Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: vyIgwOdZTxmsBuG+tpmFcO+Qrrt7SiB4zHiNhREoTmI=
Subject key identifier: CB:D3:65:54:A5:21:07:70:A7:31:E1:58:80:95:6C:17:D2:AA:59:FE
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019A503E6DCA6CE0077B90B227A0A9B191DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0ACA
Signing time: Tue 04 Nov 2025 19:00:59 +0000
Manifest this update: Tue 04 Nov 2025 19:00:59 +0000
Manifest next update: Wed 05 Nov 2025 19:00:59 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: mMj8wnBDDWyhEh54GeW4q0ACzOeMUdp+3MQ1alkB2qU=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:6d:ca:6c:e0:07:7b:90:b2:27:a0:a9:b1:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Nov 4 19:00:59 2025 GMT
Not After : Nov 5 19:00:59 2025 GMT
Subject: CN=cbd36554a5210770a731e15880956c17d2aa59fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8a:e2:c2:6d:70:de:bc:76:8f:d7:e4:9d:eb:
1f:a4:d8:7f:67:03:b4:d7:21:1b:3f:e4:9c:ab:e5:
a6:aa:91:1b:eb:c0:89:46:09:76:c6:11:d0:56:ec:
e5:35:ae:08:29:9d:dc:90:7d:c9:bd:75:eb:69:89:
7b:9c:6f:53:27:63:14:51:4c:89:7c:dd:ce:91:a8:
61:4a:9d:21:02:3e:8e:66:17:7a:73:6e:16:1b:25:
f2:8c:d3:20:f6:ec:eb:dc:19:ae:c6:17:db:da:a1:
82:05:2b:ec:29:63:f2:be:a5:d4:59:98:c3:e8:56:
a5:68:46:ad:83:c3:5b:a7:8a:eb:db:59:ee:f5:87:
fc:df:c7:c0:d5:33:d7:1a:d4:9a:71:cb:a3:12:69:
46:c1:d4:27:f5:ed:23:7e:d5:a1:bf:5c:fe:6a:0b:
4f:28:82:43:1f:bb:bd:3d:39:e8:81:21:19:d6:8b:
5e:93:86:51:b3:ab:04:1c:18:11:2e:44:d1:e6:d6:
52:af:fe:c0:86:44:1f:f3:8c:2c:c7:8a:50:fd:9f:
83:80:9f:77:2f:ea:98:07:ca:e5:91:6f:31:d8:9a:
37:77:25:34:72:0f:f9:a6:e0:e0:66:6b:72:c7:7b:
20:64:7f:d1:3a:c3:23:21:8e:ef:53:49:91:e8:12:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:65:54:A5:21:07:70:A7:31:E1:58:80:95:6C:17:D2:AA:59:FE
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:da:a6:64:db:75:ff:7a:5f:d6:40:49:f1:e1:5f:58:9a:04:
34:a1:be:f2:c6:12:4b:70:83:2e:54:c8:16:68:0a:79:6c:b7:
5d:55:89:86:34:d7:7b:1e:d8:67:c7:80:7d:f1:99:50:ba:cb:
57:d3:10:4a:96:bc:cb:99:1a:b6:3d:a6:a4:be:7b:16:f6:6a:
3f:37:44:05:52:d8:d5:2e:a6:bf:9f:c2:ba:4c:fa:a4:78:56:
84:7d:aa:de:f1:2e:99:74:91:30:0e:79:0d:57:9c:69:c2:f6:
67:14:99:0f:4e:d3:8a:f6:a5:c6:b6:86:98:25:0c:6d:96:e9:
4a:f8:41:7d:2f:77:73:20:d8:d2:68:31:56:96:61:99:20:d8:
12:72:9a:98:e8:06:95:41:0e:8f:75:05:f0:7a:3c:59:1c:02:
e9:54:54:be:5e:22:e0:6b:3a:85:a0:4e:fb:57:85:ec:b5:93:
b8:3c:c6:88:c3:17:a3:4d:2d:7d:7b:a8:aa:d5:f8:c0:c1:d8:
2a:6c:db:24:58:8e:8d:91:d6:26:b9:56:b9:a4:ef:96:28:af:
58:01:85:9e:a2:5d:7e:ec:e7:ed:0b:58:7a:12:cc:0d:f1:75:
c7:4a:3c:72:78:d9:0a:27:5b:a6:5b:1c:46:ad:c4:c0:6a:e2:
81:1e:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:28 2025 by rpki-client