Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: r6Qk6Zl2G6KZMASfaPSGVnulSOImlb3fmUQ6zyMQOLQ=
Subject key identifier: C0:CC:0B:4C:8B:2A:CF:80:24:66:D2:35:70:95:FD:AD:3B:C8:38:D0
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019A4D7407AFCB7BF92126B150951505D5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: xPvSFkYKxZnKmRU0wdDkJ/R4dtLCOycZuMGqwfQcG9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:07:af:cb:7b:f9:21:26:b1:50:95:15:05:d5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=c0cc0b4c8b2acf802466d2357095fdad3bc838d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:8f:75:6b:8e:bf:cd:3c:fe:d3:f4:88:5f:
ce:35:83:84:0c:8a:8f:e8:96:51:09:f3:45:b8:82:
65:5a:68:63:6d:ab:db:95:b6:54:a2:24:39:b3:44:
71:68:6a:41:e3:28:34:10:e7:15:8b:4c:41:f6:e9:
e4:9c:28:46:32:4d:5f:13:ca:0d:2c:aa:f5:fc:64:
7e:2e:00:e0:6e:7f:8b:30:e0:2b:6d:fa:ff:57:92:
7e:5c:e1:07:f8:d9:dc:c2:90:b1:e0:cd:d7:ac:88:
6a:ad:6d:ae:f4:5b:b1:a2:7d:18:03:04:30:a6:45:
81:ab:6c:67:a0:ae:c0:0a:75:6d:67:22:58:2c:5c:
ca:89:0f:b4:3a:77:ea:48:ef:5a:89:d8:cb:50:26:
5d:84:30:19:7d:67:06:b1:9c:be:11:5c:7c:cb:21:
91:1c:03:49:59:10:7e:fa:5e:3e:40:c5:d4:9b:2f:
49:76:ac:9e:aa:9c:77:5e:7c:3b:27:d4:9b:78:67:
f7:ac:3a:8e:f8:a1:59:21:cf:6a:bb:97:8e:b3:6b:
34:04:10:cc:7d:d5:5b:c0:5f:d6:59:f9:23:81:30:
32:cc:3d:99:12:36:17:7e:ff:62:2d:dd:33:92:ab:
e4:60:c1:ba:60:8d:b3:4d:46:3d:25:73:75:e9:b5:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:0B:4C:8B:2A:CF:80:24:66:D2:35:70:95:FD:AD:3B:C8:38:D0
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bd:d1:9b:12:38:45:d9:d1:3d:c7:b6:bd:8e:94:42:ef:6d:
7b:8f:45:b4:f7:7d:95:61:2f:a4:1f:69:91:be:c0:46:78:45:
1d:f3:82:49:be:aa:40:1b:90:04:20:d7:f2:9d:fc:e6:fb:c9:
42:c2:ad:87:1c:d2:5e:74:a2:3c:7c:15:ba:c5:fa:72:07:67:
45:55:1a:36:2d:50:4f:bb:d6:b5:e3:96:cd:be:dd:5a:5c:b1:
1b:3a:f3:53:bc:28:11:ea:77:64:45:21:d6:33:3c:c3:41:61:
ff:e3:ea:ec:d3:41:1b:40:a7:f4:d6:51:e7:b4:91:25:55:6b:
ba:35:aa:09:0d:e9:c2:0e:08:59:fb:f5:61:82:ea:f4:8b:fc:
09:9b:81:60:0c:5a:94:42:2b:5f:99:15:f2:ed:86:be:66:bc:
19:bb:c6:d0:62:d3:96:17:09:fa:e5:62:20:08:5f:9f:3b:f4:
32:c1:45:61:f8:28:e7:f0:7d:18:41:42:b9:0a:4c:f1:c8:1d:
52:de:20:3d:5f:68:54:3b:d1:d8:05:bd:5f:2b:c5:81:c0:6a:
17:be:9e:70:76:fd:6c:83:c2:43:b7:4d:c1:9d:44:0b:16:97:
00:8d:c6:79:de:0b:76:9a:85:9c:14:8e:dc:20:80:eb:59:03:
e4:18:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:30 2025 by rpki-client