Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: HwyihaG61LQg0kYgRjxWGStTAjTbfV42wZQuTEgaOKA=
Subject key identifier: E5:2A:3E:9A:2A:10:09:AA:ED:49:EE:56:8A:3E:70:B7:11:2C:17:1E
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 019A4EF524B4A49EEBB5BF4CAA533ED9B5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: AmelZSedwnhH9vfmWaxXpdVa0azQM/bq9CIQCmt/T9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:24:b4:a4:9e:eb:b5:bf:4c:aa:53:3e:d9:b5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=e52a3e9a2a1009aaed49ee568a3e70b7112c171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:aa:c0:17:08:1e:a3:a1:ca:aa:2e:36:80:
d0:01:90:e0:58:0a:c0:f8:be:84:52:28:6f:44:da:
92:64:ea:e6:ef:fa:2d:a7:41:3a:3b:4d:aa:00:12:
db:47:ee:e3:7e:d5:72:3a:8f:27:83:24:28:02:81:
1c:be:3b:f3:44:54:66:33:74:0d:8f:ef:77:93:89:
34:84:b8:43:79:99:e7:89:b0:ff:8f:38:b7:48:af:
aa:86:2b:21:b6:50:2c:68:3f:2e:6b:4c:7b:f8:f9:
2c:9c:7f:c5:f5:89:3e:dd:88:2b:36:16:59:e7:b4:
2f:ed:a3:7a:72:08:39:c0:79:6f:ea:d8:11:80:01:
41:ed:f4:50:1d:87:1c:b8:15:5f:d7:10:be:23:02:
a3:e4:ed:8a:b2:9f:b4:75:47:7e:77:2a:61:ca:0d:
e0:ae:0e:5b:39:a2:db:4c:45:6b:88:63:d5:ba:6d:
1a:91:31:a8:b1:58:7a:8f:f4:84:4d:36:f9:4a:00:
19:90:95:cb:89:bd:70:a0:ac:01:ae:e9:6e:f8:1a:
ed:ee:6c:e6:aa:85:c9:26:6d:af:d5:36:89:36:d9:
c1:97:05:cf:78:80:87:b2:37:19:12:f0:42:55:12:
60:c1:a8:8e:ac:c9:38:e9:7d:f6:ff:7f:31:3b:ed:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:3E:9A:2A:10:09:AA:ED:49:EE:56:8A:3E:70:B7:11:2C:17:1E
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:f9:de:42:91:de:59:b7:1d:99:3c:d7:a3:7a:8a:11:e9:
41:04:f7:fe:15:52:a4:10:48:10:4c:c8:36:e3:21:8a:e7:e5:
e7:7e:40:31:83:6e:6b:b4:26:ee:e2:17:3b:a3:bb:93:88:7c:
82:86:d5:2a:eb:e0:4d:e2:71:71:85:f8:a2:aa:0f:03:94:f1:
7a:ce:77:87:c0:04:be:82:e2:e2:c8:62:4e:af:8c:d8:60:8e:
e6:bd:cf:0a:be:c7:47:af:09:51:e3:91:89:2c:d6:59:b2:57:
31:f4:70:8e:83:68:91:1f:ac:c4:07:35:0b:1f:d2:06:7d:c3:
46:54:76:3a:8e:c1:33:bd:5e:0b:80:e0:95:e6:86:fe:25:7b:
ec:90:47:38:2f:ac:f2:25:4e:9f:ac:0a:ea:cf:cf:94:f4:5d:
97:b9:c9:ff:3f:d8:b6:b9:c7:8a:b5:86:95:6f:6f:b1:df:4b:
54:d1:83:70:06:54:2f:fc:42:c0:b6:4c:0a:34:43:a0:f8:89:
e3:61:3f:6a:03:de:f8:5b:11:72:5d:1d:8f:03:2a:bc:46:58:
83:aa:c9:98:23:df:43:34:b9:f8:da:7f:ea:1a:91:d1:4d:3e:
4f:af:ad:93:26:31:d5:a7:34:1f:e2:ad:33:a2:b8:e8:02:02:
46:1c:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:14 2025 by rpki-client