Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: AA8bpvtg4VqiPxz0R1ya6Jpc0GOWtM7IcQh+6kgt2Gw=
Subject key identifier: D6:23:7E:26:BC:01:46:80:37:02:BE:6C:3F:55:CC:67:D0:4E:F6:99
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019A51876FE0CA99770CDB88A5CF2B0E81A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0B25
Signing time: Wed 05 Nov 2025 01:00:21 +0000
Manifest this update: Wed 05 Nov 2025 01:00:21 +0000
Manifest next update: Thu 06 Nov 2025 01:00:21 +0000
Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: SUYwwKcQa/PZb3hfm66lzJZTCa8H5Ne8h9a798WywIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6f:e0:ca:99:77:0c:db:88:a5:cf:2b:0e:81:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Nov 5 01:00:21 2025 GMT
Not After : Nov 6 01:00:21 2025 GMT
Subject: CN=d6237e26bc0146803702be6c3f55cc67d04ef699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:d1:a2:fa:70:05:b6:1c:65:83:da:8c:1e:
95:28:ad:e9:9f:da:e9:8c:04:3e:c6:03:c9:0a:4f:
59:b6:97:22:38:a1:20:42:f5:55:c2:bf:5f:27:3f:
bd:d0:35:8d:64:46:e2:69:5b:78:a1:54:13:31:e4:
af:77:91:8b:8a:54:01:bf:1f:bc:48:5a:e5:f8:68:
83:73:1a:0f:1b:a0:f0:5a:00:74:6a:2d:ae:f1:84:
5f:bb:d8:9c:3c:a7:02:01:02:62:fd:9a:1d:17:2e:
e8:ca:ca:66:b5:06:00:63:11:d7:fd:a6:c9:e3:3a:
a0:cd:5e:f4:37:c9:c2:15:55:7c:a3:ae:3c:25:e6:
a4:b5:e9:93:c9:14:fd:8a:42:3d:70:c0:50:aa:6a:
57:62:1f:5a:cf:ef:f2:0e:cb:36:21:bf:e4:13:0a:
4e:d4:da:e8:1d:92:71:8d:d4:f4:0e:6a:99:c7:cf:
57:8a:7e:3f:f1:52:9d:b6:fd:d0:70:55:0a:4d:31:
b5:28:40:58:8a:c6:6d:db:2a:6c:e3:f5:25:11:bb:
eb:02:d6:f8:95:14:98:1e:33:ce:6a:82:7a:4b:83:
83:be:5c:d4:6a:8b:ff:aa:7b:97:15:2d:64:3e:8b:
1e:7b:b7:c5:fb:6c:8f:e0:69:9c:21:88:4a:4d:62:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:7E:26:BC:01:46:80:37:02:BE:6C:3F:55:CC:67:D0:4E:F6:99
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cf:14:4e:49:36:0b:73:15:e3:1d:a6:3c:6a:bd:27:bf:71:
64:ed:d7:4d:e1:ca:e0:bd:30:37:2f:5a:c5:78:1b:02:e0:af:
53:6b:f1:87:70:0c:a0:2e:3f:02:a6:2b:7d:98:d4:bd:ba:41:
c4:99:d2:b6:ab:f9:1b:d1:10:57:ab:c2:e9:67:47:c8:fc:ca:
a5:27:07:e9:4a:d5:3e:4c:0f:63:31:da:95:0d:bc:2d:35:8b:
06:2d:b5:95:72:b7:f4:94:6f:e6:dd:d1:23:0b:76:35:a9:cb:
c0:08:aa:01:b4:d7:dd:b7:3e:f9:73:68:05:6c:2d:ee:7d:68:
3a:b9:c7:ea:44:de:f8:10:36:27:65:eb:f0:e5:59:b6:7f:ba:
1f:89:eb:0d:6a:54:fe:c2:47:40:05:43:bf:4f:78:ad:87:44:
68:81:31:d6:b1:44:d9:2b:a8:ff:cf:c5:4f:e8:ef:60:a9:ef:
f3:00:30:ef:c7:6f:c8:4d:98:c7:c3:1b:0a:e8:2b:2c:ea:53:
22:69:49:e8:44:90:7f:d9:58:1d:f6:5e:1d:b2:3a:d9:e7:a0:
4d:66:4f:2f:c9:c0:fa:bc:90:0c:02:d6:11:05:52:c5:c9:22:
d1:a1:5a:6a:5a:16:3e:db:05:cb:2f:45:b3:e1:e9:8d:c1:c9:
9c:6c:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:21 2025 by rpki-client