Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier: aGTRks7liL3juYZb5PyNKs8kOHDrNeQegaQBf40dGTA=
Subject key identifier: E8:C7:C9:DF:F2:B4:2B:A1:3F:18:CB:B8:15:3E:55:78:BC:4A:72:4D
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial: 019A4E18C884AD5770D29E6879CA48A5E5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number: 16F2
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: o/ubXGTRvHg5lU4BKdZ47xLPVkeUJcNWHc5eZqUqlJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c8:84:ad:57:70:d2:9e:68:79:ca:48:a5:e5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=e8c7c9dff2b42ba13f18cbb8153e5578bc4a724d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:dc:b8:1d:86:1c:e1:b0:56:c6:d2:71:6e:
52:55:8a:48:c3:75:6b:eb:a9:67:6b:40:c7:fe:e4:
64:9f:9c:ab:c9:0f:6b:af:91:9e:d3:2d:61:63:e9:
59:09:2f:59:67:e5:53:25:59:c3:50:e5:98:71:08:
9b:e6:19:2c:d9:25:c0:0c:7d:20:01:6e:75:e7:d1:
62:03:e9:67:13:55:63:a7:1a:d3:8a:2a:32:d0:de:
e9:c0:a3:4e:5c:f9:3b:7f:fa:aa:db:30:76:c7:40:
10:86:2e:08:22:6b:0b:b5:46:01:f1:10:cf:e5:e1:
2c:ec:a3:cb:26:50:95:f4:4b:51:28:b0:2c:f4:b1:
4b:c5:1f:7b:f4:6e:43:e1:51:0b:66:14:15:c7:20:
e1:d9:8e:4e:b3:4b:19:49:a0:1f:f2:d2:fd:11:7e:
3d:8f:e2:44:64:a8:54:9c:96:9d:40:ce:5b:31:91:
42:ac:9e:6b:ca:0f:64:9e:e4:c1:c1:37:5f:ac:ee:
d1:25:3e:98:d0:01:69:30:ae:55:d0:45:d1:c3:af:
d4:d2:c6:ec:1e:0b:8d:5c:5c:8c:5d:09:01:e3:d7:
f6:c1:53:04:82:ab:02:10:46:bd:54:3d:b8:db:7b:
0d:29:fd:e0:75:f9:82:d6:5e:b1:8c:04:b1:c0:5f:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:C9:DF:F2:B4:2B:A1:3F:18:CB:B8:15:3E:55:78:BC:4A:72:4D
X509v3 Authority Key Identifier:
keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:31:66:83:ad:c1:50:da:ff:13:84:cc:0c:e9:d3:55:b1:96:
22:12:12:29:b9:ec:5d:32:7d:cf:35:d5:0c:0f:45:6a:2c:c9:
7b:89:8b:de:36:de:67:98:13:8d:9d:58:55:fc:36:98:82:8d:
5b:87:fe:bd:a0:6e:b9:26:52:f7:0b:00:29:0d:a3:e8:6c:4f:
7f:f7:bb:0f:c9:42:1a:eb:75:0a:48:f1:ff:95:d1:cd:74:52:
a7:01:1c:18:e3:02:a4:9f:b6:8c:b0:19:96:f8:bb:97:db:22:
fa:58:c6:ec:b4:6e:e3:f0:53:c1:1e:e8:00:89:06:05:4d:f5:
b4:1f:07:77:bf:28:11:9c:64:73:0b:54:49:9d:93:43:e0:da:
83:b6:53:47:c7:d8:fc:11:f6:e9:1e:fc:9e:a3:a5:b6:5f:a6:
ae:2d:02:02:c0:73:56:32:61:3f:ac:16:10:4a:97:54:76:de:
20:fb:25:4c:ef:4a:20:d5:72:8e:2a:44:96:c8:a5:73:ed:c6:
f0:03:ea:14:e4:03:a3:8d:bd:61:af:8c:e9:4c:a3:30:10:82:
22:26:d5:fe:d4:8d:b8:b4:85:fd:72:a8:95:5e:f7:ed:95:39:
66:61:03:28:d7:a1:b1:19:c9:dd:6a:e6:94:21:c1:55:99:1e:
ed:51:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:07 2025 by rpki-client