Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File: gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier: mkRKbQJQfMupNSrUyYdsFi/lo6o/W9/OhT7qDN9xWck=
Subject key identifier: A5:32:F5:6F:E7:7C:F7:FF:76:94:6C:A7:0C:8E:76:64:04:E9:61:FA
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 019A4E1916904B0A604765BCEBF77CC0BE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: NPoBUPl9/GiG3mgxxlv5+em3AKfa4HlLu9uF7iEKrlk=)
3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=)
5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:16:90:4b:0a:60:47:65:bc:eb:f7:7c:c0:be:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=a532f56fe77cf7ff76946ca70c8e766404e961fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:d5:70:4d:21:8b:8d:13:fd:50:d0:9f:a7:
54:90:a2:98:9a:92:14:15:35:b6:fb:3f:be:f2:37:
81:c4:ae:be:9d:a7:74:35:90:1c:81:78:44:1a:6b:
2a:be:7a:c8:6b:d0:24:1e:ee:64:89:66:63:40:68:
28:de:09:4f:03:17:54:c7:cd:72:33:5e:e4:e2:b5:
72:23:1e:be:c0:de:b9:4d:63:60:5e:19:81:2e:65:
5d:11:bf:d4:00:d4:8a:04:1d:d0:26:69:69:b9:97:
a4:51:1d:3a:1e:3f:1b:a6:d4:17:58:44:3d:90:02:
fa:a3:9b:60:3d:d1:d4:c2:5d:1d:9b:76:4a:e5:65:
e0:e0:27:32:39:23:ed:40:09:0f:06:e7:ff:5c:78:
e8:d7:95:6d:1a:a6:81:10:c8:13:cc:86:91:65:09:
eb:f0:d3:44:77:06:ee:00:88:7f:0a:13:e2:a0:50:
f9:e1:16:3f:60:d9:f3:a2:7f:91:01:8b:6c:92:7a:
09:c4:e4:01:ff:6a:bb:de:20:f9:b9:e2:a0:98:55:
c7:2d:0d:d6:0a:4c:bf:2d:a6:3c:e4:ba:84:f1:69:
54:b5:5a:95:b9:3f:9c:9a:73:df:fa:f8:2e:18:f3:
1d:1a:04:64:48:4b:ab:23:71:95:fa:4e:d3:1c:04:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:F5:6F:E7:7C:F7:FF:76:94:6C:A7:0C:8E:76:64:04:E9:61:FA
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:17:83:ec:08:1f:80:0a:42:76:a6:b9:0b:1b:50:3c:21:
fd:88:ce:e4:bf:a6:1a:5d:88:7d:a2:8e:c4:d5:ec:69:28:7c:
e4:55:75:ab:d9:d4:a9:22:4a:8d:82:bf:41:4a:1b:8f:15:92:
e2:47:7d:60:f0:10:2b:fd:19:b5:2f:ee:00:e3:93:9d:38:1f:
8b:c2:8b:81:b9:58:78:9c:42:ce:45:00:62:a8:7c:6f:9b:57:
f4:bf:7f:a5:e9:98:74:33:aa:8c:4b:7c:31:e6:46:8c:aa:fc:
4f:3d:8d:d5:00:d1:4a:af:55:79:f4:69:72:7c:7b:0a:aa:c1:
f0:16:8d:5c:01:d3:43:52:7b:61:ff:f5:7b:94:ff:21:33:4a:
97:7c:21:5d:51:18:84:1e:2a:d9:5b:33:e0:17:7f:85:d0:61:
7e:d2:ac:50:81:7a:75:69:54:b1:af:6f:cf:f2:e3:f0:d3:71:
fc:83:46:02:1d:34:fa:30:1d:9c:89:ea:38:07:0f:a9:d1:55:
12:60:6d:bc:c2:3b:b5:17:df:7c:31:f5:eb:9a:b7:04:a3:29:
0d:86:d5:8a:16:7a:b0:57:e9:93:0d:b7:46:e6:97:82:45:1a:
1c:9f:f9:b7:0e:42:7f:8b:23:97:ca:c2:7e:d5:4d:6a:24:26:
f3:0f:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:49 2025 by rpki-client