Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: S7udZ/MxJAHb2FCo77IMWAcoO/zX9e4pCzjyoJ9qhGo=
Subject key identifier: D9:8D:88:CB:5C:B2:B7:45:38:A6:F7:B8:C7:DE:B2:91:49:B1:B2:84
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019A533EA5E8ECF5917274745E2A6BF6F590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0130
Signing time: Wed 05 Nov 2025 09:00:05 +0000
Manifest this update: Wed 05 Nov 2025 09:00:05 +0000
Manifest next update: Thu 06 Nov 2025 09:00:05 +0000
Files and hashes: 1: YdAjbfCRxVQuhwuJCOd8n6-9uGc.roa (hash: ryQI+IE9GniEW1zRKSAQBzSoJ8r45pp9QujhZtOYmEk=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: apqNYeXJyuuU7OBHHnuPWh5oVShpm6dIoeO08IE846E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:a5:e8:ec:f5:91:72:74:74:5e:2a:6b:f6:f5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Nov 5 09:00:05 2025 GMT
Not After : Nov 6 09:00:05 2025 GMT
Subject: CN=d98d88cb5cb2b74538a6f7b8c7deb29149b1b284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:16:57:b4:13:17:19:80:f1:22:c3:c2:22:
b4:eb:4f:a5:31:3f:47:d5:74:c3:c4:44:82:ad:5a:
50:37:6f:82:78:e5:4a:2e:b4:9b:d5:da:c2:f0:c3:
da:24:00:5b:8c:55:09:d0:f8:04:5a:f0:61:b4:4c:
38:3c:81:c8:9a:ae:d0:cb:7e:fb:b6:fc:ab:81:2b:
e3:ea:21:96:67:97:fe:ad:2a:fd:27:49:0f:30:e3:
c3:43:d9:d2:ee:9b:bd:49:aa:dd:c2:a8:cc:af:bb:
c4:26:15:ed:a6:0f:ef:f8:c6:40:75:69:78:f9:62:
79:ea:ec:53:c8:db:26:4f:d9:0d:2c:04:97:c6:12:
77:38:a3:3b:4d:5f:af:36:96:27:93:45:19:be:5c:
ca:29:93:26:8c:3f:53:3e:61:16:f8:93:92:e2:92:
70:07:34:4f:89:d0:24:37:32:9f:fa:9c:f0:ff:19:
af:1d:0d:ae:ec:ae:03:10:d9:c1:34:0f:74:84:7b:
5e:87:c6:5a:f1:24:20:98:a4:07:5d:40:9a:b1:4d:
48:6e:19:a4:25:8e:8b:8b:30:cd:37:24:2d:70:df:
54:26:af:49:c0:13:a0:ad:c7:14:35:8b:a6:f4:5d:
c6:31:6c:63:c2:61:25:d8:9d:b9:37:31:d8:26:92:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:88:CB:5C:B2:B7:45:38:A6:F7:B8:C7:DE:B2:91:49:B1:B2:84
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:96:d8:85:bf:8b:98:0e:60:80:29:80:34:3a:57:87:b4:ac:
5e:a4:68:0e:a8:32:37:72:fb:30:4b:54:53:9d:1f:4e:ab:68:
fc:03:05:00:a6:4b:0a:cf:4a:10:42:c3:35:73:fb:88:da:dc:
52:fb:38:b8:02:69:0d:c5:41:81:a1:70:f1:e3:6b:d3:91:5f:
21:9f:40:a2:f1:c9:6b:c0:df:4f:dd:de:87:2b:bd:59:7f:1e:
15:39:fb:15:d4:f2:69:40:8c:3a:b9:6b:b9:c5:4e:95:a2:4e:
94:28:53:a4:3e:30:6d:95:f9:bc:5f:74:61:85:9a:51:c0:ee:
b9:5a:1d:87:e2:1a:db:0e:7a:63:b2:95:74:60:fd:bc:ce:6e:
25:5c:dc:10:84:ce:b4:c7:df:ba:8e:d4:cb:6b:86:c7:37:8b:
30:f8:d3:c9:e8:a2:30:29:9e:19:d3:42:cd:8f:b1:62:ce:3d:
9d:65:70:4c:56:06:c9:2f:15:da:d3:79:93:4e:f5:e7:71:7d:
00:03:49:e4:12:dd:a9:d9:a5:72:04:bb:6c:bd:1a:b6:92:08:
b4:92:5e:2b:4a:43:5f:bd:d3:53:89:2c:13:d8:19:fc:d9:ca:
3c:df:4d:31:e0:ba:82:7b:d4:a0:24:87:77:5b:f0:d2:83:b7:
a1:e8:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:22 2025 by rpki-client