Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: y297o6BynWstLIIlEcp9M3cLWD60kAxH4a/q6I9OsT0=
Subject key identifier: 6A:61:C3:F7:16:FF:13:5F:56:8C:D6:D5:04:32:F3:16:2D:23:9C:52
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019A4D075F93B45E3D4BAD2FAF0F6B218220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 04:02:00 +0000
Manifest this update: Tue 04 Nov 2025 04:02:00 +0000
Manifest next update: Wed 05 Nov 2025 04:02:00 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: OijaGuLzdMw0btt4YKDxZedf/KhKMdXdgbVk50jj5k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:5f:93:b4:5e:3d:4b:ad:2f:af:0f:6b:21:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Nov 4 04:02:00 2025 GMT
Not After : Nov 5 04:02:00 2025 GMT
Subject: CN=6a61c3f716ff135f568cd6d50432f3162d239c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:25:de:a9:59:a7:51:09:94:dc:a0:87:c9:
f6:90:56:47:2b:04:19:13:25:ec:a7:20:a6:ba:b6:
02:99:07:cf:6b:e0:03:05:3a:db:4d:9e:c0:70:d0:
97:50:19:63:a0:50:a4:7f:95:05:6c:fc:c5:e6:74:
c7:56:cc:d9:14:c7:fd:a4:43:3a:6a:02:ad:f7:eb:
ee:19:40:9b:69:8c:10:e4:10:be:8a:6f:a6:99:97:
71:c9:f6:d7:99:7a:67:11:dc:46:81:73:47:a6:82:
f6:53:17:dc:ab:25:d0:aa:ba:bf:23:fa:e8:69:be:
5c:a9:99:d6:cb:8f:63:33:ba:0e:21:d3:61:ab:f8:
af:49:df:85:66:64:a7:9b:05:db:cf:9a:06:fb:ca:
a9:5f:28:d4:89:73:70:2d:5b:f2:2e:28:a6:fa:c6:
9a:f7:e8:9d:3c:c7:93:1b:38:1a:ad:9b:a6:8b:f2:
1e:f0:80:66:74:89:c6:d6:51:d9:6d:8f:d8:df:98:
db:3c:ca:da:a2:dd:b1:fc:4e:7e:43:d0:3f:3a:cd:
ff:22:44:48:d2:06:df:eb:ed:51:7a:71:5f:6e:04:
d9:dc:2b:8a:94:bd:2b:fe:8d:80:68:cd:89:0a:b9:
3e:aa:d2:6d:a2:9c:1b:43:fe:83:f6:d4:da:05:d1:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:61:C3:F7:16:FF:13:5F:56:8C:D6:D5:04:32:F3:16:2D:23:9C:52
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f7:7f:65:d3:0b:74:53:c7:56:0e:c4:5e:20:88:e4:c5:83:
9e:a9:28:18:d3:78:92:45:1c:ad:13:5c:c6:fe:2f:0a:18:c1:
51:76:a2:8d:02:80:8b:06:16:7c:e1:5f:05:6d:43:4f:16:3e:
f1:a6:24:5d:ed:ea:5a:3f:64:da:7e:30:95:94:7f:2a:f6:82:
70:6f:af:e2:b1:09:05:85:ef:a2:0d:dd:24:c2:05:24:9b:16:
bd:e4:e2:69:1b:58:5b:ff:4d:2a:f8:e8:b0:7e:6c:3f:f0:7f:
9d:d9:b5:56:0e:9c:9c:a3:53:ad:7c:9f:da:90:fa:28:2b:73:
00:cb:ac:a4:db:b8:63:8c:b7:b6:b1:d4:c7:0f:cb:64:e7:91:
11:6f:c1:45:62:d0:3b:a4:bb:13:7e:ac:d5:bc:87:a8:0c:c4:
da:69:0a:87:ef:56:73:5c:c1:a2:b4:60:76:4f:e3:71:41:3f:
52:47:e1:f3:46:db:43:f4:8e:67:b2:bd:03:3f:36:a7:38:f1:
ef:1b:99:b2:34:8a:a1:0b:d5:cc:5c:cc:83:53:12:41:7a:47:
01:95:fe:fc:20:01:b9:2f:e1:4f:70:7b:ca:71:6e:71:02:c0:
5b:f0:37:8f:ac:d1:0a:f7:87:4e:32:a6:4d:4d:6e:91:d8:cb:
78:84:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:31 2025 by rpki-client