Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier: BZTyNvWacij8HeC7socEubNg93fRSZjksDNXgSynfx0=
Subject key identifier: 70:9F:E6:2C:AD:63:85:3F:E0:B5:76:F2:BA:37:61:01:2B:17:87:1D
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 019A50E33D8FE8C74D7FC5C6875119E21393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number: 0854
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: zwHKr5ApziuU2sWvwvalZvkD2rfxZrelM9H9xUgiYHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3d:8f:e8:c7:4d:7f:c5:c6:87:51:19:e2:13:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=709fe62cad63853fe0b576f2ba3761012b17871d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:79:77:05:f1:90:6d:8d:00:4e:23:12:ac:
f9:a8:3b:10:5f:ee:68:3b:fe:7c:11:90:05:17:7c:
0d:80:31:f3:95:83:06:42:13:40:fe:05:41:70:2b:
a7:03:8c:55:3a:bc:de:f3:f0:72:0e:56:3c:0a:ea:
12:2e:59:a6:0c:78:22:0a:83:9f:39:1c:54:db:33:
74:7f:6c:58:d9:39:56:81:57:cc:c2:43:b8:12:27:
71:f0:98:20:28:48:9c:95:91:86:31:29:e9:12:73:
f9:87:fb:cd:dd:00:79:e1:9a:55:2f:a5:e8:08:6d:
24:86:41:01:d9:e0:cf:7b:d4:a3:b6:79:64:54:05:
47:16:11:63:5d:e2:97:77:b6:de:04:0f:a1:c4:6d:
a0:c4:d0:f3:46:02:2d:be:2c:8a:32:3b:8c:42:53:
0f:02:7c:03:d2:17:03:11:94:36:5a:d4:71:a4:52:
9d:8f:e0:2b:df:7f:84:9e:95:fc:a8:e1:4d:33:da:
3d:a1:e1:25:40:a7:09:77:dc:57:17:c5:c9:d3:fa:
d3:d7:24:b8:29:d8:67:db:50:8b:da:4f:03:e3:1a:
91:02:91:3b:5f:ca:80:27:00:09:77:b6:12:43:96:
a7:0b:16:a2:a5:58:c7:d2:0d:18:8e:ea:d6:2d:48:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:E6:2C:AD:63:85:3F:E0:B5:76:F2:BA:37:61:01:2B:17:87:1D
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:d6:0a:ce:1b:0a:71:ec:22:b4:c2:e0:8d:20:33:13:af:
3c:1f:5f:df:f3:c3:bf:50:75:2d:d7:65:4b:89:86:c8:68:76:
cc:b0:b7:62:52:9c:d1:c2:4c:e5:d7:ce:ff:6a:ee:38:23:c0:
ed:2e:34:98:ab:17:6a:6e:31:4c:36:2c:a8:0f:f5:86:70:fe:
61:26:98:be:c3:b1:15:76:3a:8d:13:cd:cd:d6:16:f7:6b:2d:
90:3c:2d:25:16:15:97:42:ed:49:3f:87:ed:00:fc:59:81:f9:
70:75:91:2e:9d:3c:9c:01:79:fa:e2:c4:88:8a:7c:f0:2f:12:
45:93:19:cc:a9:b3:55:29:7f:fc:b6:95:86:7e:d3:96:ba:20:
3c:6e:47:5b:93:ca:97:cb:62:25:7e:97:f9:0c:6e:99:23:a5:
63:e6:da:87:dc:8b:b2:77:87:c5:5b:4b:a7:c3:27:7c:9e:a4:
5b:c0:d0:ba:ff:5e:50:90:14:06:07:71:06:72:8e:f9:c8:2a:
0e:22:9f:3e:0d:33:3d:4b:65:df:2e:40:ae:01:9f:eb:20:ed:
f1:74:58:8b:a9:f1:f9:55:e8:f1:49:f9:18:c6:f2:b8:84:81:
65:da:0b:e9:dd:76:a2:22:56:cf:c9:c7:56:3f:ed:92:13:61:
99:64:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:23:01 2025 by rpki-client