Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
File: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json)
Hash identifier: 858eqXuZIU+Q0QWQBzz/fdNPECItY+z2y+AeDY8T7FU=
Subject key identifier: D2:FB:5F:4C:C6:53:7C:DA:AB:6C:13:56:93:12:90:D1:58:6E:9D:59
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial: 019A537634A688373D4FA127EF7905BF49FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
Manifest number: 12AF
Signing time: Wed 05 Nov 2025 10:00:46 +0000
Manifest this update: Wed 05 Nov 2025 10:00:46 +0000
Manifest next update: Thu 06 Nov 2025 10:00:46 +0000
Files and hashes: 1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: cYXI6V1lwt9lcMbCKte3o8a9ilvKxkremHivSp9XUSo=)
2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:34:a6:88:37:3d:4f:a1:27:ef:79:05:bf:49:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Validity
Not Before: Nov 5 10:00:46 2025 GMT
Not After : Nov 6 10:00:46 2025 GMT
Subject: CN=d2fb5f4cc6537cdaab6c1356931290d1586e9d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:15:94:df:fb:a3:7f:11:9d:bb:0b:68:37:
a1:88:ee:cf:80:fa:6a:a8:86:49:f1:03:76:b9:50:
80:79:00:be:33:3b:2d:b6:0d:ee:18:08:86:50:b1:
a0:9c:48:fc:ce:df:05:9a:52:8c:77:cd:9e:7e:15:
da:cb:c3:05:1b:2f:03:ba:f9:08:49:e7:3b:39:ff:
d1:fe:74:31:1f:50:71:17:bd:6f:c1:dd:10:97:44:
94:3f:2b:43:1f:31:8d:87:4d:fd:85:5c:6b:06:08:
c9:d5:17:e0:2e:72:7d:8c:39:6f:62:bc:18:36:9d:
ae:22:68:05:c1:77:ab:4c:12:47:aa:73:68:dc:db:
35:4a:44:c7:45:67:fe:ca:e2:b4:9d:fd:23:8d:d6:
68:68:33:e7:b0:fe:36:ef:62:3e:f7:1c:1e:53:03:
64:f7:bf:e1:2c:d4:57:1a:9d:c2:14:a0:3c:61:de:
2a:87:69:a1:f4:69:54:10:2b:c9:25:84:c9:d9:92:
e3:7e:97:03:af:13:7a:c1:b9:22:05:f5:45:4b:50:
18:e3:b0:5a:e5:a4:9f:4a:67:09:9d:b9:92:7d:5f:
16:e8:e3:ef:15:f8:a3:7b:b6:9b:d9:8d:12:48:22:
ca:4c:3e:fe:8a:6e:e5:f2:95:79:04:65:eb:df:46:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:5F:4C:C6:53:7C:DA:AB:6C:13:56:93:12:90:D1:58:6E:9D:59
X509v3 Authority Key Identifier:
keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ab:55:5c:dc:db:fc:c2:70:c4:be:39:93:82:70:26:df:e9:
72:a9:72:67:71:8b:0a:33:af:94:b3:73:97:44:73:ad:13:56:
97:85:80:b0:d5:f3:17:20:e6:ac:01:d0:d3:a0:80:3d:49:ef:
a5:b7:1b:ba:65:97:b5:c3:7e:1a:d7:21:d4:58:b5:a4:15:85:
05:2b:5a:7c:8b:d4:2e:a3:fc:fd:72:90:86:91:40:a5:db:05:
d6:95:fd:b3:18:e5:d4:69:9d:e6:b1:93:8c:6d:0d:3a:90:7b:
ac:db:27:36:02:4b:8b:2e:72:27:7c:ae:4a:22:cf:2e:66:47:
df:da:2e:b1:1e:e1:29:f5:18:4a:d4:8b:ed:92:f3:50:19:1d:
84:31:82:1f:5e:72:75:e5:98:e6:78:7e:7f:d7:75:b2:13:ed:
f3:75:f0:59:f7:ff:45:c4:c6:8e:d0:4a:f1:a1:76:48:db:72:
66:33:69:b4:5c:ea:b1:fd:98:7f:7d:9f:00:6f:36:58:b3:be:
c8:fd:4b:61:81:17:db:84:2e:1f:fd:bd:b3:95:ad:87:c7:69:
05:ac:3d:9d:1d:a5:11:b2:e9:20:e1:5c:25:97:9b:2e:82:21:
5c:44:89:93:6d:6a:94:12:68:42:5c:63:d1:9e:04:50:cb:7c:
1c:7e:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:34:57 2025 by rpki-client