Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier: E7uTCszl6UrsaL6z7qDN5WIink1Y1xampr0U9DRtJP4=
Subject key identifier: 1C:08:47:F0:84:52:9F:7F:3E:E8:43:AF:23:37:E4:EF:84:4A:8F:F3
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 019A4F9915A0F10CF9D0C3851C1FAE980F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:23 +0000
Manifest this update: Tue 04 Nov 2025 16:00:23 +0000
Manifest next update: Wed 05 Nov 2025 16:00:23 +0000
Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: iZ7SUsvkrT8wM8LgB04Qj9wWym+9+iEdk816p48TMg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:15:a0:f1:0c:f9:d0:c3:85:1c:1f:ae:98:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Nov 4 16:00:23 2025 GMT
Not After : Nov 5 16:00:23 2025 GMT
Subject: CN=1c0847f084529f7f3ee843af2337e4ef844a8ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:7a:f7:de:5d:dc:93:d9:d6:4d:83:f3:57:
55:40:31:b0:0b:dd:7a:19:08:82:48:8d:dc:20:e7:
88:42:57:ef:a2:c4:1d:e6:e8:96:72:0a:bc:ce:8d:
25:7d:31:7d:3f:1a:6f:a0:59:d5:ef:6d:73:da:b0:
ce:d7:e0:2c:bc:9c:7a:d8:20:dd:d6:d8:94:8b:69:
73:09:38:be:87:73:9c:95:06:2b:54:9a:b9:7d:64:
98:96:29:2f:55:5b:ad:91:4a:23:a7:a1:67:22:5c:
1c:3a:7f:3f:6c:d4:c5:94:b2:e3:0c:a3:5b:48:85:
42:1e:31:77:fd:34:98:b7:99:7f:fc:74:00:e0:8b:
89:99:e1:74:db:34:5d:6f:4d:08:f5:56:dc:19:bf:
51:17:16:29:c3:16:ac:d0:58:5b:3a:28:2a:86:6d:
7a:be:6b:8b:0c:38:9e:30:7a:a9:4a:e4:b5:24:aa:
07:55:99:a7:42:ab:fc:70:7d:a5:62:60:3c:86:7e:
a7:a5:74:88:32:36:5b:6b:fb:37:37:b3:59:ea:00:
e1:ad:27:01:e3:1e:d7:83:40:7f:38:a0:d6:bd:84:
af:07:0f:3b:c8:05:f9:8c:48:ce:78:b4:ca:9a:b3:
8f:6d:85:91:18:bb:91:04:4b:fd:c3:fe:e4:29:a9:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:47:F0:84:52:9F:7F:3E:E8:43:AF:23:37:E4:EF:84:4A:8F:F3
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e0:a5:f4:48:d4:92:11:3b:9c:9a:fc:78:08:1c:0f:a6:5b:
07:c6:8e:82:7f:4f:cb:c7:fa:bb:80:02:05:70:16:ce:35:1e:
32:3d:d0:63:c0:45:09:8f:77:9e:b9:f9:b3:85:ab:2e:36:7d:
6f:7a:f0:e6:de:76:c7:e2:f5:15:37:7b:4c:ec:88:87:dc:6e:
a8:db:e5:4c:7b:a9:68:96:02:e8:6d:75:49:be:19:68:af:46:
2c:bc:bd:37:ef:08:7c:5b:de:47:0b:18:60:5c:32:9b:d4:d3:
a6:98:36:18:c9:37:35:5e:72:d8:29:ac:5c:bb:9b:44:c4:93:
4c:23:fc:ad:cb:d3:1f:a2:03:ad:fd:27:da:16:26:b1:ac:41:
eb:58:18:57:d7:a7:92:04:6f:c0:b5:a8:06:66:9b:27:c1:d0:
59:61:6b:63:68:84:de:5a:1b:f7:14:cf:24:b3:73:25:76:28:
3f:c6:8b:44:bb:da:ed:fe:15:c2:c4:93:c5:c6:9d:90:5c:b5:
54:d1:58:d0:67:ae:80:8f:ba:87:f2:27:6d:5b:a6:9a:a4:26:
03:a9:93:d1:7a:72:e8:81:e9:b3:1e:2c:ad:23:8c:61:6e:50:
6d:a2:88:91:49:3a:7b:5b:fe:10:cb:5b:5f:05:03:af:f6:1a:
33:00:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:12 2025 by rpki-client