Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: eDQGUCRHYTePiwTRczlEAO4zdaaZNk0rsaFvyshnzyI=
Subject key identifier: 5A:A7:1B:8D:FB:EB:A5:82:71:6F:C3:19:AB:18:64:3F:BF:E1:08:62
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019A54519C58A505E32EED525F940A5E81B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 14:00:25 +0000
Manifest this update: Wed 05 Nov 2025 14:00:25 +0000
Manifest next update: Thu 06 Nov 2025 14:00:25 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: rp9/c991HUG+aDQYaoH6rGQbY2ZBHkwZk7j7JwO/cuA=)
2: SOh-9AAaSpzRiCALvSALovJFWu8.roa (hash: Tovu+fswKVdq06B1Pl/w9wlU78BC7j3d4snPXyqHjIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:9c:58:a5:05:e3:2e:ed:52:5f:94:0a:5e:81:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Nov 5 14:00:25 2025 GMT
Not After : Nov 6 14:00:25 2025 GMT
Subject: CN=5aa71b8dfbeba582716fc319ab18643fbfe10862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:6d:ff:9e:04:8e:c5:be:aa:3b:b7:50:ef:
23:4d:0c:09:71:d3:ef:04:cf:eb:3c:ed:09:9d:4b:
9a:a5:6d:25:3c:60:99:bf:00:17:06:78:40:b9:61:
47:72:02:27:73:11:48:78:53:c3:68:ea:ee:ac:32:
41:b5:fe:a6:3a:a3:cf:5b:50:72:db:7f:f0:cc:e5:
5d:f1:64:e5:8a:76:c3:35:d4:74:09:1a:5d:fc:e9:
c9:85:a9:77:e2:4d:8c:ff:f2:dc:61:6e:f8:37:ef:
b0:6b:a2:ed:7d:63:d4:1a:3e:d8:8d:7b:8c:ae:5f:
a6:96:31:52:38:73:82:22:06:eb:2d:48:59:a7:63:
34:c6:b7:c7:4b:7b:c8:95:7a:b4:75:8d:68:0f:01:
0f:8f:04:1c:19:41:97:e4:db:50:ff:5a:6f:92:77:
39:de:2e:bd:04:05:93:94:ba:1c:71:2e:ed:9b:bb:
8f:0c:09:f9:41:30:b9:96:67:d4:11:51:8c:16:7b:
ee:cb:f6:c9:66:60:f9:db:62:03:10:05:64:86:3c:
3a:ee:66:26:17:5a:85:6d:58:40:59:ca:3a:22:df:
76:18:ca:02:fb:d5:04:01:5a:ca:e3:47:4b:26:34:
17:7a:c6:37:70:48:b1:0f:9e:6b:1e:c5:c7:4b:9e:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:1B:8D:FB:EB:A5:82:71:6F:C3:19:AB:18:64:3F:BF:E1:08:62
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:4d:e2:51:b3:97:3d:8f:85:97:aa:11:23:33:66:4b:b3:
8f:48:93:32:e8:4c:1b:dc:92:b2:1c:d7:9a:fa:99:27:b8:61:
c4:a7:d6:be:ea:bd:ce:c9:79:57:b9:24:a7:d6:31:3f:3d:91:
af:9a:3d:21:ff:1b:a4:fd:56:66:66:87:cb:c6:56:5a:db:1f:
ef:bf:77:8d:d7:64:0d:29:2f:50:52:27:87:66:99:d2:7e:17:
3a:67:06:1f:51:4f:d4:ee:c1:54:5d:13:59:12:80:5d:10:e7:
a1:49:8b:2c:a8:50:dc:b0:56:6f:5f:39:ec:e2:06:7d:a7:28:
76:75:62:3a:67:06:2f:b0:8c:c7:e0:d8:2d:9a:48:04:db:98:
70:0c:2d:86:51:98:96:5b:7d:07:96:01:93:e8:d3:40:d0:0e:
b1:52:ed:25:f1:96:59:98:10:6f:86:c9:1b:af:a4:7f:71:09:
a5:e4:60:9f:00:bd:0d:c1:ef:80:35:0a:bd:0f:4b:6c:40:db:
fd:e4:ab:ad:a7:ed:8e:fa:5a:0e:1d:00:fa:ed:d2:03:a5:7c:
11:a8:74:90:65:a4:d4:db:1e:09:a9:5e:be:f1:3a:48:29:cc:
aa:cf:19:83:41:84:e8:09:85:9a:40:2b:f2:be:b3:56:86:4e:
16:12:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:50 2025 by rpki-client