Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File: gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier: PylQxxQTgeh2bGmAvMwKdJ9DBd0AXcalQU6/O6N0LGk=
Subject key identifier: 9B:DD:B7:79:EA:30:C3:B0:BD:E0:C8:94:0B:10:50:27:B2:5C:5E:89
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial: 019A4DE20DAA2017D0088515CDDA660A20E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (hash: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=)
2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: 452n8exycRa3jlkHzH77CE4B/wvQMpXhiIo0YMoEEZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0d:aa:20:17:d0:08:85:15:cd:da:66:0a:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=9bddb779ea30c3b0bde0c8940b105027b25c5e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:bb:94:a3:d4:7c:c8:9c:de:ff:a9:ce:a6:
3b:ba:04:8b:33:e0:b1:96:2a:6d:61:94:0d:77:5f:
bd:62:a1:21:86:df:a6:dc:fa:5f:b8:f8:ae:fe:65:
0e:08:0a:5a:a8:a2:00:88:c0:a3:f3:c3:0f:f9:97:
0b:f4:d7:5f:1a:88:42:dc:97:35:2d:d2:3b:32:6e:
1e:b4:f9:4f:7f:e7:3f:c5:50:06:56:00:b0:f6:8c:
de:bf:ab:20:56:e8:d1:2b:f5:c9:b0:79:96:43:66:
ed:61:9e:b8:28:c7:0f:40:d0:49:d6:91:5c:ef:d2:
e8:ce:09:89:a9:af:c8:ed:c4:72:7b:e3:0f:b8:04:
9a:fc:ac:9f:45:d4:26:8a:ba:c5:16:43:e5:cd:e4:
4e:f0:25:02:e0:1e:73:b9:3d:1c:40:6f:8b:70:3f:
03:1f:6f:1d:3e:29:c4:20:b1:9f:1f:e8:35:1c:47:
c6:27:47:d3:10:f9:07:3a:2d:9d:68:d6:cb:9b:c8:
69:b9:b7:4d:f7:25:38:59:d7:ea:06:08:7f:e5:a6:
fc:7f:65:a6:83:3a:db:03:b0:a8:38:d9:42:d1:3d:
41:da:94:21:f7:0b:d2:e4:5c:3d:60:c6:bb:68:cb:
e8:af:27:b6:89:d5:2f:bb:0b:c0:ad:18:13:8b:c5:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:B7:79:EA:30:C3:B0:BD:E0:C8:94:0B:10:50:27:B2:5C:5E:89
X509v3 Authority Key Identifier:
keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e9:d7:86:c1:8d:40:f1:fe:a5:2d:e6:90:e7:13:52:75:42:
df:4a:53:10:4e:31:f3:93:96:9b:c4:95:c1:ff:85:b1:a9:16:
34:84:36:57:26:94:73:bf:df:2e:1c:65:cb:e9:87:e1:0d:48:
d7:dc:e1:a0:5b:b1:6d:28:52:8d:90:2d:53:6b:83:d5:9c:55:
b7:74:05:dc:15:72:bc:68:55:4e:b2:56:49:52:63:6d:78:23:
ed:6f:ba:93:a4:df:a2:30:44:5f:33:12:bd:07:28:35:2a:7b:
16:77:62:aa:6c:b4:e6:35:f5:10:fc:f9:27:19:e3:87:60:b7:
bd:ad:cf:10:7c:c8:60:39:d7:9b:d0:0a:35:59:8a:5f:31:de:
e7:66:a7:b3:c2:0e:16:ac:7f:0b:df:c9:7b:eb:31:74:de:3d:
c2:e6:00:72:e8:d1:cb:2f:0f:2b:40:4a:fc:33:8b:af:aa:64:
59:c8:0f:a4:d4:6f:88:9e:ec:29:ab:26:db:93:91:b5:64:8e:
e9:8c:02:02:92:93:13:7a:bf:8f:b1:c9:5f:36:72:ea:49:c6:
c3:9a:a2:09:45:70:84:98:4f:e7:99:c5:91:7c:48:a5:3d:24:
e3:8b:0b:41:20:e4:1e:65:e2:ab:b4:52:7b:24:df:b4:a0:50:
90:45:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:44 2025 by rpki-client