Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: SSatEPgu9ARCfx46H9ltkj27rJT1e+QEHIlRIq7ixek=
Subject key identifier: F8:D3:06:5C:C4:D9:E4:AC:20:A2:9B:5B:62:3A:71:2F:EE:91:DF:47
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 019A5074A2FF5FE6D49863A5286659D609E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 0CA5
Signing time: Tue 04 Nov 2025 20:00:12 +0000
Manifest this update: Tue 04 Nov 2025 20:00:12 +0000
Manifest next update: Wed 05 Nov 2025 20:00:12 +0000
Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: Id8M4jT+gziQDhQMW0bjP66mSmGavHwN3lQoJU6jG1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a2:ff:5f:e6:d4:98:63:a5:28:66:59:d6:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Nov 4 20:00:12 2025 GMT
Not After : Nov 5 20:00:12 2025 GMT
Subject: CN=f8d3065cc4d9e4ac20a29b5b623a712fee91df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:c2:e2:f8:71:00:f8:52:32:5e:ad:a2:0d:
41:80:a2:4c:c0:3b:0b:bd:bd:32:57:ae:e3:5b:bc:
f2:86:d3:bd:a6:85:7d:b8:2f:d4:fd:bb:07:00:70:
75:0e:67:cf:72:6f:69:28:d4:9b:60:f5:32:ef:c5:
4e:31:c7:cd:82:c7:e1:04:f8:23:97:22:41:98:9c:
c9:10:45:ac:fb:97:2f:00:13:29:08:63:57:df:1c:
1e:0b:bf:5c:de:1d:19:0a:0f:2b:3a:6a:a8:22:fc:
b9:65:eb:73:ac:66:da:94:a8:5c:d8:c6:75:7a:4f:
16:0b:45:f5:d6:15:4c:13:8b:6f:23:37:5d:84:91:
3b:0a:e4:69:fa:c7:41:6d:11:50:98:1f:35:b7:20:
56:09:ad:09:b8:41:50:21:77:c5:77:d9:4e:29:22:
d8:92:60:68:fb:b1:91:10:05:c6:bf:e1:53:ff:bd:
c6:32:bd:02:38:36:46:18:0b:fc:54:8f:3f:8e:27:
5b:de:80:2d:4c:3b:63:4e:18:81:54:6f:84:51:24:
7f:78:7d:ff:99:8f:1f:59:7e:38:3f:c0:be:70:e3:
ee:f5:2c:91:1a:dc:27:c4:d4:25:46:ea:da:af:12:
3a:e2:e1:33:71:02:f5:8d:62:53:9d:40:5e:da:43:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:06:5C:C4:D9:E4:AC:20:A2:9B:5B:62:3A:71:2F:EE:91:DF:47
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a3:d0:10:ee:78:2a:1f:ee:da:d2:9d:6f:e8:a2:18:d9:25:
de:f8:e6:7a:99:16:25:1f:7a:1f:de:d9:e9:be:b4:80:35:eb:
28:52:5d:c7:f2:4f:38:19:a5:0c:ea:80:63:39:ff:8c:b1:34:
aa:2e:28:3c:a2:5a:2f:88:d3:f1:8b:7a:4e:22:79:fa:d1:32:
08:fe:78:f8:9b:8e:55:5c:1f:d3:70:10:82:c0:33:75:49:9a:
7a:b4:eb:a1:b4:3f:02:92:48:de:5c:08:4f:e8:86:47:18:ba:
10:9d:ad:0d:dd:b4:85:ee:fb:f2:43:5c:67:02:df:5d:6d:d6:
2b:e1:c0:57:26:66:85:57:98:b7:e1:d1:73:33:00:09:16:85:
77:f6:62:49:84:34:40:0f:18:5c:c5:13:9e:b6:89:ce:e0:11:
09:54:e9:8f:cf:1c:63:32:07:e0:ce:bd:ce:36:0c:52:38:08:
93:d8:c0:6c:aa:7f:e8:b9:e2:34:10:b3:87:02:ec:5a:e1:40:
f0:6b:be:f3:42:c4:cf:12:84:11:a2:a7:c7:12:aa:5f:f4:64:
35:e0:f6:d8:04:8a:6c:e7:49:54:95:9b:b9:9d:8f:aa:67:4e:
4c:0e:08:77:6d:8a:27:90:1f:04:a2:d1:d3:2f:e1:97:9e:b5:
96:ef:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:45:55 2025 by rpki-client