Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
File: gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json)
Hash identifier: htDHOg6uhh/k3pUwzWisexNrA53MnPnXSv/vKAuapds=
Subject key identifier: 9F:1D:46:3E:19:67:24:0B:5E:25:AE:96:AF:B9:96:9B:2B:FC:DB:7A
Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
Certificate issuer: /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Certificate serial: 019A4DAACC1FBC70445C667D56FDA4EDA126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 07:00:30 +0000
Manifest this update: Tue 04 Nov 2025 07:00:30 +0000
Manifest next update: Wed 05 Nov 2025 07:00:30 +0000
Files and hashes: 1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=)
2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: Ng84K1i7caerNjW5ZdFgPpfCZqb8SsWEU5po70p/RnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cc:1f:bc:70:44:5c:66:7d:56:fd:a4:ed:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Validity
Not Before: Nov 4 07:00:30 2025 GMT
Not After : Nov 5 07:00:30 2025 GMT
Subject: CN=9f1d463e1967240b5e25ae96afb9969b2bfcdb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:5d:b3:b0:d7:f7:c2:c3:5c:6a:d3:30:15:
e9:3e:63:60:40:b0:e9:f7:b4:61:00:9f:78:23:e6:
5b:e6:fe:ec:5b:bd:a4:88:2b:91:3a:d2:ac:37:52:
34:14:fe:b6:e7:1a:9a:2d:c0:d2:d4:dd:64:75:05:
36:63:ca:59:1f:88:8a:c5:d7:4e:90:f6:13:91:8e:
52:4d:93:16:85:b7:06:74:e3:3a:7e:e6:8e:9b:c6:
ea:3b:7b:f7:11:4e:5c:2e:3f:d9:46:fd:c5:d9:30:
e2:03:96:68:4c:03:b8:2f:f6:ff:e9:82:05:cf:8d:
87:e8:e9:30:1e:3c:73:24:57:10:ee:fa:33:6b:35:
b6:04:ea:c0:a6:fb:93:0b:3d:be:d4:2e:1f:3f:16:
5e:5f:58:b4:e0:c9:95:cb:7c:c7:9e:0c:e1:9b:f0:
2d:f5:de:e7:0c:8b:fa:e3:55:4a:8f:c0:e4:0f:0e:
eb:98:eb:b6:82:ca:81:a2:bf:29:8e:8b:92:ac:23:
11:55:57:26:17:9b:a1:47:58:6d:08:ee:26:d0:d5:
2d:64:1e:3e:62:01:da:7a:58:73:31:5a:2f:23:6c:
6a:39:d8:41:a1:6a:fe:48:bc:3a:88:d9:44:84:ae:
f4:3f:ac:12:b7:25:95:59:98:a1:1b:06:62:7f:53:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1D:46:3E:19:67:24:0B:5E:25:AE:96:AF:B9:96:9B:2B:FC:DB:7A
X509v3 Authority Key Identifier:
keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:90:9b:08:46:75:bc:d1:1f:d5:8e:0a:b1:b1:78:c1:5b:
61:9f:18:84:7b:e5:e4:43:33:49:17:0e:3f:91:49:58:4d:92:
4c:a5:65:48:1b:33:66:f5:1a:79:8e:4a:00:da:dd:1b:fd:95:
5b:82:05:08:26:10:aa:81:d0:0b:e1:ff:43:3b:b9:79:ca:48:
8a:ca:65:4d:24:d7:ab:2e:54:96:c5:76:09:3d:34:65:ad:dd:
14:77:07:61:f4:bf:cf:85:d5:0b:ac:a1:a1:b6:59:e1:ca:2a:
f5:ac:cf:b1:af:a6:46:e8:a4:c0:58:2c:c3:ed:e6:af:27:95:
0d:5f:8a:e2:84:a3:6b:05:e0:69:bb:bf:3d:8a:42:cd:32:44:
6c:cd:5b:fe:d6:dc:0a:71:2e:57:13:56:e1:6d:8f:43:39:a9:
d8:61:66:12:69:67:90:be:b8:81:b3:5d:cd:ae:ae:7a:b0:25:
b1:20:a8:56:81:5c:1d:95:f3:7b:2e:8b:8e:f8:40:48:3c:97:
69:5b:8a:2b:12:ab:f2:f1:68:e1:85:c6:88:b3:8a:8b:ae:23:
6b:e7:5a:4e:5a:56:93:49:f9:44:f7:be:f9:f6:fe:6a:80:0f:
51:29:b4:60:71:00:09:32:1d:f4:00:d7:d4:46:d7:7e:86:d9:
79:9e:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:58 2025 by rpki-client