Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: 6OKH16kG/dhlBcz96ZfpMxw9gyuh6ihyj7qe6HtQ7+0=
Subject key identifier: 7F:59:55:AC:4E:9F:C7:06:59:4B:AA:44:C8:D7:D2:1C:8B:E5:F9:ED
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019A4E4F837EF3F7549D67D5DFDA3C37A194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: LN6z4Y6hZVmyV15166RBqSOFVayFu/NTyPyhCzsSq8w=)
3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:83:7e:f3:f7:54:9d:67:d5:df:da:3c:37:a1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=7f5955ac4e9fc706594baa44c8d7d21c8be5f9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:85:1e:10:a9:6a:16:45:69:c9:68:13:9c:
07:75:c5:3b:e3:59:2e:1e:48:4e:f9:1c:03:e6:97:
29:e6:d3:fb:0f:24:fb:e9:87:6f:84:50:eb:d1:1b:
cd:14:00:ea:4d:a1:0e:db:77:e2:16:54:1c:e0:07:
b6:89:8b:40:13:22:ab:76:1a:da:61:78:36:e4:25:
23:5b:5a:70:7e:da:0c:72:ef:71:f9:1a:57:c3:3f:
ff:a0:76:77:60:c4:54:0b:03:39:5a:8b:e5:d2:3f:
a3:a7:a9:ba:e1:b2:a1:dc:00:df:28:82:7b:0e:0a:
df:5c:7a:74:f3:03:09:72:77:00:f4:ff:ca:58:e4:
7b:4b:5b:c1:90:04:0d:87:47:59:d0:aa:3f:81:ed:
a8:99:59:1f:83:bd:8c:a1:f7:83:a9:ba:29:2e:6b:
23:fb:a6:13:b0:bb:d1:2f:0e:92:1b:c4:76:36:6d:
10:a0:fa:81:d6:ef:c4:54:43:7e:9f:63:5e:bb:c3:
72:9f:42:7a:79:5e:cd:40:79:cf:06:d2:5b:f7:35:
3a:da:7e:93:ed:ab:5a:78:0b:36:cf:4b:2d:54:90:
a8:d4:33:a8:be:d7:24:38:5b:c6:92:cf:f9:9d:b9:
4a:1a:b3:4c:57:8a:45:d0:18:e4:ba:f2:a4:6d:83:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:55:AC:4E:9F:C7:06:59:4B:AA:44:C8:D7:D2:1C:8B:E5:F9:ED
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c1:0b:f7:72:76:41:b2:e3:06:c7:57:60:2f:f3:a6:b2:45:
96:e5:ac:74:ba:db:fc:60:2b:9d:cd:08:a8:0b:2d:8b:b9:b3:
5c:b9:3c:24:cd:03:42:8d:d3:a1:81:22:c7:33:8c:64:62:67:
f4:53:3f:27:a4:73:89:0f:1a:dc:0a:0f:30:10:46:68:ee:fe:
77:95:7c:2a:ea:e4:b6:f2:85:14:ef:f7:4b:8a:7d:21:ea:f8:
01:d2:e7:21:22:5f:24:75:59:75:a4:81:fc:65:5d:38:93:0b:
b1:ec:6f:6c:c0:ac:1a:37:90:12:19:25:c9:db:40:25:04:67:
78:81:f2:9d:b6:31:1e:24:6d:e8:4d:cb:78:6f:47:3d:4a:7f:
7c:f7:60:ae:67:ee:f1:ff:d2:30:f3:ea:bc:f1:3b:b5:65:99:
e6:84:a1:43:f1:73:e7:a7:e6:94:2a:9b:76:77:20:c7:35:8b:
ad:8c:a6:28:86:46:c9:e5:13:c3:22:8c:55:4b:a3:f4:2b:a6:
e0:0d:29:ce:f8:7a:63:fd:8e:0f:18:61:13:97:90:ae:0c:02:
1f:da:14:04:35:71:a7:11:38:7e:2e:ad:c6:6d:96:c8:5b:3e:
c0:77:c5:15:80:c2:18:33:a4:3e:4c:d8:b3:cd:c4:d8:4d:4d:
de:0d:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:20 2025 by rpki-client