Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: oq3LBm/Ff/kPgwc54EQe8LDnGH8+Q35+QirWAz+6MwY=
Subject key identifier: 2A:E5:91:47:34:40:2B:6C:F8:97:C6:C8:4B:CD:5B:11:6F:5A:46:A7
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 019A50E32E7D5AEB2C9C06B44B921D28F0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 15E5
Signing time: Tue 04 Nov 2025 22:00:57 +0000
Manifest this update: Tue 04 Nov 2025 22:00:57 +0000
Manifest next update: Wed 05 Nov 2025 22:00:57 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: wNfcckAJ0AYZCw5tSN1xSOSzEzTl7Q4ypItmOdzHMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:2e:7d:5a:eb:2c:9c:06:b4:4b:92:1d:28:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Nov 4 22:00:57 2025 GMT
Not After : Nov 5 22:00:57 2025 GMT
Subject: CN=2ae5914734402b6cf897c6c84bcd5b116f5a46a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:f2:a2:5f:29:73:46:23:81:ea:bd:f8:91:
04:2f:38:e7:a1:1d:14:30:df:d3:4f:30:c2:b8:62:
42:bb:6d:e2:0a:58:35:f8:39:13:44:74:56:bf:c9:
64:b1:cb:d0:60:11:9e:97:a3:7c:a2:58:b5:05:0e:
dd:6a:fb:28:41:e4:6d:11:28:b2:a9:4c:4d:dc:de:
09:19:ba:26:2e:c7:8b:9b:9a:02:67:7a:57:70:f4:
ef:21:00:7e:5b:fa:b4:12:60:f2:2d:2c:86:5d:b2:
e3:02:5a:cd:8a:dc:21:cc:c8:08:35:20:97:6b:8b:
5f:74:c3:93:1b:c6:ed:d5:2a:34:f6:e5:92:a5:8e:
64:ad:0e:cc:31:8e:35:07:90:77:0b:8a:6a:bc:a6:
f6:bc:3d:c9:fd:e3:9c:8d:ca:0d:d2:65:66:7f:11:
e5:40:b8:5f:5e:e8:da:1d:c3:78:e1:47:87:21:b5:
71:3a:af:98:51:7d:60:ff:8b:5d:26:71:b6:c5:64:
59:31:a1:03:6e:96:b7:a3:d7:6a:25:86:2d:e8:ed:
d8:6c:fd:e2:48:3b:2b:d6:a8:03:87:8d:00:9f:93:
11:1f:73:3b:4f:8e:eb:03:14:ab:80:8f:fe:0f:f2:
eb:69:f2:e9:63:10:fd:06:f0:a9:65:d2:5f:28:bc:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:91:47:34:40:2B:6C:F8:97:C6:C8:4B:CD:5B:11:6F:5A:46:A7
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d7:39:7a:12:4b:14:55:f7:23:f3:e1:44:ee:36:cd:cd:bf:
9d:1c:c3:4c:d2:15:c8:22:d5:43:8e:40:ac:ae:8f:05:b6:c4:
74:70:75:ca:79:93:64:80:2e:bb:a2:80:8d:d2:52:db:d0:99:
5b:65:8c:e3:9d:ac:58:19:91:b8:fa:ca:44:5b:95:e6:d7:2f:
de:d6:32:e9:7a:0d:92:aa:de:9c:07:21:ba:c2:03:b4:87:67:
a3:26:8d:28:d5:8e:b2:cc:36:2f:d9:7e:af:25:46:29:41:02:
37:b0:47:e3:09:95:a0:7a:f7:7c:47:9d:7f:3c:af:1e:de:d3:
22:88:5c:3c:9e:cb:25:6f:bd:43:ff:2b:60:bc:f9:f6:fd:e4:
94:ca:ee:fc:31:bf:41:d3:f8:4a:a4:25:57:15:e0:d3:cb:b6:
2f:cd:f9:f9:73:fc:4d:2e:6d:82:0a:2d:54:f3:a4:9d:4e:81:
24:12:b8:1f:b8:34:11:53:ba:aa:dc:99:fa:28:bd:9a:5d:18:
14:d8:64:df:86:92:ab:4a:11:77:79:0d:8e:fa:4d:28:0f:3a:
28:48:98:d2:ec:ed:86:ee:63:24:82:12:aa:ba:84:8a:46:36:
c0:76:77:38:cc:36:32:26:a6:88:9f:7d:5a:c4:83:94:ab:dd:
0d:db:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:56 2025 by rpki-client