Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: e2Z5EFXpQES1CXsNFp1KLfc68yS/9kZtIrv1vywgklg=
Subject key identifier: 49:F1:78:20:51:F2:F6:E4:C2:5A:97:6F:27:91:A6:E0:22:A3:91:7E
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 019A522C68743CC98DEF64577EF8C67F3278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 11EE
Signing time: Wed 05 Nov 2025 04:00:33 +0000
Manifest this update: Wed 05 Nov 2025 04:00:33 +0000
Manifest next update: Thu 06 Nov 2025 04:00:33 +0000
Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: UFYqC0B1103RdMyUv1se2a0J6ATuaF4JFxap3CJI5rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:68:74:3c:c9:8d:ef:64:57:7e:f8:c6:7f:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Nov 5 04:00:33 2025 GMT
Not After : Nov 6 04:00:33 2025 GMT
Subject: CN=49f1782051f2f6e4c25a976f2791a6e022a3917e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:11:6a:ed:51:84:43:96:0f:87:7f:b3:6e:
c5:0c:9f:b2:a9:fa:0d:37:86:b7:33:71:6a:5e:1b:
2d:e4:ed:52:37:e8:12:30:aa:2c:ec:21:ac:3b:82:
9f:c6:82:15:fb:41:89:4a:d8:17:c6:44:21:a1:d4:
cb:e9:b4:a1:2e:d3:3b:6a:2a:4c:7d:34:f6:11:41:
98:cd:30:e1:4e:0e:83:fe:9f:f2:5e:81:24:c2:e0:
41:b9:bc:d3:aa:bf:16:84:ee:5c:ba:a3:9e:e9:66:
b4:4f:a2:d6:4b:99:a9:fe:5d:ea:24:10:5d:83:8c:
11:e7:2b:f1:ca:2e:b6:7e:3e:d6:bc:97:74:f0:02:
8a:f5:51:a0:a8:5c:89:59:75:d8:63:ce:cb:9d:2c:
0f:a8:b6:52:e8:aa:08:ba:21:c9:63:d0:b5:64:2d:
6f:87:e3:11:c0:95:6f:a6:cf:da:e9:2d:67:a9:42:
f0:b7:d8:c2:a0:e3:d9:3b:b8:f0:52:91:d8:3f:9b:
9d:5a:44:45:d8:fa:cb:ba:08:6b:5c:b9:ac:47:a6:
8b:f4:bf:44:d3:96:78:e7:6e:61:f8:41:0e:88:89:
fb:be:fb:ce:81:5a:b4:16:70:fa:2c:4f:d3:ae:0e:
b9:f2:95:49:05:0f:30:20:c7:23:bb:86:f2:a1:a2:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F1:78:20:51:F2:F6:E4:C2:5A:97:6F:27:91:A6:E0:22:A3:91:7E
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:27:6e:ef:7b:28:cf:e4:82:18:63:ea:e9:a5:3d:3c:a0:
88:10:13:d6:ba:eb:ca:84:77:e4:f7:d1:5a:85:74:04:05:f4:
ee:f7:0b:f6:62:5b:ed:39:f7:ea:fd:59:50:fd:f0:c8:b5:4a:
4f:2b:a2:ad:57:69:61:b7:39:a1:b5:9f:9c:7a:ce:73:76:53:
ef:5e:ea:c9:0e:2a:14:d4:96:c1:5d:9e:9e:c3:b6:a4:72:0a:
83:58:9f:93:16:33:0e:f7:56:c3:12:30:e4:23:7e:c3:7d:c1:
67:39:7a:44:5d:83:32:84:d5:1b:ed:cf:aa:73:20:b0:31:f8:
9b:6f:db:3c:10:a0:de:76:f0:af:35:a4:7c:e9:dd:d1:e3:2c:
15:74:32:91:79:89:71:1d:9a:b3:30:e7:4d:6a:81:c0:c0:db:
36:1c:7c:32:f5:1d:f7:4c:fa:55:f2:d9:2b:3a:8a:ef:bc:d5:
72:3c:aa:ae:9c:98:62:61:88:db:fa:4d:3d:73:05:fe:00:eb:
f2:04:9e:45:54:83:aa:37:16:71:b9:89:60:b0:4e:7f:13:3d:
53:6b:ce:c1:7c:8d:b4:0d:7e:ac:ef:47:3a:16:cf:e6:e0:bd:
5a:06:8c:79:1d:a9:04:76:1a:96:9e:61:19:c6:70:8b:b4:b3:
f9:ba:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:58 2025 by rpki-client