Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: XM0JWm9tq1fPNXqLMR538TxAvPABAgQRboadQXV/ESU=
Subject key identifier: 1B:48:0F:7D:2C:F3:BD:A6:54:74:7B:FF:6B:2D:A8:AE:2F:DC:3A:6D
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019A5752AC48610DBE78B23D2E52DB92E64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0C35
Signing time: Thu 06 Nov 2025 04:00:27 +0000
Manifest this update: Thu 06 Nov 2025 04:00:27 +0000
Manifest next update: Fri 07 Nov 2025 04:00:27 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: DfwbpxVkQJBnW6uHiz3vCA+DW/I+yAL90Z5A8i+6NDk=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:ac:48:61:0d:be:78:b2:3d:2e:52:db:92:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Nov 6 04:00:27 2025 GMT
Not After : Nov 7 04:00:27 2025 GMT
Subject: CN=1b480f7d2cf3bda654747bff6b2da8ae2fdc3a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:e8:3c:3f:e8:89:d0:4e:49:0c:4c:ab:5c:
95:02:75:6c:6d:8a:c6:cf:63:99:b6:bc:a1:31:d3:
2a:92:fa:90:4d:c2:c2:08:2b:f5:e6:0b:2d:d6:9a:
a2:9e:80:bf:75:15:75:97:6d:d4:aa:25:64:86:1c:
35:9f:de:06:5f:29:5d:c0:9c:66:82:88:ce:33:5f:
76:77:9a:8a:e0:59:ad:fa:65:72:8c:6a:ed:63:da:
7e:2f:51:1f:51:fa:aa:76:1e:ad:61:90:80:d1:c7:
04:39:5b:9b:73:56:b7:64:e0:a0:9e:96:e0:4c:80:
dc:14:1e:7d:80:b8:bc:68:f1:a6:71:90:74:8a:27:
59:51:4b:a5:d0:3b:8c:1c:e7:1b:1b:1b:13:f0:21:
6a:25:da:bb:38:8c:31:53:ce:5b:ca:4b:a1:c2:58:
66:f3:2e:7a:e1:44:30:8c:eb:a5:d4:01:66:2c:d5:
d4:fb:08:87:ca:c5:3e:a5:f6:16:07:93:11:a3:a0:
fd:31:26:94:cd:51:d1:7c:6b:4e:05:ef:cf:ef:bc:
e8:2d:e8:ac:bc:a1:28:d5:27:29:d3:df:de:77:a9:
de:5d:6a:18:34:7b:35:fe:00:0b:d5:f7:cf:f7:53:
0b:ab:68:3f:59:c5:84:e8:2e:8e:dd:d9:03:3a:36:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:0F:7D:2C:F3:BD:A6:54:74:7B:FF:6B:2D:A8:AE:2F:DC:3A:6D
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a5:21:23:ab:bf:cb:a7:e2:1c:13:4c:24:58:dc:1c:89:9f:
8e:4d:cd:38:bc:f4:9d:2b:7c:29:59:c6:06:91:ee:95:81:2f:
c9:ea:54:59:a3:bb:61:5e:2a:e0:cf:e9:91:1f:0b:14:36:ad:
f6:d4:93:9f:08:2c:16:a4:1a:f9:30:2e:cd:70:fe:c6:f7:56:
9c:9e:89:bf:3a:05:29:06:67:89:84:85:11:aa:03:3d:ec:0c:
10:71:14:18:2b:f0:b2:26:06:83:e8:fe:56:3c:63:fb:6c:a8:
fb:cf:f6:96:71:98:d9:cf:37:36:cc:39:57:67:76:20:d6:c4:
7d:a0:7e:bd:2a:23:dd:01:6f:30:c3:f2:a9:ad:0b:b0:bd:4a:
26:14:67:fc:47:35:97:e7:db:f6:2d:6e:3a:e2:71:d3:a2:42:
e9:34:34:cf:23:eb:19:c8:51:e4:b9:96:ef:4b:fd:75:96:30:
9e:29:da:e1:6d:58:7c:de:c3:19:06:52:38:36:9f:f9:86:3b:
40:f0:46:ff:d5:80:8a:7c:f8:a9:26:a4:31:96:d7:f0:56:86:
63:6e:01:ac:4a:85:07:c5:8f:5a:65:da:3c:33:ab:4b:a8:fe:
d3:81:c3:48:0e:17:a1:c7:99:a0:13:a7:0a:8f:56:f2:92:b0:
b6:36:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:06:06 2025 by rpki-client