
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
File: gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json)
Hash identifier: TFcGSmZDEm12mJrzXUlIFNtJjDzhc1F9/OyHfu3m4zU=
Subject key identifier: 6E:B5:77:DA:87:EB:32:C1:9A:2D:A7:C3:84:D1:D3:3A:17:0A:8E:29
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019A50E3334CE41ED2F2D0F5C7EA410F04E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
Manifest number: 169A
Signing time: Tue 04 Nov 2025 22:00:58 +0000
Manifest this update: Tue 04 Nov 2025 22:00:58 +0000
Manifest next update: Wed 05 Nov 2025 22:00:58 +0000
Files and hashes: 1: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (hash: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=)
2: 3nHQeUIvfgERGGgwZXPLqGrFwCc.roa (hash: PVqd7KRgPCILOUDhdegbeY89u7gfE4kJTUXx1+4aybk=)
3: 4fJd3OUxKotrDopMoPp8x_J3KXs.roa (hash: jo1NuUMOgj2DOUbbjYgsD3WHmHnI2e64VwgOioKGjxc=)
4: 7xBwrzDU-Q3LgBd_pCCkSVZJ8r8.roa (hash: I4+USeGM9vUX6KcuBfkfPPLNkgp4BpNTxxlqHARIlaA=)
5: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (hash: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=)
6: GMUqnPQO8HVIx48VQ0kZwO4akaw.roa (hash: uZv76tLJNRtDmi3fk8CwmWOl4QIbJTpAAFy6cS5OdOg=)
7: HIqyL1_xN65PGGh2pYvXxB9JRnY.roa (hash: WSdWXpJpM+IApu/ksgC0/SIwWBLtodEczT76Ij0oaDM=)
8: HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa (hash: Xdy5Q/i3U4vTL+1/dZaz9m7aiTQM9VV6w2ke2pIj8Mo=)
9: L0_jQJT5Qclln0Oyg58IDEsvUEY.roa (hash: O4ru/bejek+UTjQtcEf3F24KaS3s+lQbPWX4dTGtcIg=)
10: M6XyFHtKP2ScUd5goZuFirggjdg.roa (hash: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=)
11: MiH69dfcyCIB23Qa5GvglWS530s.roa (hash: ib+HOhPLu/yX/AwfYmsfgR2RDO6fgoZuxLt0/b+SAbc=)
12: OE3tT2H2fUUZLW1vQ7BzbV1M8gU.roa (hash: y5ASsgsrkdPRvKNsFBA0em5Q7FjI70gdDU/50w7KFJA=)
13: Q155SYsxVZHtklas2BS3w5w70h0.roa (hash: FvNx0toywZuvzc5WA2iEA8TJxxDlZbL0owUYzKxW1No=)
14: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (hash: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=)
15: SX3ylag-hZOGWYy_pZkwNhLOSsE.roa (hash: 43OUdEAz6tq0z1F5ikIM0mpbPVhfkw5HMKGB/qtwP5M=)
16: VBzP8kfPQEFNtuR8PdFsD2jp1DY.roa (hash: 3EY9SySAHD8fNQ9KBgqy9PEqScRiw8H7Y0JuBdXiKGk=)
17: VWUyUYrxBUBQm8U_GjpDzaM_d0M.roa (hash: DnWyph44y5iJj5u6j2MjM6Rs0v4MJI8RZHnOeiNRgbw=)
18: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (hash: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=)
19: XOeYPDFunsrsYp0-Y7f01UANXYE.roa (hash: EDBHmHjrHHD79zYQIl4IIyJ7MsjaCFiA1LKPLtylFCA=)
20: YALvBFXCZCuiPMm-BJVewPH_enA.roa (hash: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=)
21: _GtticsJYfVQoe0D3zav_vzfdBI.roa (hash: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=)
22: auEd2AJZBbZPig_7z1vxDlWadmA.roa (hash: 60BE0mDiR8P6qgvwmA8KQFG8GMDS3ckQBTSoMT45CdA=)
23: auJYqSGMRM2eh3GuPu73K0unOdU.roa (hash: GDejZaeuJKin43qGV5V9PEXLP2cVvsiS1K0IxA3fdMk=)
24: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (hash: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=)
25: cG7_wfsakBmyctpOoPE_qHS49E4.roa (hash: mSuDbhxIa4I4Ml2s2/BDm98rCr3yNT2h8gR1W7fngK4=)
26: e1WMx_ge3OvvuQfeVWgtsTZKIeI.roa (hash: AcxhV2adeY8w5h5li2Z6uouvIaFM+nk6upPlV2hgezs=)
27: gchn44JRTuDd880WIwbVtgXZUsU.roa (hash: JI8XHT7Ed3+L0vajm6jq0SIoKJNRevXoKUe8F/HW81I=)
28: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: EiiTTTFBjroDw3HVMgBsug0rLu00rtDneAEXO9IbwE8=)
29: kP5Kud5JC4HdByWF3NmU2sgwbJg.roa (hash: aeS1WvwgOcwV+L4eoLjhAuXFnavKM4LbSU/DAgly4BI=)
30: ojT-i1WyMoMzrKUGF70lR5SpfKo.roa (hash: +svQt7tDqw+nZSwF/1dh5yGoWZXeOhltuo6UFjy/ZCA=)
31: pFdc9GKBdXBjaKb_bkpy4pwiK_0.roa (hash: 8795JOEM2aEDEqQnWkWWkhSBntyGxcwSFS+eMBONKHk=)
32: qTXSVWTU8wL-LtchYD96dAZna1M.roa (hash: whr6apWGUcvqYoUu99TAxnFfLEWJVx+7V1setIYeu9Q=)
33: qiq4lHzWMEzrZSdOazDM-vLTXbw.roa (hash: xlyv2U2zn5kmXMwTOObtgWC0+eOvTyqFjN2rhysl2z8=)
34: uV9qh0Bz3P5Gfc4DrA8wQrQZnKM.roa (hash: Q2zeYVmGmIBxQp2Z7g0x6cXzrzkC3NswS2sBlFvJ0Pg=)
35: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (hash: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:33:4c:e4:1e:d2:f2:d0:f5:c7:ea:41:0f:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Nov 4 22:00:58 2025 GMT
Not After : Nov 5 22:00:58 2025 GMT
Subject: CN=6eb577da87eb32c19a2da7c384d1d33a170a8e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:f9:47:e3:61:a9:8f:1d:95:cd:1e:ad:47:
5e:39:c9:60:c3:8d:4f:b0:d5:b7:de:20:bc:a2:a1:
c2:d3:fe:57:56:97:51:15:54:27:09:f3:f3:f8:d3:
4a:21:4a:09:93:42:5e:e9:63:f0:f3:cd:b9:54:81:
9e:d9:2c:bd:ed:db:6f:31:6a:6e:41:f9:9a:34:ba:
30:65:fa:d6:21:e2:30:3d:91:07:69:7c:1a:0e:da:
3e:75:b0:16:dc:49:bc:41:59:0d:bc:d4:a7:2a:96:
64:20:93:d7:bf:2d:bf:c8:3f:de:01:b5:c7:d5:70:
04:43:9b:85:0c:5f:b2:46:fb:16:87:c4:25:d8:df:
b1:32:b5:ba:67:b5:c4:b6:9f:b2:5e:5c:17:49:dc:
68:7d:22:6e:6a:fb:c7:53:49:88:40:7c:fb:df:3e:
fd:da:54:8b:92:4d:d8:36:9f:09:b9:e6:e6:97:67:
fd:e4:dc:40:d1:8c:0a:a5:4f:ae:ba:e1:f2:75:e1:
00:a7:8d:53:e3:8a:ec:03:90:6e:c4:cc:3e:50:80:
31:32:e2:24:3d:06:97:6a:14:7a:09:98:f8:ff:f3:
05:4a:c0:28:af:03:79:45:7e:c6:06:b3:05:79:09:
6c:76:88:5b:ba:4e:05:dd:d3:aa:73:b9:d1:16:8d:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:77:DA:87:EB:32:C1:9A:2D:A7:C3:84:D1:D3:3A:17:0A:8E:29
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ca:1c:1c:4d:1e:e9:76:9f:63:6d:d8:46:c7:f6:82:98:55:
ea:bc:c7:13:10:6a:72:57:e9:7c:78:2c:a5:dd:5d:98:b7:f8:
4f:6c:43:f4:15:4e:56:fd:cc:2c:d7:91:35:98:c7:ff:0e:53:
7f:ba:bf:af:5a:ab:aa:15:bf:0f:b2:0c:85:ae:97:8e:c0:98:
e0:0b:73:5b:f7:41:7c:8f:c3:61:04:99:6f:8c:13:a8:a8:f1:
9a:ab:34:f4:40:10:32:0c:4a:9f:93:fa:5d:7b:6d:f5:b7:04:
cc:2b:66:e0:7c:48:a5:d4:4c:5e:91:00:72:86:4b:4c:2f:d2:
06:54:1d:a9:09:44:0f:a2:86:a7:57:cf:b4:78:84:91:ef:ba:
de:e8:f5:62:0d:b8:be:34:8a:f9:34:06:d7:22:40:6e:75:ee:
b7:e1:d1:84:0a:53:8e:e9:fe:4a:7f:58:c9:74:ef:5b:f1:9e:
d9:c5:97:fb:51:45:36:bf:6a:bc:1c:d9:e0:f8:fc:e3:9d:b7:
79:e4:08:93:4b:63:62:72:7c:9c:26:5e:10:15:84:5e:61:12:
31:eb:8e:5c:c2:92:0d:7b:04:be:08:9b:6a:88:68:7b:6b:ce:
80:a4:f3:0f:6f:d2:f3:37:ee:51:d4:1b:ac:46:7d:fe:e3:92:
25:63:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:46 2025 by rpki-client