a:f4:4e:80:c6:77:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:72:9A:57:07:A5:99:40:6C:2C:1A:4F:4B:8F:5A:34:1D:25:3F:78
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:14:dc:a7:c1:bb:fe:e3:2c:ef:b1:39:67:6b:e4:31:71:5f:
0a:b4:c4:de:17:bb:85:53:d3:91:7d:f0:95:2b:52:58:14:84:
ff:47:ba:9e:aa:d5:09:76:82:92:0c:c0:37:cc:67:75:12:4d:
6c:d0:e6:3c:ea:1f:03:18:ce:81:08:0e:b5:84:b3:c2:5d:6b:
27:71:26:a3:66:16:63:52:fa:96:a1:fc:ec:fc:3c:b1:2c:e8:
47:e9:5d:f1:3f:fb:b5:b6:5f:13:d0:fa:4e:30:9b:23:84:f4:
43:32:b9:41:4d:e8:92:0d:aa:c2:e1:76:5e:95:b5:f0:38:af:
9b:1c:9c:59:d7:b7:dd:0c:3b:e5:c5:bf:de:a6:05:26:df:a8:
1e:54:13:c8:3e:bd:b3:e9:7e:92:0b:ad:08:86:07:1b:ef:ee:
0f:eb:e7:d1:5e:e7:9e:18:fc:60:3e:12:0f:bf:4b:b9:b1:43:
3a:ba:f0:cb:19:cf:96:9d:9f:e0:7f:85:a0:e2:54:93:fa:32:
86:41:58:ec:aa:9d:62:f6:93:7a:eb:fa:97:2d:78:03:5e:95:
d7:bc:74:85:dd:ae:76:db:77:00:88:a8:c1:76:7d:02:5f:f9:
33:7b:f0:be:6a:d3:7a:30:22:96:18:bd:85:26:02:ed:7d:c3:
46:78:44:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANWtLGZJFfnjaC0kk/AoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1
OWU4ZmQwHhcNMjUxMDIwMDYwMTMyWhcNMjUxMDIxMDYwMTMyWjAzMTEwLwYDVQQD
EygyZTcyOWE1NzA3YTU5OTQwNmMyYzFhNGY0YjhmNWEzNDFkMjUzZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpU1KP/ISgg+UR40wVjZ+ASmTBFv
elXzqWmkdxnavKqNL+2HeIWPYhcxLzinKT6ukKbnx/eWU/jDuNT+VPN4cYCMO5LE
iOuVc0TxhtS/bboSjyLXY48EEY9Cdje/fR1UXaEwrbP/91SRVTeZIlZ1F+hipRuP
dfXFADpJqRjRCwEZoGiPDV4qQngCLGJbLAUxrS9XakKf2tNcv32xg4U8Dt5Lg6AE
QVvYTleuL1INFF5LQo+VgX1W2g3bmIPnbNHnyY9DnXXII+hTStIFTaUy9OByRvil
lNEVDj+p8wo64/QTd+l4wAiTvR1JC3ABCm5lGHe2bHN2iO0a9E6Axndg1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5ymlcHpZlAbCwaT0uPWjQdJT94MB8GA1UdIwQY
MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt
ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi
LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxTcp8G7
/uMs77E5Z2vkMXFfCrTE3he7hVPTkX3wlStSWBSE/0e6nqrVCXaCkgzAN8xndRJN
bNDmPOofAxjOgQgOtYSzwl1rJ3Emo2YWY1L6lqH87Pw8sSzoR+ld8T/7tbZfE9D6
TjCbI4T0QzK5QU3okg2qwuF2XpW18DivmxycWde33Qw75cW/3qYFJt+oHlQTyD69
s+l+kgutCIYHG+/uD+vn0V7nnhj8YD4SD79LubFDOrrwyxnPlp2f4H+FoOJUk/oy
hkFY7KqdYvaTeuv6ly14A16V17x0hd2udtt3AIiowXZ9Al/5M3vwvmrTejAilhi9
hSYC7X3DRnhE6A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:19 2025 by rpki-client