Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier: oJqZKZtV5UvL576GT38Fjs5AS77EmInWQmo9hG5Uuic=
Subject key identifier: D2:C0:24:F6:C4:1C:5C:87:6E:40:0C:B3:A5:FD:C6:F7:EF:43:51:9F
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial: 019A5074BA28A74219E182730A60CD62EC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 20:00:18 +0000
Manifest this update: Tue 04 Nov 2025 20:00:18 +0000
Manifest next update: Wed 05 Nov 2025 20:00:18 +0000
Files and hashes: 1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: CxprA0GjrAkC2kQ8SuoNr/IXwOZWGCSu99BWrGj40qM=)
2: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (hash: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ba:28:a7:42:19:e1:82:73:0a:60:cd:62:ec:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
Validity
Not Before: Nov 4 20:00:18 2025 GMT
Not After : Nov 5 20:00:18 2025 GMT
Subject: CN=d2c024f6c41c5c876e400cb3a5fdc6f7ef43519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:2a:72:41:8d:af:86:fd:aa:3c:26:75:2f:
8b:77:48:34:42:43:4d:79:84:ee:5d:66:3c:e2:49:
19:0f:26:bd:59:52:14:ad:96:27:8e:05:69:69:fc:
13:b8:c1:60:c0:f4:7a:59:c4:f6:c3:ac:13:aa:ec:
4a:3a:ec:e6:2c:07:a6:61:cf:da:80:11:84:75:3f:
76:cb:9b:9f:1a:53:88:08:57:ec:bb:7f:92:cb:97:
1b:e1:a0:b4:d9:c8:bd:8e:90:a9:63:a9:31:4c:97:
0e:3d:93:33:16:df:95:2c:2c:fc:32:52:5d:74:81:
b9:69:b6:74:1a:19:87:25:70:d9:7f:67:45:49:ae:
dc:42:7a:b1:6b:89:73:c3:be:5e:96:2a:d2:72:5c:
a2:37:7f:d8:0e:28:a2:60:79:f6:d3:c6:6c:2c:94:
85:bc:67:e3:86:94:1b:a5:e8:7d:2c:a0:0d:11:1c:
17:7b:bf:9e:b5:0e:55:8d:18:fc:a1:fd:dd:ec:b4:
9b:1a:02:a1:0f:84:40:5b:60:05:8c:d6:5b:6a:36:
b8:68:6b:4b:57:3c:c0:db:a7:fe:0c:f3:d5:bb:ea:
7e:40:2f:75:ce:4b:33:48:3a:be:a5:ef:c6:05:8e:
2d:21:80:04:70:d0:20:48:5f:41:35:bd:60:47:c4:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C0:24:F6:C4:1C:5C:87:6E:40:0C:B3:A5:FD:C6:F7:EF:43:51:9F
X509v3 Authority Key Identifier:
keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:22:98:8d:53:1f:d4:4d:a8:09:5f:8d:1b:ca:39:29:29:15:
74:01:2a:4b:ba:02:bb:c6:8a:44:ff:9f:d3:62:f2:4e:5d:40:
04:62:f4:de:0e:a6:92:51:b0:08:42:76:17:e4:86:88:53:7f:
f9:2e:e1:2b:2c:db:2b:88:67:8b:65:3e:d0:c8:2f:a0:6f:23:
f1:46:a0:97:7a:05:bb:e8:ee:65:30:83:7c:8f:3d:e8:a0:52:
0b:97:34:ae:0f:6c:54:36:e2:3f:2c:1c:4f:43:cf:71:ce:a0:
b5:92:91:57:c1:0b:af:ee:65:8a:79:b3:41:fe:0b:2f:68:93:
71:53:48:3e:33:d2:d8:e1:47:b3:74:9c:b7:39:27:12:c0:c0:
3c:5d:d6:ad:33:89:bf:d9:5b:25:03:cb:12:31:2f:9e:70:7d:
83:11:91:41:9c:e8:d2:c8:b4:9b:84:bc:26:3c:80:1d:fc:c3:
63:67:c0:26:55:fa:27:49:b8:00:84:43:bb:7f:0f:10:4d:33:
8a:48:99:e5:02:69:c9:50:33:d9:5a:4a:56:90:dd:78:2c:d6:
35:e0:ef:85:b0:53:b7:04:1a:c5:30:c7:7d:fe:34:08:22:e9:
16:86:4a:c9:2a:a2:29:a2:16:40:ac:7c:04:71:8b:c2:5a:82:
9c:f1:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:20 2025 by rpki-client