Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: pARamlugAFLajgKQU9KXz8yzloN3O876Pc1cXX9NYP8=
Subject key identifier: E7:1A:B8:A9:64:E1:92:6A:E5:46:AB:06:58:78:DA:CD:55:91:A2:B2
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019A533F12F655DFD68F342BED297EB5736E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 16C8
Signing time: Wed 05 Nov 2025 09:00:33 +0000
Manifest this update: Wed 05 Nov 2025 09:00:33 +0000
Manifest next update: Thu 06 Nov 2025 09:00:33 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: QsA63htkLwfYnYHs-Kq4o8mj9CE.roa (hash: rn3uqwJBUFxLOERoWp4bxdCoGJiytcYNcQK3zAQq29M=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: tdN+C0kWZ87iWksYhA9WdwXeEaL8YG5vJc6Crgc8KHY=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:12:f6:55:df:d6:8f:34:2b:ed:29:7e:b5:73:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Nov 5 09:00:33 2025 GMT
Not After : Nov 6 09:00:33 2025 GMT
Subject: CN=e71ab8a964e1926ae546ab065878dacd5591a2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:c1:f5:6f:85:20:73:fc:99:8b:41:2b:bc:
c1:ed:fb:10:94:f9:49:85:a1:3a:f0:fd:d3:30:a3:
b2:99:c0:0b:93:75:5d:54:64:cd:62:e5:37:db:1a:
d4:73:fb:6f:93:e4:cf:5a:c2:6e:ce:16:6e:21:42:
c6:fc:5e:15:96:12:2b:f8:a5:29:76:ca:b4:21:94:
ad:4a:67:ea:b7:7f:f5:73:99:50:e7:76:79:de:1c:
31:13:2c:1c:d1:b9:b2:0d:d4:95:71:69:88:08:89:
9b:ef:0c:c8:0d:22:a8:32:ae:7c:84:38:09:c4:33:
04:1e:8f:41:f3:47:ee:1e:64:52:0e:5d:e5:df:50:
04:35:6e:20:03:45:32:c9:c6:fe:fc:89:b7:90:46:
5e:b2:28:d4:41:ed:85:b5:76:67:0e:58:53:2e:e2:
6b:bd:e0:99:80:c5:ff:20:d9:90:50:ae:c4:17:6b:
f9:af:69:e9:b0:c1:ad:14:72:90:37:03:00:95:23:
86:46:2d:f6:2c:42:b0:93:ff:3c:5e:7e:a9:a5:bd:
4e:05:e4:12:5b:f9:ff:49:57:e9:fa:da:3a:8b:37:
1e:6e:97:52:9a:d1:8e:8e:e2:98:94:14:90:43:ea:
d5:7f:5c:fb:93:1e:77:4a:4e:e6:e1:92:0a:da:81:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:B8:A9:64:E1:92:6A:E5:46:AB:06:58:78:DA:CD:55:91:A2:B2
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:a9:68:e8:52:00:94:01:f5:bc:21:3c:2b:56:11:78:0f:
df:f8:37:17:27:20:a7:ab:70:37:93:6e:ab:b2:f1:23:c5:41:
29:1c:11:81:34:cf:28:c6:a3:8c:99:bd:74:1d:9d:90:5e:88:
a5:02:ee:25:d5:11:8b:e7:75:e0:9a:94:12:25:22:c3:be:31:
d6:44:1d:73:06:da:9a:cc:45:09:00:04:fa:9a:18:45:e7:72:
12:ae:f5:66:07:68:3a:ea:e5:99:c7:3e:75:86:14:24:12:7d:
e2:f3:3a:a7:71:1f:08:28:cd:cd:66:95:56:90:2c:67:26:72:
f7:7b:e4:94:fb:45:9c:f7:87:6a:5f:ec:1a:50:34:cd:c3:3f:
91:a9:34:27:54:ae:b1:ae:19:69:48:62:22:ee:d8:96:37:90:
07:19:b7:4c:52:1c:32:e1:4d:96:78:c9:08:da:ff:4d:eb:78:
8a:5b:b2:b4:8f:9e:cf:6b:6c:ce:31:14:7e:81:c7:be:97:54:
0c:e9:d9:83:f5:ed:57:83:c3:44:79:9a:2a:9d:d2:6c:b6:d9:
d2:66:05:89:1a:95:14:46:bb:0d:24:fc:ec:1f:73:9d:7e:73:
7f:68:ed:8a:17:80:b8:a9:a4:51:97:3b:e1:2f:2d:95:2d:ad:
ed:c7:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:37:32 2025 by rpki-client