Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: o1vVupb2H7eP+uH7I74okdAh+V/KpyfDG63Q5x7XU3U=
Subject key identifier: 2E:B0:3C:88:D9:E9:44:DB:E6:D0:D6:2E:66:62:1A:CD:56:6A:0F:4A
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019A4E18CD2DF3487CAFBDF30775849C4255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: D999YP2w+JAPrEv+1IFplUTuMoStSbsBkuhXQq7yRTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cd:2d:f3:48:7c:af:bd:f3:07:75:84:9c:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=2eb03c88d9e944dbe6d0d62e66621acd566a0f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3f:49:70:33:07:b6:3a:93:0a:c0:1e:ae:5d:
e4:18:21:77:02:db:db:8b:09:6a:23:fb:8d:1f:39:
40:f1:70:50:5e:8d:fd:b7:0e:70:b6:b7:ef:d4:d1:
3e:25:d1:73:58:d4:1a:c2:85:72:b6:c9:82:4f:70:
b4:70:0d:09:0c:a6:1e:57:64:b6:bd:88:06:ea:c8:
1d:a6:b5:d0:a3:32:be:04:90:b2:9e:ab:0c:5b:39:
87:43:06:6b:7d:c8:db:7f:d3:b0:c2:33:69:de:86:
57:fc:bf:91:66:b9:85:29:a4:90:72:a2:94:57:01:
bc:7d:3f:a2:d5:ac:38:c7:fe:1c:4e:71:96:23:f9:
15:53:fc:2b:04:72:db:86:a4:c8:49:cd:17:ba:ff:
bc:8f:a1:92:e2:15:3d:e5:9a:99:78:0f:8c:6c:00:
66:21:f4:ff:6b:8c:68:59:3b:42:5b:d2:8b:af:7f:
1a:eb:99:ed:c6:b9:af:b1:5d:c2:7d:51:4b:c1:d7:
e9:aa:c3:fa:c5:61:64:2e:cf:8d:cf:8c:b7:d1:59:
bf:c5:d4:60:b5:e1:37:e9:5d:9f:77:00:b1:d3:59:
ab:9e:ee:e0:b3:f5:14:5d:61:b0:fe:da:45:59:0a:
f9:47:7c:cb:4c:b2:a0:6a:c7:5a:be:48:05:00:cf:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B0:3C:88:D9:E9:44:DB:E6:D0:D6:2E:66:62:1A:CD:56:6A:0F:4A
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:00:1e:76:49:c8:60:3a:45:dc:90:c5:3d:37:2b:14:3d:9b:
33:50:5e:c7:1b:8d:4a:2e:4a:f3:5c:80:99:a8:e6:47:71:2b:
d8:6f:5e:1f:67:a2:5b:b9:3c:9c:38:d9:65:cb:22:56:14:92:
67:fd:30:98:14:3d:1c:9c:f4:a2:e3:00:9a:dd:44:fb:06:25:
ff:df:11:b4:e4:65:cf:18:f0:1c:f3:c3:8a:d4:54:c3:67:60:
f6:72:c2:6a:54:c4:b5:05:30:e1:5c:95:d1:63:8c:97:70:19:
d8:0b:2e:fd:c2:9e:a2:6e:8d:5f:5e:84:42:0f:32:89:a9:53:
bf:de:8a:52:0c:f8:71:29:bb:48:58:68:b7:76:3b:98:d2:1d:
f2:b5:89:16:aa:d5:37:97:94:61:57:16:7e:36:a5:9d:a3:d7:
8a:e9:9b:2f:fc:de:3b:17:84:7a:90:54:1c:e6:6e:14:22:f4:
88:79:d9:ca:45:59:ee:7e:18:81:c6:1d:01:39:9e:5e:32:0e:
2b:f7:29:b9:71:a5:3d:c8:1b:b4:1c:63:87:b3:bd:69:ed:af:
c7:bb:cf:c5:b4:e8:f1:63:cf:7a:25:ff:59:2b:4c:ec:bd:f9:
9b:d4:d3:04:72:32:61:b9:e5:0b:d6:75:12:96:34:e0:58:f5:
d2:53:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:58 2025 by rpki-client