Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: XU1e5O9qzl7kJ5cDOZPuQfcWY0vC/pY5xiviqkqG8Ck=
Subject key identifier: A8:71:3B:8F:52:EB:E4:3B:97:93:2F:C7:AB:73:EC:00:16:96:A6:71
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 019A52D261E25027DD6C8B311707EAB7D751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 16DC
Signing time: Wed 05 Nov 2025 07:01:50 +0000
Manifest this update: Wed 05 Nov 2025 07:01:50 +0000
Manifest next update: Thu 06 Nov 2025 07:01:50 +0000
Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: 3l1KKgnlagUnOmvoYwZoK0dUf4HVzzKrm7Jo5kwFKpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:61:e2:50:27:dd:6c:8b:31:17:07:ea:b7:d7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Nov 5 07:01:50 2025 GMT
Not After : Nov 6 07:01:50 2025 GMT
Subject: CN=a8713b8f52ebe43b97932fc7ab73ec001696a671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:f3:9d:48:16:eb:fb:49:28:d2:d0:e0:e0:
27:c3:6c:f0:51:bf:17:e5:43:49:1d:dc:04:41:b4:
ea:03:42:b8:40:17:a1:6f:92:fc:a2:28:46:61:e5:
e4:25:d6:a5:66:ee:64:86:bc:d1:a8:01:78:c6:27:
b4:86:05:fc:f3:31:79:96:e8:cc:78:06:e7:00:e5:
67:49:d7:12:e4:da:97:c9:f4:f0:91:87:0a:55:8c:
6d:6e:17:9e:45:31:26:95:24:f6:4f:71:5a:7a:bd:
d6:69:d8:11:29:76:36:6c:20:31:85:c3:63:a6:0c:
19:b3:d4:2c:7e:f9:9f:85:b5:1f:11:e1:ee:ed:7d:
19:7e:ec:24:15:a1:1d:20:1d:65:49:c3:fe:f2:d4:
85:e8:81:37:a5:a9:0e:7a:00:51:c5:45:45:e4:d0:
0a:55:73:c4:ed:2d:5b:22:e6:fd:45:f3:f2:76:35:
fd:86:a6:b5:43:bc:05:89:ba:15:9e:f4:43:cb:0d:
ac:11:44:3a:29:d7:9d:db:48:95:67:bd:e6:b9:5f:
79:02:b8:91:67:88:75:a5:f4:b7:c2:21:e7:6f:87:
61:df:cf:f9:df:65:49:08:82:92:90:73:e1:5d:d2:
e5:51:41:91:3f:e7:cc:2e:db:bb:fd:a3:8f:c7:26:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:3B:8F:52:EB:E4:3B:97:93:2F:C7:AB:73:EC:00:16:96:A6:71
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6c:0e:e2:c9:39:99:9c:cd:f0:65:19:e4:95:03:67:73:48:
f2:69:d5:3d:c8:80:f4:6e:1a:38:fc:fc:28:8f:35:cb:c8:fe:
5b:e3:ab:36:33:7f:f9:0f:e9:d0:53:92:60:b3:2f:4a:9c:fc:
b2:d6:cf:b9:9d:2d:09:c6:63:f4:0f:59:d0:c7:18:0d:38:cf:
50:0d:71:63:09:a4:90:60:e0:a4:c8:db:d7:88:5e:28:ed:4f:
d5:52:05:5c:ce:cb:27:29:13:40:a4:bc:48:d5:23:78:ed:0d:
d9:b6:d2:ee:15:03:93:8d:38:f1:91:50:ec:6b:24:14:ff:0c:
4b:a9:61:6d:56:f4:0b:35:94:10:92:85:ec:dd:67:22:71:e6:
9e:0a:a2:02:2d:88:b4:0b:51:c7:91:73:2f:28:e0:d0:8e:b7:
68:7b:54:0f:6e:b8:21:28:55:48:3e:73:01:18:cb:e9:7d:f6:
d9:5a:22:c1:3a:0b:3c:ae:e4:40:e2:35:40:54:cb:db:d2:47:
7b:62:1c:51:0d:60:fb:b9:49:6c:87:b5:c0:82:5a:8c:c1:0c:
13:f9:e2:7d:74:db:d6:82:66:eb:01:ad:fc:51:52:17:a6:de:
0b:a5:ba:ae:06:c0:2b:c8:bc:55:22:bc:5b:63:00:d2:3d:45:
99:4b:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:25 2025 by rpki-client