Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: lcz/5lA7dy+0BXTP8Jb/TUbY7A7Fa8c1FhM+NJQB5IU=
Subject key identifier: 45:99:46:34:96:66:60:92:95:9C:F1:D3:1D:C5:07:33:A0:B3:66:3D
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 019A4DE2279E2C5379F4959FACC9A5612B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 100D
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: lnroY4a/Z+yTunfk2kuGbUHv8rdN1JjUmi3OhJgAIzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:27:9e:2c:53:79:f4:95:9f:ac:c9:a5:61:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=4599463496666092959cf1d31dc50733a0b3663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:7f:7e:60:83:d5:f9:ad:75:fa:85:21:30:
14:72:c6:02:86:3e:78:54:00:69:cd:ea:0c:bf:a8:
92:06:a4:8e:4c:51:c6:d6:90:4b:13:65:63:6a:d5:
31:2e:79:32:a0:76:3c:39:56:04:64:c6:1f:71:c3:
cc:13:85:55:b1:8c:7a:70:d4:48:79:41:f1:46:c2:
7a:55:b5:d3:ac:5a:b4:ac:23:0a:4b:35:b5:1e:40:
8f:ca:be:de:21:41:1b:58:80:0f:8a:59:9a:2f:00:
66:73:28:ce:96:5b:2f:5d:93:9c:71:3f:bd:3c:07:
53:97:91:27:48:59:9d:46:bf:17:7a:b5:32:c6:45:
f9:c5:a2:e0:d0:89:88:ee:51:92:fe:e5:cc:3d:a1:
e0:c8:68:c9:0a:09:dd:77:67:95:ef:b4:d6:54:c7:
3c:71:fa:d0:aa:55:7f:a8:d6:9a:f2:b7:d4:82:13:
df:56:3a:ac:e8:05:7a:d2:70:f8:49:5c:86:5c:84:
82:c3:e7:41:c6:f0:f2:2a:45:9b:0b:1c:3a:08:6b:
69:a5:31:f7:59:34:df:15:c1:94:54:67:42:88:aa:
c0:e3:34:31:a2:40:9f:c2:8a:c0:7c:42:3c:c9:5f:
53:af:8c:aa:60:78:4a:0c:24:83:42:db:17:e7:ea:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:46:34:96:66:60:92:95:9C:F1:D3:1D:C5:07:33:A0:B3:66:3D
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:91:94:e9:d0:09:b6:90:77:28:45:ad:3e:fc:6f:42:d1:
d4:79:59:fb:12:25:c8:fa:16:62:b1:70:b0:a1:fd:4b:4b:59:
b5:d9:0f:54:03:18:61:a3:b7:af:82:a4:3e:a3:8b:57:68:06:
cb:cb:d8:0f:6a:71:13:51:41:04:22:aa:76:9c:a0:07:ae:42:
e0:30:52:8e:8a:3e:87:17:a0:36:d0:88:65:08:83:43:3c:8d:
f1:a4:57:63:75:90:30:88:c9:ba:c1:34:cc:30:c2:d6:53:f1:
0d:0d:00:7f:45:f7:f1:3e:60:51:c0:f9:9d:60:ab:88:f5:64:
17:31:21:d9:c6:c9:1b:90:29:51:ab:1e:33:c7:9a:68:78:cf:
c5:6d:ff:22:d1:a9:2c:ad:16:fe:31:00:f8:5c:a1:65:96:14:
7e:e5:05:67:e0:2f:6d:b9:58:88:48:00:ee:6f:8b:2a:e7:9a:
65:ca:e8:2c:89:24:f4:d0:b1:08:7a:1c:21:63:f1:2a:3d:67:
29:91:06:83:62:56:81:6d:3a:17:03:06:ff:1f:e6:6e:a8:e8:
fc:f4:84:8e:9c:0e:5e:a0:8b:f4:9c:8b:e9:35:29:ec:25:3f:
e5:03:fb:e8:dd:0c:eb:24:36:93:af:2e:5c:4e:bb:4a:6c:28:
5e:0f:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:58 2025 by rpki-client