Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: 0Ni6zahtvPIm63tXm6aMocNGhKt5b/fIjeYcyvixtKk=
Subject key identifier: DA:56:50:A0:B4:C2:E6:0F:FF:74:9B:44:1E:EA:F7:87:8F:CD:AA:0C
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 0199FC2187FEE71024B37AD783010A60C6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: O+wPdkHiN/QhlRodwzQyAPPBIElBuMysdM1VEv1gt3A=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:87:fe:e7:10:24:b3:7a:d7:83:01:0a:60:c6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=da5650a0b4c2e60fff749b441eeaf7878fcdaa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:2e:de:25:cd:0b:90:d8:a2:cb:6c:dc:08:
b7:31:70:d3:d0:22:5b:4b:46:4d:32:98:31:49:12:
6d:9f:41:b3:ef:ed:4f:bd:d8:5c:fd:d3:2b:07:a1:
d9:ea:ae:9a:f2:5f:f5:5c:61:dc:6d:ae:51:a2:44:
7b:0f:dc:b3:84:ad:76:be:5a:39:04:32:3c:be:13:
12:92:10:93:ef:d5:70:82:f2:cc:8c:6c:4f:2c:b3:
e4:26:d7:5a:f0:b7:35:41:2b:2e:c3:4a:ec:aa:a3:
4f:44:f6:58:64:1d:06:db:93:b7:78:0e:62:39:dd:
1f:fc:e0:0e:ea:eb:50:68:ce:bd:c4:f4:84:aa:d4:
ed:dc:54:a6:38:c8:ae:49:d3:e9:ab:de:9b:54:fa:
45:21:67:3a:8e:2a:41:68:5b:6d:1e:33:8b:07:a5:
42:98:6d:02:a4:a8:72:8e:c8:ce:df:ba:36:0b:1a:
a2:4b:c7:48:2d:b0:a8:ce:9f:a2:b2:a6:4b:5a:c5:
a4:29:ea:d2:30:12:d8:ec:fd:e3:10:9c:45:be:b8:
ba:52:ea:ed:0a:73:f9:36:10:46:71:35:d3:40:7f:
c1:60:5c:c2:44:0e:47:22:d9:12:21:2d:b9:76:80:
00:70:16:df:22:c6:16:6f:07:c7:4b:61:bd:50:6c:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:56:50:A0:B4:C2:E6:0F:FF:74:9B:44:1E:EA:F7:87:8F:CD:AA:0C
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3d:16:a1:ec:42:14:13:76:1f:5d:43:cb:1b:b2:32:9c:7b:
f2:cd:97:ba:20:18:e3:a8:6f:cf:e7:bb:f2:76:14:f5:50:74:
ea:6f:52:a1:19:2c:a1:24:86:ca:52:e0:d9:d5:ed:97:cc:07:
d7:53:c0:54:c1:f9:ef:e1:68:27:7d:26:5e:bd:fb:a0:b7:93:
2c:26:87:77:b6:69:fb:fe:5f:82:22:b7:3d:f7:70:7f:f6:f7:
81:79:a3:66:aa:65:37:55:40:87:92:ee:c3:52:9a:b4:79:47:
b2:cb:ac:01:5a:10:8f:4e:ba:fc:8f:f8:21:c3:4e:dc:39:38:
d1:62:1f:7c:8b:d8:f4:04:56:7f:15:60:4f:f5:15:08:01:3b:
73:34:d9:a6:00:8d:a3:a5:4e:bf:10:90:5b:3a:9c:6e:77:4d:
6d:f6:94:88:46:ba:ca:4b:42:d5:2a:4a:e8:36:0a:f8:6a:61:
7e:6f:91:79:34:06:4b:5c:73:e1:a4:06:76:cd:ad:2b:ce:22:
59:10:e9:3d:dc:dd:1e:c2:fd:d5:85:e1:e4:17:e5:bb:9e:20:
95:05:fc:23:ff:7d:cb:7a:af:58:87:7d:51:f5:0d:85:a7:31:
d8:17:b1:da:03:4f:6d:24:4f:4e:9f:af:59:95:31:d6:d8:98:
12:d5:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:03 2025 by rpki-client