Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: dsxUwxpD/T5pHxSQMrI5flN5NKKugOrzU4e8ML/8Ob0=
Subject key identifier: F3:07:CD:99:CA:1C:D7:CA:FD:20:04:7E:B0:FA:0A:62:97:D4:CF:5F
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 019A0147E78767838DA20240FF0845025B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 0F27
Signing time: Mon 20 Oct 2025 11:01:20 +0000
Manifest this update: Mon 20 Oct 2025 11:01:20 +0000
Manifest next update: Tue 21 Oct 2025 11:01:20 +0000
Files and hashes: 1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: JcP06xQGS2rPER8jG7/iThWzhEPJgXJ5zVAol1pmPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:e7:87:67:83:8d:a2:02:40:ff:08:45:02:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Oct 20 11:01:20 2025 GMT
Not After : Oct 21 11:01:20 2025 GMT
Subject: CN=f307cd99ca1cd7cafd20047eb0fa0a6297d4cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:9a:78:e9:d3:61:9a:fe:b5:c3:2e:5f:94:
59:a6:77:88:d8:32:7e:3f:33:01:b6:da:b8:9e:75:
b6:c3:51:be:f2:b5:72:de:f2:c1:67:32:cd:5e:26:
68:b1:51:28:be:10:41:c2:a7:37:38:a2:59:5e:32:
4d:c9:53:88:d9:af:00:ea:b6:ab:36:a1:a4:c1:e7:
ba:3f:87:13:57:f2:92:d7:9d:d3:e4:3a:da:87:9a:
3b:6e:70:ae:fc:e5:22:3d:8e:39:bd:04:fb:b4:7c:
a5:82:8e:d5:85:e1:e5:32:1c:18:33:d7:b0:07:3a:
30:7b:38:75:c6:db:ea:ca:2e:c8:c9:ec:25:97:cc:
7d:e9:3f:dd:dd:b2:62:ae:8f:3c:4f:dc:ac:64:64:
c5:df:98:28:74:00:83:cd:13:77:7e:13:48:0b:fd:
57:f0:f9:d7:5a:1c:10:c2:c7:90:8c:14:b6:31:e1:
42:4b:f1:31:34:9d:11:4e:67:1f:30:fc:d6:cf:97:
76:2a:16:8d:6b:d5:1c:89:79:c1:03:75:52:cd:8f:
1a:0e:83:2c:33:a5:ad:02:cb:d9:46:5c:9a:67:f4:
0c:47:e1:06:d2:78:76:41:c1:8a:7f:20:ee:44:28:
1c:01:28:d5:56:c5:30:e6:be:d0:e7:a1:cd:46:e1:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:CD:99:CA:1C:D7:CA:FD:20:04:7E:B0:FA:0A:62:97:D4:CF:5F
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:63:68:9b:71:0d:e3:ea:f6:06:58:79:81:c7:b8:76:86:82:
40:93:ad:c2:b8:77:9d:53:e5:34:df:63:92:68:14:dd:b8:e0:
e7:39:4d:eb:d0:09:fd:6c:93:08:7b:d1:8c:2a:eb:8e:87:07:
f2:3a:47:b8:e5:82:97:c7:4d:1a:50:c0:d5:43:b1:19:f6:24:
13:2f:bb:66:2f:da:03:4a:bb:b1:60:37:b7:40:cf:81:80:65:
c8:12:bb:e8:87:42:65:a5:1e:3f:59:91:40:82:b2:8d:ee:33:
27:ca:d1:85:49:1c:d1:af:21:94:d0:7d:be:bc:2d:94:b0:93:
7f:bc:82:c1:4f:d4:7b:fe:1d:70:a1:9b:3c:37:86:7f:03:f8:
dd:bb:80:bb:1e:d3:4f:da:17:1d:37:9d:87:9a:76:5d:bf:d4:
a0:35:fd:a4:8e:bd:ff:87:3e:31:c0:ea:10:90:07:80:1d:7b:
53:f4:34:8e:7a:f8:63:70:0a:f4:76:23:8d:1b:f6:4d:a1:42:
95:62:ae:01:db:c9:0e:c3:a8:72:ba:09:f3:7e:94:e4:d2:8b:
41:66:d9:3a:73:83:c4:69:69:c5:07:3a:50:ae:5c:db:87:89:
9e:51:df:66:3c:f2:8e:60:78:e9:97:e6:9e:57:6f:af:2f:5b:
c3:5f:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:52 2025 by rpki-client