Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: dGtBIH0UzLdAYczOsUaYRkleM+Nn+RslCPb4sVuB0Vo=
Subject key identifier: 4C:D0:7F:C6:50:B2:1F:71:4E:EA:F8:F6:26:6B:98:11:FA:96:D7:16
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 019A533F6C1A43CF2EA0ADFCBFE82FBE4B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 029D
Signing time: Wed 05 Nov 2025 09:00:56 +0000
Manifest this update: Wed 05 Nov 2025 09:00:56 +0000
Manifest next update: Thu 06 Nov 2025 09:00:56 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: +OotdQn0YjsHCBFRB5MoPkbMYiHGgE+a0zfmBbXpIes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:6c:1a:43:cf:2e:a0:ad:fc:bf:e8:2f:be:4b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Nov 5 09:00:56 2025 GMT
Not After : Nov 6 09:00:56 2025 GMT
Subject: CN=4cd07fc650b21f714eeaf8f6266b9811fa96d716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:e7:29:72:53:d7:38:33:fb:1b:4c:74:a3:
39:53:0b:13:46:dc:dc:fb:42:34:aa:04:09:b5:86:
02:f9:0c:70:6a:44:84:32:8b:56:fb:13:50:f1:69:
f0:1c:49:8e:8f:41:20:45:05:b2:99:48:20:9b:4d:
bb:bc:88:4d:ee:3f:9f:47:ee:44:f5:9e:b6:7e:fb:
4b:f4:43:90:72:c5:d5:8f:51:97:ca:58:c3:6b:03:
34:95:35:00:2c:d3:d3:52:e0:5d:72:66:00:69:02:
8f:81:31:5c:f7:9d:6c:10:10:21:86:43:9c:d1:e7:
10:40:61:d3:1f:c9:55:d2:5c:71:53:06:4a:96:6e:
30:c6:7c:cb:11:a4:88:7c:77:5f:d8:a2:e4:2d:16:
92:1d:d8:44:fc:1f:79:29:00:e4:1d:01:f4:bc:a3:
13:69:c4:b8:c0:02:65:7f:8d:89:69:be:b8:39:b1:
d9:bd:d8:e6:b2:3c:4d:b9:95:5f:6a:3c:9f:1a:4b:
78:ec:d4:67:8d:e0:7c:b1:4d:45:bb:87:09:a9:1d:
31:cb:fb:b4:84:dd:7d:32:7f:9c:90:17:17:b7:cc:
e6:1a:97:12:42:d3:8c:da:cc:91:5a:49:2e:67:cc:
71:e8:8e:1a:74:63:68:d0:7d:6c:f1:f6:5d:8a:68:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:7F:C6:50:B2:1F:71:4E:EA:F8:F6:26:6B:98:11:FA:96:D7:16
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:f5:47:17:01:29:37:4a:74:2c:63:fe:cb:fb:b3:c7:c0:
87:aa:ad:13:6f:9d:8d:e9:c1:5f:ea:f2:e5:57:38:60:21:c0:
e2:45:59:4c:6e:57:f7:ab:b2:17:9e:92:a5:b7:46:e0:3d:dc:
79:6c:6e:d2:fb:33:4b:db:75:8e:0e:1b:22:5a:2d:24:c8:40:
7a:00:32:27:ab:e5:2d:ac:fd:29:4a:6b:a9:af:d0:34:d9:29:
8a:af:8f:ca:f1:69:e1:a0:6c:1d:28:84:68:86:63:2d:01:b7:
f3:ee:8a:01:21:e5:cf:a9:d7:8a:48:fd:3c:ba:d8:7b:07:fe:
34:c9:9c:59:57:41:59:3a:12:1b:a4:9b:96:6f:f7:b3:0b:db:
7a:14:0c:b5:ef:bc:09:5e:c1:d3:85:f6:2c:53:fd:59:af:fd:
4f:85:8e:61:72:b9:a4:06:23:b8:69:ea:61:d7:ae:94:95:e4:
a0:52:72:21:e6:3c:46:b8:c0:8b:b8:6e:4c:33:9c:1f:75:8f:
75:f1:f2:61:61:ef:e4:a7:f0:b8:5d:2d:af:4f:38:20:96:cc:
04:8d:d3:f5:48:f8:33:c1:2b:cc:98:17:04:f7:86:6f:75:15:
51:c0:99:b6:2d:61:1a:05:3b:f7:cd:70:e4:f9:b7:7d:84:69:
55:61:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:32 2025 by rpki-client