Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier: ZRTqCRe+77gJA1j+M8OQNa8snPALii6mgOrUxKTxa1o=
Subject key identifier: AE:CF:05:8A:E3:59:95:49:6A:84:C7:25:39:0D:1C:45:C9:EF:23:22
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial: 019A52D18407A3A3E6EB43197B8AE02C067F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number: 01C4
Signing time: Wed 05 Nov 2025 07:00:53 +0000
Manifest this update: Wed 05 Nov 2025 07:00:53 +0000
Manifest next update: Thu 06 Nov 2025 07:00:53 +0000
Files and hashes: 1: 1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa (hash: Nb18hgZy/dUiDthUh4PrNXR3WH0/oCbuHBjHexDpA0Y=)
2: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: gjh7Apqo/ICp7KGscK5PyvltLndBt7oEcS9txIivU7U=)
3: G1iTz--AdrX58wnteKblePSt-Jw.roa (hash: 0Fp+SXPuf0GKZAv8TJo76eTj4M6Vb7IJbISKBHsaJUM=)
4: Z0dVNzk7EGrkYKQ-9HMAEEn28xQ.roa (hash: m7NbNzI3ua/XgXbydcjNQqSmMP9x4tm6jOp74hABwTg=)
5: pBdQvnX6dKY3XlqUYWMWUMcKsus.roa (hash: 7HSL2j8DzWASbakGMcnWSJulH/02edTERxWRK0JJXZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:84:07:a3:a3:e6:eb:43:19:7b:8a:e0:2c:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Validity
Not Before: Nov 5 07:00:53 2025 GMT
Not After : Nov 6 07:00:53 2025 GMT
Subject: CN=aecf058ae35995496a84c725390d1c45c9ef2322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:b0:a7:3c:e2:a6:60:9e:d8:f0:f7:47:4f:
e6:9e:51:7f:a1:35:33:59:cb:f1:42:92:ad:91:7b:
79:26:94:e9:d3:bb:8c:c7:45:49:b1:cb:f7:a3:21:
95:4e:83:20:22:90:74:ac:b3:23:c6:16:75:1c:58:
af:d7:a2:28:26:cd:be:36:1f:31:dc:79:b6:33:2a:
58:38:47:53:14:d0:93:32:e8:55:82:73:64:0a:2b:
0f:4e:1f:a7:95:87:82:a2:00:a2:80:0d:19:f0:c6:
4d:7a:51:a1:fa:ae:bb:b4:2e:4c:5c:40:7e:fb:e6:
f7:55:02:a7:3f:05:fc:8e:2f:bd:2c:54:06:a9:71:
3a:1a:cc:d9:18:9b:15:bd:8f:17:c7:b8:35:8c:48:
b3:25:27:0b:f6:3d:fc:97:c2:e8:f8:4b:a4:b9:34:
54:8d:61:b1:32:c3:f1:30:23:9e:79:5b:c4:2d:e9:
90:95:d2:32:f0:0c:05:7c:f5:86:d1:10:aa:b8:87:
54:eb:9e:22:60:68:dc:c8:21:67:20:85:7b:e3:84:
6c:02:d6:62:4f:91:0d:1d:e3:10:ff:21:56:d6:61:
b6:56:09:64:6d:a3:1d:3a:36:99:b7:ac:03:94:e7:
10:a6:97:a7:95:45:7f:94:71:23:35:69:fc:fd:68:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CF:05:8A:E3:59:95:49:6A:84:C7:25:39:0D:1C:45:C9:EF:23:22
X509v3 Authority Key Identifier:
keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:71:d4:31:af:a3:e5:02:32:d7:2a:98:be:3c:cc:d6:3a:
f1:7d:0f:22:57:81:92:c8:2e:8b:65:58:c1:2c:94:bb:22:0e:
57:6c:81:79:11:43:d4:82:38:7a:a6:8b:48:c4:ac:ac:ec:f2:
59:a6:12:94:aa:70:39:f0:63:1f:ef:7b:0e:ec:c7:90:89:06:
c0:e6:da:bd:27:53:86:48:f7:b2:06:51:3e:11:50:9d:20:99:
a4:56:c9:18:4a:0e:00:1e:46:c0:32:bf:97:9c:3c:9d:76:54:
c3:73:84:e3:9c:e2:d2:a5:39:40:bb:a2:63:2f:b9:41:aa:8f:
18:f1:44:39:b8:63:09:04:73:bf:15:87:af:b1:39:8e:34:1e:
f7:01:61:b2:77:01:b8:ef:90:3d:fe:fd:4c:a7:dd:33:a5:f0:
e2:c9:e8:53:21:e0:04:4b:ee:6b:fa:5f:8a:00:fb:10:19:4f:
14:62:66:a6:96:22:6e:7c:a0:5c:3c:02:29:e4:48:41:ff:4d:
4c:f2:92:55:41:44:d6:24:33:16:b6:1f:b7:16:b8:31:a6:44:
51:c7:d7:f2:49:14:41:2f:f8:6f:0c:bc:ca:e3:78:31:b6:3e:
4e:54:d1:d2:da:b3:ad:65:ce:25:0a:2f:92:58:29:21:0b:73:
6c:7a:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:40:09 2025 by rpki-client