Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: nXGl9TkEzse0UwE7m8UXBR22JdhT1gRG3QL1SM3tMzU=
Subject key identifier: 38:E4:55:5C:A3:C1:0F:69:65:45:35:8B:FF:45:B6:C4:E0:9C:58:43
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019A4DE16C01937260691F8CE0969E26C12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: kKH2IkuJuIPxDKdWymGtyWlL49aQZoRxNILpVWjY6u8=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6c:01:93:72:60:69:1f:8c:e0:96:9e:26:c1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=38e4555ca3c10f696545358bff45b6c4e09c5843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:98:54:4f:92:32:5c:3a:49:a0:ff:d1:90:
75:df:94:89:21:b3:b7:7a:ed:de:8c:7c:ed:ee:b2:
96:47:b0:dd:a6:8a:62:d0:ee:37:0f:7c:23:89:a4:
95:bb:e4:61:c1:6c:40:df:e1:b0:d8:5a:31:ae:f7:
75:25:0b:82:24:c9:02:20:4e:0f:54:8c:41:32:60:
90:07:d7:ce:30:0e:6b:40:14:22:de:de:65:6c:e8:
9e:43:ae:79:e7:7a:31:e7:f6:85:2a:09:bb:11:73:
73:bd:ae:c2:15:73:73:cc:c2:4e:63:ab:d4:fe:97:
80:c7:7a:69:12:e6:51:f4:97:52:08:4c:0b:bc:c8:
61:37:dc:4b:78:08:c6:bb:f2:f4:f4:a2:08:20:10:
80:84:ea:d3:a3:57:78:80:b7:37:e1:a7:b0:83:f2:
a1:2a:b6:7d:5d:18:c1:6b:ce:fe:9c:8b:f0:83:dd:
e5:bb:ae:92:fa:4f:b1:73:4e:6c:dc:0e:a4:cd:47:
6f:46:d0:97:13:39:ab:bb:1b:c5:79:cc:db:c5:34:
41:6e:cd:81:6c:c3:7a:52:7d:d6:b3:00:bf:bd:a5:
04:3c:b1:f8:09:65:7c:dd:4d:fe:bf:28:67:f4:7f:
00:8a:1a:b2:c7:ba:5b:0a:5f:76:5b:a0:6f:03:08:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E4:55:5C:A3:C1:0F:69:65:45:35:8B:FF:45:B6:C4:E0:9C:58:43
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6f:7b:1e:5f:69:89:bf:3a:4d:b1:1c:33:41:20:7f:3f:06:
98:dd:1a:90:d3:a9:50:ee:33:8f:76:e1:ed:5b:35:cd:36:58:
f3:27:a9:c8:21:1b:c3:d3:78:82:09:83:cf:b0:c9:07:38:ca:
20:fd:eb:88:9c:ea:5e:05:c5:0f:68:cf:1b:59:8b:7c:0c:bd:
80:b0:0c:2f:45:dc:81:b7:8c:d4:75:91:8a:f7:d9:b8:35:a1:
b3:ac:90:d7:ac:27:bb:34:2e:89:ad:62:ed:a0:93:37:dc:a5:
37:df:b4:98:4d:58:7c:75:89:34:95:b2:fa:88:5f:95:31:d4:
9b:fe:7f:f0:c4:ca:aa:cc:2b:2b:85:47:e0:0b:a7:a1:28:44:
b3:69:05:59:51:1c:2e:80:cc:7b:f6:12:dc:7f:6e:ed:ff:0a:
ed:f6:32:c3:89:ef:c2:8c:aa:29:79:93:cf:08:02:12:4b:d4:
8a:3d:47:6a:8e:cf:86:41:46:1f:c6:6d:81:e1:65:92:09:f6:
5f:0c:ea:68:0e:7f:2b:71:1e:08:00:76:0d:3b:94:c4:c8:09:
79:16:04:55:32:02:43:55:01:bc:a5:d9:d3:33:fa:97:29:96:
71:6c:14:e5:30:51:64:1c:ee:17:77:cc:16:ba:a7:cf:83:b6:
a0:92:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:13 2025 by rpki-client