
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: E2H94dsTGJrXR+KIUY7gvns1y30g3c+7RhdPJYSqncM=
Subject key identifier: 29:2B:D2:47:6D:0F:C6:6B:CB:6F:7E:73:82:6C:1C:61:6E:FE:85:DE
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019A507490E9EF3C83752C50EB10C01B50F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 07EC
Signing time: Tue 04 Nov 2025 20:00:07 +0000
Manifest this update: Tue 04 Nov 2025 20:00:07 +0000
Manifest next update: Wed 05 Nov 2025 20:00:07 +0000
Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=)
2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: 4CTvS4mCgeJs+HVzgej7ujH7pnY6wnUY7Lg/RixVOOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:90:e9:ef:3c:83:75:2c:50:eb:10:c0:1b:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Nov 4 20:00:07 2025 GMT
Not After : Nov 5 20:00:07 2025 GMT
Subject: CN=292bd2476d0fc66bcb6f7e73826c1c616efe85de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:51:e8:cd:8d:a3:17:7e:67:67:20:84:51:
3b:42:8c:5a:80:1f:9f:37:ec:5b:7e:3b:98:01:71:
42:c9:cd:99:93:71:58:c7:59:97:d0:70:69:71:2c:
09:f5:f2:37:b2:4b:79:98:f2:26:7f:06:c9:3f:fa:
c4:f8:a2:2f:68:e7:31:40:ed:0c:13:34:52:c6:9b:
fe:a1:e0:bd:33:7d:80:4a:6a:cc:3b:19:aa:97:c2:
d2:82:ad:ea:06:68:4f:98:df:0a:18:34:b5:49:ac:
37:12:ea:5a:34:6e:2e:41:12:4a:c2:38:99:97:11:
24:e0:a5:bf:04:87:1f:f7:e5:de:c4:d2:e7:ed:09:
62:3d:00:3c:60:27:23:01:4c:a8:fb:66:0b:5f:94:
d0:54:c7:98:65:2f:54:0f:24:d6:f9:aa:b3:8d:8e:
99:32:68:65:b9:54:73:00:ca:1d:7b:1c:11:59:36:
4f:59:1a:8c:93:71:fa:3e:21:25:19:d6:09:7b:76:
08:50:44:e1:1f:e3:4b:ec:26:fb:ff:d2:8e:8e:15:
07:f5:d5:74:21:92:96:8e:53:0b:4c:dc:c8:f0:b3:
b7:18:4a:8a:4c:ce:a7:5f:07:61:0c:8c:98:a8:39:
25:ac:3c:28:57:16:b2:73:26:2b:80:c0:97:db:92:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2B:D2:47:6D:0F:C6:6B:CB:6F:7E:73:82:6C:1C:61:6E:FE:85:DE
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c4:09:9c:50:e8:b4:c1:ae:66:91:6a:3f:33:dd:80:7c:6c:
90:cc:94:28:d1:a5:55:ae:57:83:4d:2d:30:17:5d:63:40:15:
c9:58:d4:0e:65:34:82:f6:a7:8d:eb:3b:70:1c:3b:7f:08:aa:
a4:ae:04:97:73:a7:82:64:e2:02:a9:2c:17:bb:b1:2f:eb:2b:
16:50:a7:b8:76:c6:7a:a4:93:71:cb:6e:9b:4b:32:6c:b1:12:
18:69:02:92:34:04:fd:59:8a:1a:2e:2d:94:5e:ee:e0:87:25:
70:ee:ad:0b:6b:32:03:dd:f8:45:61:d1:0c:78:b2:3e:b1:8b:
fd:b4:98:a1:1e:07:6b:6f:59:d2:8f:22:8e:51:91:5c:1f:24:
f2:2a:60:1b:99:8f:a7:6b:92:12:de:7a:e0:f1:46:8f:43:8a:
fe:de:26:04:81:2f:2b:ae:21:93:9a:c4:51:74:29:be:ae:16:
56:64:12:ab:5d:d8:42:1a:19:85:64:43:8f:d5:c7:0a:48:f1:
d2:ae:7b:f3:3e:17:65:01:31:bf:e1:cd:93:0e:a8:0f:b1:bb:
38:c9:54:e1:ec:59:bc:ef:7b:91:c2:d1:e6:ae:3a:99:11:a7:
b7:6b:a5:d0:06:cd:f4:71:6b:67:fd:e2:6c:35:f3:b2:03:59:
7f:bd:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:20 2025 by rpki-client