Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: n4cCSJYCMt8UcG6xouBnncIZEykzWokuURjmvfGY7C4=
Subject key identifier: 7F:94:F7:37:68:DB:7A:29:23:7B:03:BF:D3:D1:40:D3:2B:75:AB:4F
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019A4FD01F372348FD2131A7B6505E790022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0A81
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (hash: uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: afP91PshNMRJijoaVQ/69NmIdHjXyVggb+uox+d4YpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1f:37:23:48:fd:21:31:a7:b6:50:5e:79:00:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=7f94f73768db7a29237b03bfd3d140d32b75ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:70:11:cd:73:6a:38:88:d1:2f:76:15:60:
1c:b0:00:71:95:2d:d1:61:2c:0d:db:bf:b5:38:c0:
c5:cf:70:fb:6e:d5:91:f1:ca:9c:6a:96:9c:58:f7:
e6:89:04:f0:a7:ad:99:21:9a:7d:8a:91:80:c6:4f:
0f:d6:8f:2c:8d:32:09:ed:92:b4:2d:be:14:8a:49:
a2:a8:05:5c:92:d6:a8:a5:73:15:dc:08:ba:4d:7f:
64:f2:99:d1:c8:6d:8b:9a:ec:e2:10:55:72:1a:a3:
65:e4:b1:fb:92:f0:67:ae:40:2c:b5:00:c9:9e:68:
cf:7a:6c:f7:ee:09:9c:52:fd:49:4d:e6:89:1f:7a:
3e:d8:1e:4a:fc:50:13:4c:86:ce:d6:fd:62:04:37:
6e:f6:01:04:50:0b:6c:b8:78:b1:ef:7a:63:3d:4a:
59:54:b2:92:4d:6e:4c:58:57:5c:ea:46:ec:82:5f:
6f:97:8f:10:b5:0c:1f:2f:da:a6:6c:5c:43:1d:e8:
24:90:07:b0:b6:26:44:ac:b9:0e:c0:7a:00:82:43:
83:ba:ec:4c:81:c7:b1:6b:94:4c:a5:b7:df:3e:bb:
16:20:b5:7c:41:27:04:68:6e:5a:e0:db:fe:f3:37:
aa:44:57:79:2b:cf:4f:67:4d:b0:aa:9e:bb:13:09:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:F7:37:68:DB:7A:29:23:7B:03:BF:D3:D1:40:D3:2B:75:AB:4F
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2c:41:9d:40:5d:23:c7:8b:9b:83:1e:f6:8f:e0:2a:ab:c1:
73:4a:8e:43:d5:36:24:5b:73:8b:f1:0c:7f:8b:9c:44:cc:d5:
a6:b7:ac:82:55:33:06:c9:75:63:f3:0d:a6:1b:7d:d8:73:10:
3d:81:34:d4:cb:52:89:c5:7f:8d:aa:b1:e7:3f:e8:82:2e:d1:
bb:a8:e0:54:8b:f3:51:bc:f0:10:91:45:92:d0:e0:46:ca:d4:
c7:37:f7:b1:93:0c:a5:89:84:fc:50:a7:1e:29:a8:15:d4:a9:
5b:67:83:16:ce:8b:6b:fe:d5:4d:85:e4:bb:be:c1:7b:21:c6:
b3:de:f0:94:c9:f1:87:5a:a9:42:6a:e3:61:22:a3:2b:c2:ae:
63:cc:3a:ee:dd:91:c6:16:3d:b9:98:ee:78:00:a4:38:7d:d8:
3a:36:31:a4:e9:4e:f4:d5:b2:5e:3e:ce:43:bf:d0:4e:04:60:
fa:53:3f:ad:d3:3d:a7:04:5d:91:da:bc:5b:03:8e:a4:ba:e7:
3a:2c:97:8c:d7:cc:b7:94:07:2e:75:1f:d0:ef:91:90:f2:6e:
5d:02:80:c3:cc:f7:41:d7:e9:19:b2:60:23:47:0e:fc:fa:c6:
58:1a:65:80:61:2a:a5:75:6c:82:64:44:8f:a2:21:fa:24:d2:
bf:87:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:02 2025 by rpki-client