Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json)
Hash identifier: oVgTZ2A3bX6wLbGxsKQsin3Thq4XHfshRDgaOnxfZJk=
Subject key identifier: 40:23:18:31:5D:5A:57:A6:15:69:6D:8B:A6:C3:B1:1C:CB:DF:23:BC
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial: 019A4DAA6903B6DE3FD91AD7EECF049EF5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
Manifest number: 0E99
Signing time: Tue 04 Nov 2025 07:00:04 +0000
Manifest this update: Tue 04 Nov 2025 07:00:04 +0000
Manifest next update: Wed 05 Nov 2025 07:00:04 +0000
Files and hashes: 1: YTi5kVsPsdj_lVOXlLvthRcyZYk.roa (hash: yclAP/FevQD565z0O5X4lV8O1DrwrH9X8Lbd0rW1rtQ=)
2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: mvwNEMnzcV8+/boLCF1c17kHBwt1KPqt5wcg40L8tmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:69:03:b6:de:3f:d9:1a:d7:ee:cf:04:9e:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Validity
Not Before: Nov 4 07:00:04 2025 GMT
Not After : Nov 5 07:00:04 2025 GMT
Subject: CN=402318315d5a57a615696d8ba6c3b11ccbdf23bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:a6:0c:22:19:23:96:08:da:f3:60:b2:99:
e2:dc:0c:e2:4b:b9:f7:58:91:c9:06:f3:92:a9:15:
9a:a0:7e:e6:ea:ad:f9:a0:94:ff:39:5b:ff:34:06:
83:34:fe:85:fc:39:40:a2:a7:b4:0b:aa:58:b8:03:
8f:67:78:c4:45:f5:34:56:9e:b0:6d:42:da:dd:7b:
f7:15:1c:71:03:33:7b:80:b4:9d:5c:6f:02:57:79:
91:21:1e:62:ea:e2:61:1b:3c:8a:e0:00:85:e8:2e:
06:9f:6d:4f:f1:95:04:5a:10:33:d5:fd:f5:98:4d:
71:e8:67:90:f4:43:a2:bf:c2:8e:d7:5a:3f:5b:5e:
fd:9d:57:18:a3:ba:2a:97:3d:b6:bb:f1:44:e6:40:
1d:9a:08:78:36:6d:8d:dc:af:6b:90:c7:b0:39:e2:
94:a7:97:02:94:64:78:fb:c3:55:0e:80:fc:2a:c3:
be:70:ac:2e:c0:58:6d:01:93:b3:de:8b:89:cf:30:
1a:ff:0f:9a:cc:57:74:5e:a0:fe:7f:3e:1a:4f:5e:
52:8c:97:f0:4a:62:a1:f0:fe:04:01:76:67:c2:3d:
e3:1e:e6:17:46:2c:58:90:47:16:05:4d:37:8c:ed:
07:20:0a:01:51:91:6b:34:fb:bf:09:9f:17:38:9e:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:18:31:5D:5A:57:A6:15:69:6D:8B:A6:C3:B1:1C:CB:DF:23:BC
X509v3 Authority Key Identifier:
keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b2:a2:77:2c:86:ad:06:4f:3d:38:80:9f:57:5e:9e:c3:0b:
cf:22:fc:a6:4b:ab:96:af:49:ff:f8:98:3b:9c:f9:04:db:01:
a8:2d:34:41:fa:88:f6:c3:df:c4:55:99:b0:d7:fe:83:f4:27:
32:e0:90:10:2e:f6:80:d7:91:3a:f5:69:df:4a:29:96:60:65:
5e:b5:a7:fb:72:86:49:ac:d5:93:d9:6b:b0:78:9d:fb:5c:13:
40:e1:58:3f:a1:79:02:91:76:26:40:7a:26:f2:0e:bf:3a:50:
97:16:d6:48:99:c2:64:f3:fa:7e:10:82:ce:6f:08:17:b1:ca:
99:2b:b8:4e:69:0b:ec:a8:55:02:86:fd:1d:6d:a0:f4:fa:9d:
72:f2:96:41:49:bc:be:19:b1:f5:df:46:82:24:86:b4:53:d4:
8b:86:9c:da:52:75:f6:4a:fe:06:c3:1b:aa:5a:a6:55:c2:e8:
43:9f:3b:fe:7a:3c:02:0c:00:27:ee:e9:3d:29:bb:6d:ac:39:
04:e7:78:7a:5f:74:35:9d:cd:91:9c:07:d3:2c:23:30:cf:ef:
0c:9c:f1:46:6c:d5:01:e3:0c:ee:7f:db:c2:d5:82:c6:a5:3e:
e6:b1:da:c8:ca:34:d6:ae:d6:20:5d:0d:a4:d9:5d:09:54:66:
bb:44:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:57 2025 by rpki-client