Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File: v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier: OcgszkjsGQ1mwHGcJcXZwWdoo+ycJe3oFO+pxmhPSas=
Subject key identifier: 28:E7:1D:21:F7:A6:7B:97:37:5A:C1:DA:54:A4:94:03:85:77:6C:E9
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 019A4F2B7C0D63D2F5C6AE3CDD834FC79282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number: 05A3
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
4: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
5: pYkXhi8dISdm8J5V6Ump4-4cOFU.roa (hash: EouhCVKO7/yt//jgu0i4ZZyGPzW9rnR1WQJxIMHssJE=)
6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: gks14ONMJnXOdRiSdrKu//B+JaH9DVMcXVdZdQFGtng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7c:0d:63:d2:f5:c6:ae:3c:dd:83:4f:c7:92:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=28e71d21f7a67b97375ac1da54a4940385776ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:4b:df:6d:7a:bc:71:93:a7:8e:bd:d3:38:
67:55:f2:cd:74:2f:ab:80:80:6f:75:cb:01:f3:43:
43:81:1d:39:0b:1b:6d:b1:f3:32:a8:e3:89:29:4e:
c0:32:d4:e9:7c:f6:9a:a4:d1:fd:e2:2a:bb:2e:a1:
fc:40:f3:f5:a3:fd:8f:8b:e8:e2:5f:34:11:b8:64:
80:de:e8:2f:ef:24:dd:c0:54:5c:f4:11:e2:9b:79:
4f:ec:92:49:ef:a7:d8:36:19:6e:68:a6:53:1e:43:
1f:68:a5:16:86:f6:9f:d5:26:34:d5:70:10:62:0d:
5e:d2:4d:60:94:1b:aa:4e:87:f7:f9:31:ad:66:03:
99:2d:79:ec:47:47:ab:5b:5d:15:e9:0e:12:97:06:
a4:6b:39:d2:24:ea:4e:89:d4:86:18:a8:6c:64:06:
bf:f3:c4:c3:c0:11:67:96:96:a0:30:f1:b8:89:6c:
0a:ee:fd:32:d7:10:78:13:e3:14:c0:cb:6d:ef:8d:
c1:f2:83:45:4b:d1:84:9c:26:94:ce:47:11:f3:e0:
05:02:01:bc:15:67:ec:20:0d:2d:63:b1:58:d0:b4:
b5:d1:96:ca:dd:44:59:58:ad:11:44:2e:8c:d7:fa:
be:39:e2:9e:dd:6d:ba:07:0b:c3:b1:b7:30:4c:8c:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E7:1D:21:F7:A6:7B:97:37:5A:C1:DA:54:A4:94:03:85:77:6C:E9
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d7:fa:80:a0:76:24:45:7d:1b:a7:e2:c1:c7:86:4a:b1:7b:
94:c6:a8:15:80:c1:51:25:7e:e5:1f:3c:38:29:73:ee:0a:c7:
52:c1:dc:02:29:e0:ea:1d:c7:ca:1d:aa:16:88:87:16:0a:3e:
07:8e:dd:0e:75:5b:71:d8:43:c5:97:b0:29:a0:b9:62:b6:f1:
e0:d9:00:0c:ac:01:90:2a:9e:40:c5:da:14:e8:48:5f:89:4b:
9a:04:4b:ed:fc:1b:64:a5:aa:13:5f:1a:84:05:f2:1a:cd:0e:
16:36:e3:07:e3:10:9b:5f:4a:fa:0d:7c:39:5f:0c:8e:7e:c5:
ef:8e:3d:6e:8b:0d:bb:bb:c2:4d:a4:9d:e6:63:e6:84:1c:f2:
50:1a:1e:bc:d6:e3:a1:d9:80:fc:87:21:d8:07:4f:15:3b:c0:
17:60:4b:0b:9c:94:e5:cc:85:b3:ce:b2:db:f0:d6:4e:fd:d2:
15:3d:b2:c9:51:f9:11:54:cc:6a:3a:9e:d0:4f:87:b3:98:e7:
43:e7:ef:89:fd:57:d4:a9:fc:77:3b:d7:d8:1f:f8:67:2c:7d:
18:f7:45:f1:95:97:a5:12:56:0d:c2:f7:9a:f8:d0:5e:98:d4:
1b:4a:f4:ec:c4:85:bc:c7:3c:75:68:ca:28:58:6e:0e:8a:13:
49:d0:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:49:46 2025 by rpki-client