Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: DsCQijg7Lmk1fKLu/OZaqx5PdvrCFuSWdFoZ2clkbx4=
Subject key identifier: 8B:5C:30:60:06:8A:32:53:7D:EE:13:0D:3F:AE:8F:F7:C1:91:E8:A6
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019A4E18E85D7CBD37C0E703B60C8E75A032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 15D0
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: euTBM9TtV91qPzQLpVJUdoEc+FWO3s0izYx/5IVP+6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e8:5d:7c:bd:37:c0:e7:03:b6:0c:8e:75:a0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=8b5c3060068a32537dee130d3fae8ff7c191e8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:f9:a2:1d:40:89:e4:2d:0b:be:9f:c9:7c:
62:87:4f:0a:39:39:da:55:f3:07:d2:91:f0:65:be:
7f:e3:71:a1:03:41:32:e9:c1:cc:58:a3:f3:fd:6c:
fc:39:71:b7:4f:70:12:58:c9:eb:d3:4c:34:00:76:
67:0e:d9:65:91:f7:c4:c7:9f:29:b1:0c:26:58:d3:
46:0f:f2:4c:66:1f:c0:79:5e:aa:c2:db:e2:9e:f1:
aa:34:46:3d:f0:2a:9a:8c:98:e4:65:0a:d6:bb:50:
9c:05:79:81:6c:aa:bb:5e:d8:d6:72:6e:b2:64:76:
0c:ff:fb:3c:b9:9d:7f:d4:da:69:bd:cb:e9:da:8f:
a9:a9:ba:c5:8f:45:b8:c5:d2:76:d9:e2:be:7a:2e:
b2:3e:77:a4:f8:1f:44:d5:a7:62:7d:08:14:e2:63:
c3:2c:d9:0c:8b:a6:ec:eb:23:f1:e1:9f:ff:fd:38:
99:b1:cd:0f:af:c7:be:61:bb:db:88:11:1f:51:2d:
7f:46:01:ce:90:2a:e8:22:5f:3c:b1:85:52:50:3b:
01:b1:7a:8b:1e:d5:20:27:41:8f:85:14:43:ee:e2:
91:02:53:63:75:65:96:4a:7c:ad:c8:29:ad:cc:d6:
ed:75:8d:21:e8:1b:0f:d4:60:7e:e7:c2:89:ac:15:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:30:60:06:8A:32:53:7D:EE:13:0D:3F:AE:8F:F7:C1:91:E8:A6
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ea:db:15:13:94:ee:9f:e7:65:f9:ec:c6:5e:f2:b4:ff:f6:
57:ec:ab:29:e1:04:7b:2d:fa:a9:72:89:ee:95:61:3b:83:4d:
00:e9:59:a6:d8:5b:64:01:1d:81:eb:c8:61:bc:06:66:b1:0b:
d4:56:3c:ec:1c:ce:3e:ac:6e:c8:75:b3:fc:71:51:29:8d:b6:
b5:0e:1d:2a:40:a5:6b:45:b2:df:a3:c8:19:94:87:23:c1:db:
7d:26:33:8e:a3:78:8a:70:52:9a:b6:4b:26:1a:fd:1f:42:76:
8d:e0:0a:37:f4:f0:42:8c:57:e9:47:78:ec:c2:25:cd:de:08:
28:99:56:d8:50:fb:a5:19:29:23:2b:0f:36:95:56:25:9e:60:
0d:0b:98:72:eb:6f:a6:db:e9:62:4d:0f:34:08:20:dd:a2:4f:
87:6f:6f:99:aa:15:e4:21:cc:3c:1c:17:28:dc:fe:71:14:2d:
e4:53:bd:b8:e5:10:df:bf:55:74:45:45:2e:2e:a9:e6:95:91:
af:e6:ea:39:3f:d6:af:25:cc:35:41:67:8a:c9:6b:a4:5f:8a:
31:14:5d:55:2d:a8:b6:c5:26:96:8c:76:1a:b9:6a:67:07:12:
8e:72:1b:56:6d:87:92:80:24:35:27:15:42:76:24:05:b5:c0:
6b:4e:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:48 2025 by rpki-client