Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: Wa5qoCW6wS3usCjpbkELC0UyhnWavQkOPHpASAIPK2Y=
Subject key identifier: 7B:AD:F8:B9:E4:62:FC:5B:18:E4:0D:A3:54:C9:8C:67:81:40:CD:44
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019A4D7373449E6A8528D9932E164AB0FC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:03 +0000
Manifest this update: Tue 04 Nov 2025 06:00:03 +0000
Manifest next update: Wed 05 Nov 2025 06:00:03 +0000
Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: tckEUevpoyyMQNXxW/cgJYspJo1lEm0GHKaU2daWnqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:73:44:9e:6a:85:28:d9:93:2e:16:4a:b0:fc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Nov 4 06:00:03 2025 GMT
Not After : Nov 5 06:00:03 2025 GMT
Subject: CN=7badf8b9e462fc5b18e40da354c98c678140cd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:d9:a3:76:88:fb:2b:f3:70:4a:bf:fa:64:
42:f6:81:11:8c:41:75:7c:69:b0:41:8c:e1:9d:7b:
61:0b:fb:78:46:d9:e5:4f:7c:32:b2:63:3a:24:e0:
fe:6f:3f:00:ef:71:5d:ce:4f:6b:4f:65:94:fa:6c:
f7:e2:ff:27:56:2e:09:c9:b2:8a:dc:fa:d7:b4:6e:
36:17:b0:79:3c:c2:83:d3:aa:eb:e9:3d:a5:2f:71:
e5:c7:f5:6f:11:af:b3:b8:7e:cd:28:d9:9c:30:4d:
dd:4c:f5:0e:36:8b:5c:f9:13:f4:72:f1:c3:cd:70:
e7:b0:65:d1:de:3b:dd:be:9e:81:d9:c4:e7:c8:94:
dd:13:8d:bf:ae:db:3d:81:08:27:99:6e:11:95:6f:
8a:f5:f9:cc:3a:41:5e:d3:88:d7:bb:a3:c2:a4:ef:
19:c2:ba:05:b8:7f:55:79:bb:db:fb:e5:5f:33:36:
a6:9f:7b:48:c4:b2:83:77:7f:b6:b7:6a:44:8e:2b:
09:4d:f9:10:8f:7b:75:58:f0:b4:a7:1b:18:89:97:
93:86:1b:71:79:b2:4f:1c:39:b5:f7:de:97:88:ee:
87:c5:e9:d3:c1:90:90:42:4c:99:12:a1:81:19:77:
51:cd:57:85:2d:0f:8c:e1:9c:0e:c3:48:52:12:e0:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:F8:B9:E4:62:FC:5B:18:E4:0D:A3:54:C9:8C:67:81:40:CD:44
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:aa:2f:79:b2:ea:1a:72:64:1b:c8:39:62:39:e7:9f:d3:
07:0d:a2:8e:fd:46:2c:3f:0a:5d:0f:aa:1d:bf:52:04:1f:ee:
4c:45:16:92:24:13:ff:2e:ae:2c:28:81:e5:26:70:16:5a:8d:
58:10:a7:e2:6a:dd:13:e6:9b:4e:9c:b0:cc:d7:86:2d:9a:a0:
3e:aa:b2:10:55:d8:ad:4a:02:12:2b:a6:89:52:8d:0c:78:10:
7d:40:5c:e1:dc:c3:97:86:9a:ae:1f:fe:c1:5d:c5:a4:5a:5e:
4f:73:b4:79:6e:2b:da:9b:d6:3e:a3:54:15:76:8b:40:8a:78:
ad:e6:d3:68:79:2c:2b:f5:86:06:98:de:2f:84:10:68:a5:0e:
e7:74:eb:e1:e5:a2:b0:12:2a:a3:a1:34:2c:61:82:b2:64:de:
17:e3:28:23:ad:de:0a:89:93:95:a5:23:e3:e6:5f:0b:c8:a6:
14:f8:d0:13:7d:6d:c6:6f:f4:90:07:e3:7f:36:45:7e:67:7b:
88:53:8a:a8:76:4b:87:93:fd:06:14:4d:fa:ec:b8:07:6d:d3:
b2:df:09:e7:65:5b:51:fc:6b:1c:62:40:67:3d:3c:d1:63:b3:
14:25:04:83:50:3a:bd:28:64:c8:3c:4f:72:98:00:11:92:96:
8f:a5:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:00 2025 by rpki-client