Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File: gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier: 6a/osjIZ0xPx7Binf66+K27Um03bgLMY23hJwTpnFoI=
Subject key identifier: D6:C6:EF:6C:EA:6C:70:31:39:BE:03:44:34:11:8C:A4:EF:D0:A7:50
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial: 019A4E869A629B3B035B7F3307D5004272F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number: 0620
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: qKU4/oBx7vJP9Y3c0G0856DjEzvQc/ERN/HvHkkIl+M=)
2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9a:62:9b:3b:03:5b:7f:33:07:d5:00:42:72:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=d6c6ef6cea6c703139be034434118ca4efd0a750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:66:b3:9b:a0:1a:e2:d9:2e:96:57:28:e9:
42:b3:ad:aa:e0:0d:09:01:d2:9c:82:6f:98:58:fa:
20:62:ee:4a:e8:56:47:b0:a3:64:26:79:fc:ca:15:
28:69:66:f4:ce:48:40:d1:ed:01:3a:8f:07:7b:49:
62:2b:77:f5:82:f6:c7:ab:3b:9b:74:4b:72:e9:05:
b8:bd:e3:7e:01:c0:9d:a9:1c:07:33:3b:88:64:e6:
4d:64:3c:c8:f5:d8:14:32:87:0d:10:3e:40:2b:a4:
28:27:cf:47:72:66:d2:6a:41:f0:57:9f:a9:d6:69:
f5:76:21:e4:e0:9b:03:aa:ee:1d:91:56:44:a9:c8:
f0:83:b4:67:8e:a1:89:6b:e8:f0:f9:5b:54:e1:65:
1b:ee:bf:29:12:b7:ca:0d:43:57:90:b8:a0:70:58:
ce:0a:e1:7c:ee:df:c9:32:fc:4e:36:b4:b1:d5:e6:
72:f7:e9:7e:75:1f:7f:64:7a:c5:96:74:e4:5f:76:
5e:5d:1f:5f:19:5a:0d:46:f4:6d:06:f8:81:30:92:
1c:85:41:94:9c:fe:be:3d:ef:28:86:75:cf:e0:22:
89:a2:84:ca:8e:6e:36:cb:21:d4:7c:c0:d4:1a:40:
35:f4:d5:2b:75:b1:ca:47:df:c7:4b:f1:35:eb:47:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:EF:6C:EA:6C:70:31:39:BE:03:44:34:11:8C:A4:EF:D0:A7:50
X509v3 Authority Key Identifier:
keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:99:f4:74:47:32:47:f8:d7:5b:41:49:fc:b3:cf:9f:7a:f9:
79:ee:81:18:e4:10:65:4b:3a:d2:a1:35:05:d4:4b:e1:5b:66:
94:29:b0:91:1c:f0:fa:ca:b3:02:11:69:c5:4e:0f:5a:49:2b:
51:92:94:cf:33:df:58:49:a6:00:05:ab:e5:ad:6d:6c:86:ea:
06:b7:4b:0e:92:5d:d9:9a:31:19:60:c6:ec:3a:76:f9:3b:48:
be:0c:21:6d:cf:a0:57:5e:d6:da:f0:49:a5:e2:3d:ac:64:5f:
31:dd:3e:13:ee:35:db:17:d8:5d:7c:cb:2c:f6:80:8f:b0:0f:
1c:56:16:83:a6:b7:1c:e6:0a:8e:b0:a1:82:43:43:9b:5a:aa:
af:49:26:47:87:6e:af:1c:6a:73:2f:91:26:58:d5:45:42:a2:
57:0e:8f:4f:37:83:3e:42:4e:98:1c:d6:c1:83:84:9b:d4:88:
75:fa:7e:27:e4:85:2c:36:9f:6a:bf:30:0b:29:bc:86:b9:5b:
2e:7f:c7:3a:bd:a7:c3:a9:94:4b:43:0e:ef:b3:f3:65:8e:5b:
78:20:e4:40:52:6c:54:30:41:0c:f2:8d:52:d3:9b:a1:7a:ad:
a2:da:75:41:9b:43:14:7d:4d:02:d3:43:55:2f:1e:9d:19:94:
8c:89:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:17 2025 by rpki-client