Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: Ra/EqsIQa39+w9eyLjYBLxZfr+EL9H+e+qTl+EQRBHg=
Subject key identifier: 1F:11:52:92:1B:69:19:7A:6E:13:09:C5:24:96:A0:AA:96:7F:BB:26
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 019A5262FCB91F08F1BFE3BCB2151F880DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1526
Signing time: Wed 05 Nov 2025 05:00:09 +0000
Manifest this update: Wed 05 Nov 2025 05:00:09 +0000
Manifest next update: Thu 06 Nov 2025 05:00:09 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: 00L1HCeQmStESXrOdvBfBONNRqTX1lgIqvCP50JldnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:fc:b9:1f:08:f1:bf:e3:bc:b2:15:1f:88:0d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Nov 5 05:00:09 2025 GMT
Not After : Nov 6 05:00:09 2025 GMT
Subject: CN=1f1152921b69197a6e1309c52496a0aa967fbb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:ee:5c:8c:53:8b:63:22:e9:4f:b8:1a:fa:
db:f7:89:87:77:da:a1:a4:5c:eb:c8:23:b0:76:5c:
ea:b0:21:c0:5a:3b:c8:a9:7a:a9:22:8e:d8:4b:eb:
be:f5:04:a1:9f:ae:a3:02:25:63:98:ec:ab:2e:22:
36:a1:74:b9:7f:61:b9:07:3c:9e:53:31:1a:b5:5c:
8b:ea:ab:12:1f:ef:07:bc:59:5e:a7:d5:ba:3e:f6:
17:8a:96:9c:dd:b7:85:a8:83:b1:02:24:89:5c:6c:
4a:a4:55:7c:e0:8c:8f:39:fb:60:80:40:dd:36:df:
eb:ca:87:fc:2b:29:9c:ac:d0:91:99:82:76:bf:a7:
dc:2b:b5:69:fa:2a:ff:22:36:00:07:64:6c:5a:6a:
bb:49:e6:bb:0b:51:c4:0b:bd:7c:0f:b5:38:ad:98:
cd:9b:19:ac:12:5b:b1:1d:1a:bd:4d:39:4f:35:1d:
7a:86:6e:09:67:b9:74:ed:89:d1:d3:78:79:5f:b1:
69:cc:db:6a:d1:77:dc:62:5a:20:83:cc:76:eb:83:
0b:f7:ac:80:ad:53:7a:96:6e:89:f8:80:a9:00:08:
24:67:f5:7d:67:cd:e2:17:a6:cf:bd:da:fb:e6:01:
ad:53:eb:38:2c:66:2f:ad:49:7d:db:6e:a8:08:40:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:52:92:1B:69:19:7A:6E:13:09:C5:24:96:A0:AA:96:7F:BB:26
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:89:e5:42:84:3f:48:dc:c6:19:31:1f:29:9d:ea:96:26:47:
58:b0:57:a9:03:b3:5d:7e:f9:54:56:10:9c:61:b9:e8:39:a2:
91:4f:a5:f0:b9:96:ea:2c:88:70:51:9a:e8:e9:7f:a2:bf:d8:
e5:64:2b:9f:c7:49:ab:bb:14:19:cc:f2:0d:8c:44:a7:af:9b:
e9:5c:79:6d:e7:b7:bb:66:ab:a3:71:09:f1:e1:f2:ce:30:e7:
f4:e1:aa:48:9c:c5:a8:df:4c:78:83:e5:2e:99:c3:56:c9:3d:
77:8c:a3:7a:ed:91:b4:12:7c:fa:10:4a:bb:80:43:93:56:7c:
b6:82:dc:8a:b0:9f:ec:44:5e:f1:18:b5:9c:46:37:99:60:33:
d9:0a:7a:30:29:10:a2:15:20:57:f3:6f:98:76:d9:c9:ba:5b:
97:63:b7:0d:5e:3c:5f:9b:e6:cf:b4:ba:c2:91:e7:0e:bc:2c:
38:3b:3d:c0:2a:19:f5:d0:53:82:77:63:b5:bb:cc:2f:20:d4:
97:5c:22:4b:42:92:c8:a0:96:ee:b6:c6:01:d4:26:f8:12:1b:
c0:c0:f2:7f:39:b9:71:74:56:98:8b:12:c2:bc:af:e1:ec:94:
8c:c7:d8:4d:86:2b:a9:5d:4e:f3:b9:61:93:ae:a1:5d:db:68:
ba:ee:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:52 2025 by rpki-client