Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: 6FiL3lM3WDM8ungzqNdmFkofFEc4zFPLtWu4bBaZYoE=
Subject key identifier: 61:87:D3:88:EA:F6:0C:AA:3B:85:08:8E:EB:FE:83:3E:CC:85:83:3D
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019A503E2DD65AE99251CAAD8A6FF1EE61BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:43 +0000
Manifest this update: Tue 04 Nov 2025 19:00:43 +0000
Manifest next update: Wed 05 Nov 2025 19:00:43 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: /wD6SLDHpW+v+1Z/eVU/bpTpjfnliRTsxX81MdEN1yI=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:2d:d6:5a:e9:92:51:ca:ad:8a:6f:f1:ee:61:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Nov 4 19:00:43 2025 GMT
Not After : Nov 5 19:00:43 2025 GMT
Subject: CN=6187d388eaf60caa3b85088eebfe833ecc85833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:83:8d:38:98:45:7d:68:e9:dc:78:ee:37:
3d:73:a4:59:4e:ec:56:96:72:80:af:c5:9e:3e:37:
96:34:03:dc:21:3f:12:c0:80:af:4e:26:80:4a:69:
bb:93:dc:e6:42:b9:d3:95:30:40:ba:83:5c:b1:4e:
57:f2:e0:d1:cd:29:0f:99:e9:c7:5f:f4:1c:c7:85:
2d:c8:c2:14:35:eb:c6:94:a1:b7:d6:e7:1e:fa:b8:
e1:42:56:a8:66:8c:22:fb:ab:be:ee:a6:4b:b5:3b:
35:6c:87:4e:ff:dd:92:db:d6:ce:95:f2:4e:7f:3c:
b5:4c:54:ff:d3:63:06:8b:ff:bb:ea:36:d9:34:40:
d0:3c:b1:8d:0d:e0:39:86:94:29:69:5b:12:0b:c3:
c9:86:48:7e:9e:72:fe:67:46:8f:c4:64:27:5e:a2:
12:a3:53:ef:4a:b0:51:18:96:e8:bd:1e:2a:7a:bb:
a4:64:0f:d1:6a:bb:57:de:e4:64:01:3a:b9:33:be:
ff:ac:13:8b:0e:fc:38:e2:2c:18:c0:0a:6a:7d:63:
c8:bd:0b:1f:ac:e2:be:40:85:0c:70:22:58:98:da:
48:b8:43:9c:6f:a5:3f:ba:2b:0b:d2:c1:cd:d3:d6:
42:c6:e6:65:a9:78:99:42:4c:34:6a:ce:2b:6c:a9:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:D3:88:EA:F6:0C:AA:3B:85:08:8E:EB:FE:83:3E:CC:85:83:3D
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:79:58:74:a4:2a:66:f3:17:5b:f9:72:a7:a1:c7:c5:5d:d5:
59:aa:9c:54:ad:f7:74:52:c0:5d:9a:50:13:a9:e2:2a:55:e6:
5f:e3:36:16:7f:60:eb:2a:26:ad:6e:70:12:0b:63:ea:f9:bc:
c3:ee:d8:9f:00:9f:d4:7a:14:69:3d:49:b0:a4:d1:4f:0c:56:
0e:e0:b5:52:15:7f:d7:9d:ce:9a:4f:e8:8b:90:38:43:71:eb:
9b:c5:7f:54:56:7b:56:3f:38:e0:51:06:30:5b:e7:30:56:99:
c9:35:db:b4:cd:75:63:49:59:c1:95:05:f7:3f:e2:25:77:e5:
94:34:74:14:63:0d:da:72:aa:12:fa:b8:df:11:1a:2e:3d:0e:
43:43:bf:be:72:40:c6:e5:ae:f1:23:32:5a:f9:bd:fc:ea:e9:
90:c0:9d:67:fb:dd:fc:4a:3f:84:d1:88:b5:0f:1b:ee:76:3f:
4d:69:0e:bb:db:13:0f:ff:68:a3:95:47:37:ed:8e:06:99:87:
68:62:a7:60:25:33:4d:a4:ab:25:ff:2c:f5:de:cc:20:32:9e:
79:1f:1e:35:e1:f4:49:be:96:96:89:bb:39:ee:5a:53:fc:37:
a2:94:62:12:9a:01:b9:c0:af:04:45:7f:c7:ff:32:3e:74:b6:
24:bc:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:07 2025 by rpki-client