Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: xbteaJ7rIwg3DpqBUMPaWUoB0+RpATGyKrFM9DcmUrE=
Subject key identifier: 48:D0:0B:86:77:92:C2:99:01:75:5C:74:E2:13:EC:E8:A4:4A:55:2C
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019A5299F8166F4B5A5EA00A1618BF5C93DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 021B
Signing time: Wed 05 Nov 2025 06:00:13 +0000
Manifest this update: Wed 05 Nov 2025 06:00:13 +0000
Manifest next update: Thu 06 Nov 2025 06:00:13 +0000
Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: 7IBP7aKkKnxNouUk7vVD8FMwkYThUyQMQNgUCy4bhhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:f8:16:6f:4b:5a:5e:a0:0a:16:18:bf:5c:93:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Nov 5 06:00:13 2025 GMT
Not After : Nov 6 06:00:13 2025 GMT
Subject: CN=48d00b867792c29901755c74e213ece8a44a552c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:cb:77:4e:9e:1b:37:63:67:64:6d:f3:b9:
4b:39:e0:01:b6:e3:67:b9:74:39:8f:c6:f3:37:13:
60:fa:24:6b:19:7b:79:30:46:ec:81:43:90:62:d2:
23:2e:3b:0d:03:0d:c6:0b:37:f8:82:42:33:54:ac:
71:a9:8b:06:bb:7a:84:24:3c:ab:be:55:4d:33:a2:
87:d7:10:63:05:65:32:68:55:b3:12:a9:70:42:5d:
7d:3e:ce:b9:32:55:e2:d6:88:b7:7d:20:5f:42:2a:
fd:73:37:95:cc:99:3b:72:50:06:1d:e3:21:9f:79:
d0:70:3a:55:6f:a2:5f:f6:68:27:5d:19:33:6c:bc:
da:6d:95:e2:30:77:02:95:5b:5d:56:1e:3b:f5:39:
a3:e4:d9:62:10:e9:b0:c7:6a:5a:30:5a:8a:f3:cb:
b1:76:f8:85:a2:43:62:fb:b1:4b:a0:9f:63:7b:e9:
ed:99:5b:34:fd:11:92:1c:02:80:1b:9d:cd:de:15:
18:15:8f:fa:7a:af:df:2e:0d:c4:c4:dd:69:c6:0b:
63:d6:94:fd:24:51:22:1a:9f:9e:78:e5:bb:3b:88:
2b:2a:3a:28:85:09:a9:d9:9b:d8:af:1d:e1:70:cc:
45:af:30:55:85:2e:4e:89:bc:86:b9:e2:fc:1d:af:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D0:0B:86:77:92:C2:99:01:75:5C:74:E2:13:EC:E8:A4:4A:55:2C
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a7:63:cd:f1:99:61:17:e7:b6:c0:8f:06:85:ca:32:d8:0c:
8c:81:92:96:a0:28:9d:1f:6f:43:c2:41:2d:37:fb:af:ff:c9:
f6:b8:c3:70:f9:f2:3e:51:e1:04:16:a5:9f:78:7c:68:b4:2d:
2c:eb:81:f7:e4:1b:02:34:68:b6:e2:33:e1:c4:44:f9:af:43:
9c:7d:f4:90:77:10:df:68:f9:59:0c:ef:5c:5b:e2:cf:7b:9a:
25:ee:fc:3c:a3:41:a6:2b:c5:19:dd:2b:d9:ae:bb:3c:25:f1:
c6:c6:42:5f:ed:3a:72:e2:fc:5e:de:9c:fc:32:d2:e4:1c:30:
b1:0a:24:2c:9c:5f:ed:9d:25:52:55:06:26:4e:35:91:5a:91:
46:3a:a3:d1:fd:38:e4:64:c8:12:c5:d6:25:8b:74:84:36:55:
d2:83:5e:be:98:4f:04:bf:96:19:8e:a8:c9:04:a8:d1:e8:fa:
94:d0:95:b8:95:a1:ed:3f:13:ed:33:1d:86:5c:fe:a0:b9:c0:
eb:b9:87:67:bf:d5:d3:c2:45:f7:e1:b2:99:ab:8f:e8:16:c6:
08:df:b4:45:13:43:38:5f:bd:78:c6:24:86:8f:a2:17:5e:d9:
21:91:5e:9f:0a:05:ae:9d:18:7a:2b:ad:fc:da:25:d1:51:cf:
c0:63:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:09:46 2025 by rpki-client