Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: B0f+D7HriikUWycU5oQ/T5Qvr1wzV/mr8tAoPpmg9R8=
Subject key identifier: 7A:2C:56:76:AD:8E:35:1A:AA:AE:1E:E9:1E:6D:4C:96:C4:BF:22:EC
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 019A5074B746613B2AEE36246FC3FC2369BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 061E
Signing time: Tue 04 Nov 2025 20:00:17 +0000
Manifest this update: Tue 04 Nov 2025 20:00:17 +0000
Manifest next update: Wed 05 Nov 2025 20:00:17 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: 4+zu7RPiklqBvkTXD8IGQQA2ikMZPHpKIIs2RCYsFVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b7:46:61:3b:2a:ee:36:24:6f:c3:fc:23:69:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Nov 4 20:00:17 2025 GMT
Not After : Nov 5 20:00:17 2025 GMT
Subject: CN=7a2c5676ad8e351aaaae1ee91e6d4c96c4bf22ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:1d:43:b9:58:ab:a3:b8:91:65:df:60:23:
bb:db:87:d1:8f:db:82:48:eb:3d:80:50:27:7d:d6:
bd:6d:47:d1:68:c0:13:62:31:ba:78:9f:59:ad:ea:
d8:31:96:5d:87:4f:f5:e6:dd:09:f5:79:3a:ad:9c:
fe:a6:62:2c:c6:3d:53:1e:e3:46:24:17:ce:21:65:
9f:ff:d4:62:db:1c:30:5f:86:f5:f5:dd:6e:c6:68:
24:d4:46:8a:0e:f0:45:5c:03:4d:4e:c4:7d:1b:e3:
d6:1b:0d:6a:d6:57:a4:50:f4:dc:c1:c9:fd:dd:10:
e7:ff:a3:76:30:35:0d:8d:03:0c:51:72:d2:fe:d7:
cc:f1:9d:73:00:56:26:20:c9:f2:98:f0:7e:51:34:
9d:06:19:66:61:03:65:c3:14:e0:d1:30:2d:6e:98:
57:7b:b4:3a:2a:1c:c8:55:88:a6:bc:eb:3f:15:0a:
4c:9a:0f:94:c3:bf:0c:46:f3:15:c6:2a:7a:06:0a:
c8:a9:2f:38:8d:4d:68:18:e7:ba:a0:f5:bf:4c:40:
50:0c:66:0e:7b:06:cf:07:0b:cd:b5:e3:43:4f:ba:
c6:01:92:92:d5:19:b5:ae:fc:f0:80:7f:0f:3d:04:
5c:df:9b:7e:54:a4:45:ae:bd:8c:0b:7d:9c:db:3f:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:56:76:AD:8E:35:1A:AA:AE:1E:E9:1E:6D:4C:96:C4:BF:22:EC
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:28:e8:63:7d:0b:c3:cd:bd:27:c7:c7:4a:2c:e9:3d:ab:77:
f9:a7:b8:02:80:72:5e:2b:b1:9f:28:b4:93:84:c3:fc:96:27:
70:8e:9c:6c:bc:d6:8c:b3:2b:b3:f2:8d:14:90:b0:ef:3f:6a:
24:52:c3:44:82:30:fb:b5:ed:54:b3:1f:29:d6:bd:3b:d3:2a:
fa:77:ea:fd:e8:e1:71:eb:b0:44:60:04:b2:eb:cc:6d:31:5d:
17:d0:a9:62:2f:31:b0:16:25:fa:d3:ef:ed:d6:c4:55:35:8d:
53:dd:73:7f:96:49:49:2a:17:28:7c:72:02:c3:74:00:cd:08:
60:2d:1d:e8:ec:d3:36:0b:da:dc:b0:9a:f0:e0:9e:bb:40:77:
e2:28:ba:ae:a7:f0:e9:8f:60:b1:3d:c3:75:7f:be:55:e2:62:
dc:2f:ca:6d:56:da:07:d1:32:ed:62:40:c0:97:49:93:9c:9b:
86:76:cf:90:f7:5d:e9:1d:8a:0f:22:4d:4f:28:8d:ff:b7:08:
30:c5:6a:77:ca:0b:a8:5e:e4:32:5c:0b:99:62:45:36:34:62:
fb:82:a2:1e:68:3d:05:d5:c7:f1:5e:47:9b:c8:49:24:0a:49:
94:fd:99:50:91:76:37:4e:fd:9e:9d:d7:76:f4:1c:e3:b2:3e:
41:9f:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:07:41 2025 by rpki-client