Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: Bc3Wu/q63Kul/MHif3OhNrgLOOuyt6Rv1soGwt8/NfQ=
Subject key identifier: 20:85:26:C6:3B:56:66:99:2A:73:53:E1:E3:49:98:BC:B7:0F:0E:5F
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 019A4F2B31B8E95C999FEA9C4B7AAA863372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0FA4
Signing time: Tue 04 Nov 2025 14:00:22 +0000
Manifest this update: Tue 04 Nov 2025 14:00:22 +0000
Manifest next update: Wed 05 Nov 2025 14:00:22 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: MZYsvGYredp3xEvBk19X8jNoRGMm/YYr6UvZyNld7zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:31:b8:e9:5c:99:9f:ea:9c:4b:7a:aa:86:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Nov 4 14:00:22 2025 GMT
Not After : Nov 5 14:00:22 2025 GMT
Subject: CN=208526c63b5666992a7353e1e34998bcb70f0e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:6b:1d:ee:f4:86:98:41:66:d3:e2:ad:45:
40:ab:7f:a9:e1:c6:65:a0:e6:2f:1d:3e:29:b8:c6:
82:2b:29:fe:ef:9e:78:46:aa:09:58:1b:0e:7b:fb:
23:10:42:cc:ff:84:76:6c:d9:77:0b:81:85:9c:2a:
ed:f9:ff:6d:45:93:c7:a1:5f:3d:0b:1a:bd:bd:77:
f7:5c:4a:25:f3:f9:76:4a:c2:92:83:14:6b:1f:1b:
08:b4:8d:a5:d0:4c:7e:a7:6e:df:25:16:97:2f:e2:
ca:b3:79:a7:ac:18:2f:80:5d:59:ba:f0:8f:57:95:
a9:f3:0f:92:3d:74:c3:58:5d:9e:dc:c3:73:09:ab:
1d:69:5f:4f:1c:b7:c0:77:c1:eb:6a:1a:a3:9a:66:
93:85:c4:1c:05:37:c6:34:ff:2b:81:1a:16:d4:51:
dc:2d:56:b1:b0:b9:c8:3e:fa:49:ee:c2:bb:01:ff:
6e:43:04:c3:d3:c5:ce:32:6e:83:39:7e:89:7d:55:
7c:48:1c:60:a0:2b:d2:5f:b2:de:a2:92:d6:ae:ee:
95:73:dd:9a:00:7f:d8:b0:69:7d:1b:e6:2e:3c:c1:
7b:f0:b6:10:5a:43:53:d4:80:51:16:ea:28:4e:b9:
77:93:82:88:4a:67:57:a6:d3:bf:ba:86:43:08:fd:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:85:26:C6:3B:56:66:99:2A:73:53:E1:E3:49:98:BC:B7:0F:0E:5F
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:b0:86:98:5e:62:d7:87:61:c2:c5:12:48:df:7a:7e:0c:
44:34:9c:dd:a8:2a:8d:17:cd:d0:81:ef:26:61:7f:16:5a:9c:
70:09:b3:7c:5e:59:d5:19:ff:eb:ae:ea:75:a9:ae:9b:82:60:
d0:12:da:53:6c:11:c3:d2:47:bd:1b:77:c2:04:ae:79:c1:cb:
c9:a9:08:e2:ba:f9:c9:3b:99:61:07:1a:5a:4a:48:4e:63:0a:
4d:99:f6:c5:59:91:aa:82:96:f7:fc:b5:ec:a8:b5:c5:95:4e:
1b:fa:6e:bd:e5:6d:9a:81:36:87:ed:a5:3a:76:da:0a:97:77:
46:02:1b:7c:a3:65:d2:79:bd:9d:78:e1:95:e0:d8:e1:eb:dd:
9b:c6:5f:bb:36:2d:c0:6d:bc:43:b1:46:3e:d8:dc:60:a4:c9:
35:b1:15:da:8e:b7:0a:18:f1:7f:0b:62:64:c3:f5:7d:5e:13:
7f:7d:21:55:91:5b:de:e1:40:31:12:66:f8:db:77:e8:be:c6:
1c:a1:fd:2a:30:3b:d3:ce:26:e0:d5:4f:39:d3:dd:d2:96:ca:
d1:cd:ee:04:70:6f:92:99:2e:f0:b6:7b:90:9b:92:43:b7:66:
92:74:ea:c6:a0:65:d9:fb:3c:eb:31:98:6c:c8:44:46:5d:45:
56:d7:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:53 2025 by rpki-client