Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: ft2rTbvp9xGIbTd6t6cA7Wak+Ryt+PglHN5YQFbhWyY=
Subject key identifier: 95:8D:86:A5:2D:F7:EA:E1:95:09:22:F3:85:B1:5E:E4:DA:62:07:5C
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019A4FD082FEA534FA44CFE89D3F698D67AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:56 +0000
Manifest this update: Tue 04 Nov 2025 17:00:56 +0000
Manifest next update: Wed 05 Nov 2025 17:00:56 +0000
Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=)
2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=)
3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: 9tv2SgsEYc2x9V58bVL4IRJxSXFrlYes9UoZjrGcTN0=)
5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:82:fe:a5:34:fa:44:cf:e8:9d:3f:69:8d:67:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Nov 4 17:00:56 2025 GMT
Not After : Nov 5 17:00:56 2025 GMT
Subject: CN=958d86a52df7eae1950922f385b15ee4da62075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:32:31:67:0f:b7:5b:49:49:92:0d:1a:f0:
e9:92:56:46:48:73:5b:92:76:3f:29:16:0a:b1:7f:
61:df:fe:36:00:d2:a9:98:c4:bc:ad:a7:25:9a:82:
60:db:10:eb:8d:fe:6a:97:b0:ac:39:83:0d:c7:dd:
1b:42:d5:17:1f:30:85:1c:ed:12:9c:cb:d1:53:72:
12:44:74:cd:00:de:07:58:9a:9d:6e:a8:94:1d:21:
42:b6:b5:36:e2:c5:37:1f:41:df:e5:b5:46:20:af:
ee:9b:93:ba:cd:f8:d9:9b:d9:ad:02:b3:c9:25:43:
c8:1d:d0:4a:60:0a:d9:b8:38:4c:58:8c:ba:f6:03:
1e:5d:d0:1e:b9:d6:54:06:ab:7c:e9:d7:1c:86:b7:
fc:6a:03:b3:eb:ed:61:d3:20:ff:51:38:fd:d6:5d:
44:6a:db:31:01:f5:e7:fc:46:d0:13:97:52:9c:22:
93:bf:c9:4a:ff:b4:32:a3:24:9b:8f:57:bf:d9:04:
1f:44:bb:e6:fc:f3:82:6f:1e:2c:8e:42:5b:8f:f6:
0e:f2:8b:df:4a:51:16:b8:20:b9:51:c4:1b:c6:91:
66:35:91:b2:c7:c9:e6:f4:93:70:c4:3b:01:1e:d3:
91:2a:7f:d9:4b:f5:05:34:e9:c7:ce:00:b2:11:90:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:86:A5:2D:F7:EA:E1:95:09:22:F3:85:B1:5E:E4:DA:62:07:5C
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:51:ae:0b:62:c5:76:c1:81:bc:f5:6b:d8:d9:fb:06:d7:08:
7e:f6:e8:a3:43:f0:8a:97:1d:0a:ce:d8:f7:24:5d:5f:d5:d0:
00:85:30:05:b7:10:1f:83:6e:25:34:e4:6d:7e:ba:23:08:51:
0a:94:a1:31:53:15:a3:7e:da:20:c8:4b:39:ba:a3:2b:5f:c1:
9b:fc:3f:c1:dd:68:6b:b3:2d:89:3a:f4:ac:93:29:4f:72:29:
49:b4:fb:2e:08:47:32:b2:d6:a8:29:20:aa:e7:ce:3f:96:df:
c2:32:31:12:6c:4b:7c:fc:4f:da:af:30:80:7a:02:1a:21:64:
0c:f7:6b:bf:bc:d9:bb:fc:06:10:dc:f0:d6:80:6c:3a:60:f1:
99:82:1a:24:55:52:58:bb:43:fa:15:79:db:a7:c6:0d:ea:c7:
33:aa:11:2c:f2:c7:63:bb:c4:5d:57:91:b2:43:44:36:f9:6f:
23:32:55:af:0a:b8:0e:ab:49:dc:5c:b8:a0:80:85:1d:df:e5:
75:53:ad:eb:d4:e9:1b:bf:6b:bf:06:ba:ee:36:c6:c6:af:7e:
78:c2:f8:44:4c:4b:dd:bb:a0:b8:1b:3d:fd:98:0e:62:fc:a6:
dd:3f:47:4c:95:e9:6a:b7:26:86:79:f4:b0:c9:8a:2a:bd:cc:
cc:b3:97:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:55 2025 by rpki-client