Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier: 0GF9/dMCpNkeeZmbZ3kTY9xn/myScCC7Tnqof0Y8VDw=
Subject key identifier: FE:3E:E8:9F:D6:86:6B:53:9A:9E:29:57:4B:20:EC:06:5A:97:F2:D0
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019A4E86426385C3BF969ABDB0A4CF7A50EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (hash: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=)
2: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (hash: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=)
3: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: /y/y6Nt+PPJj1QERbI1GkFXQVP34t9o5TowdPjCabeM=)
4: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (hash: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=)
5: ST5QgStVsZ8VLKir2fIMPSp6_jU.roa (hash: 2UGwzfV+8KmtBgovMvwjTZRncLGcWbahxwdG9QTxnao=)
6: fRi0G2cIUxI61l2GTTKIFQAG9RE.roa (hash: IiPf4Yv8/FcDmWTn4xUhoGH8CrL6FWqGZiw6UQ0WOHg=)
7: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (hash: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:42:63:85:c3:bf:96:9a:bd:b0:a4:cf:7a:50:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=fe3ee89fd6866b539a9e29574b20ec065a97f2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:83:09:e3:9c:e3:28:73:01:90:10:cf:c5:
4c:4b:a7:de:47:57:e4:d1:ec:db:3d:28:ac:f1:26:
1a:8e:44:16:01:26:86:b7:4e:8b:37:55:07:0b:78:
c0:5c:7e:55:f7:e8:6c:7e:1f:59:c4:e7:3d:6b:a4:
b7:22:3d:4b:46:09:e4:ad:5e:79:94:c7:5d:82:c1:
50:12:01:fa:ae:86:bf:c0:a4:c3:6d:b9:c8:81:e3:
93:97:cb:df:6f:3f:46:74:ed:9c:e6:cb:63:41:af:
b5:f0:9f:16:5d:bd:fb:91:28:86:78:ba:b8:c0:39:
0e:5e:56:eb:38:b8:83:6c:6b:88:5d:03:66:ed:f9:
ef:3c:ae:ee:4c:b6:01:df:85:1a:d7:51:e0:c7:3c:
6e:1d:ec:5b:c0:66:c4:d2:a9:62:6d:81:d5:aa:22:
4e:71:15:cb:d0:b4:d1:5a:85:d3:3e:2a:b3:5b:8c:
b8:1d:28:c6:fa:3a:5d:34:38:47:7f:91:1e:5b:36:
11:70:86:36:1d:a3:ec:f8:6e:09:7c:9a:57:fb:a7:
d7:53:85:24:7f:9d:46:f1:71:b0:c6:6a:72:f1:a0:
1e:fa:96:55:4a:21:67:ed:5d:a7:87:d4:5f:00:4d:
fb:ae:c8:77:9e:a0:93:88:55:26:45:39:82:50:ed:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:E8:9F:D6:86:6B:53:9A:9E:29:57:4B:20:EC:06:5A:97:F2:D0
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3c:4c:d0:ce:06:df:c8:7b:7b:e8:b5:d6:a1:96:6d:6a:4d:
9f:ac:0c:a2:9b:a1:91:71:13:e3:f9:b3:d3:9c:21:c1:38:3e:
9b:93:92:34:d2:fd:8f:b2:57:79:e1:e1:36:69:b7:b1:6e:05:
06:88:6c:3b:cd:f8:12:c8:8c:a6:59:fd:af:b1:ab:f8:c9:04:
3c:14:0d:0f:50:5f:19:ca:bf:13:7e:f8:04:08:6c:0c:98:18:
71:68:d0:b9:ae:f0:28:3e:b2:87:1b:c7:57:61:1a:4c:3a:40:
a6:5b:2b:f7:07:05:d7:45:f2:27:e6:c9:54:2d:36:10:58:5c:
d6:93:49:80:a2:66:9b:d0:60:39:5e:69:2b:64:05:6d:59:a6:
47:41:ab:07:04:63:c9:b4:ee:9d:3e:85:12:6c:3b:52:31:5e:
98:63:62:b6:2f:ac:f3:58:2a:78:ed:1b:e0:99:ff:85:9e:51:
ca:9d:88:5b:a2:c5:3c:ef:6e:0b:9a:79:e7:23:82:c7:c3:32:
85:be:0d:82:d7:e2:81:84:e7:d2:f4:09:ff:8f:53:cb:1c:43:
a5:79:07:26:fc:fb:7a:fc:d5:2c:7c:c2:f4:32:d3:d3:54:96:
40:7e:a1:65:a9:32:e5:c6:5f:5a:8a:f7:f6:10:9d:6e:86:0d:
af:09:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:48 2025 by rpki-client