Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: 0tuz0Kr8gKohZq6KGfWIiAFo77XUj8B/myqeW4DNGU8=
Subject key identifier: D1:3E:A7:A9:BB:FC:6E:46:1B:C0:8F:04:01:5F:C0:B8:87:11:97:64
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019A5150D814240806150163229C2F934CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 13AC
Signing time: Wed 05 Nov 2025 00:00:43 +0000
Manifest this update: Wed 05 Nov 2025 00:00:43 +0000
Manifest next update: Thu 06 Nov 2025 00:00:43 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: 2PMGmVXTPkq1XjYezQH1/wtShxQ92V2bOl23Q8LQ55I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d8:14:24:08:06:15:01:63:22:9c:2f:93:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Nov 5 00:00:43 2025 GMT
Not After : Nov 6 00:00:43 2025 GMT
Subject: CN=d13ea7a9bbfc6e461bc08f04015fc0b887119764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:40:01:ae:52:dc:4c:1e:d9:ba:ea:df:5b:
9d:24:36:3f:49:1c:fe:b3:fb:25:ba:58:31:58:0f:
83:0a:27:a7:2d:a1:96:98:65:8f:10:d0:c3:f3:08:
dc:97:a1:7f:29:3f:df:28:d5:1c:06:bc:d4:bf:d9:
dc:d6:6f:a9:be:b8:21:b4:08:77:dc:59:9b:61:0a:
96:c6:c2:60:a5:75:f2:22:e4:02:49:75:e3:64:08:
8e:ab:73:06:44:dc:54:57:c2:f4:0c:50:86:c8:f3:
11:ca:08:be:45:b7:eb:7e:6f:c2:d4:c0:4e:34:ab:
70:6e:ff:70:cd:b7:7b:15:e9:77:f2:f5:e1:f1:a2:
2a:47:3a:ef:03:48:9d:4b:8a:61:fd:02:d1:a2:16:
a5:a2:43:91:0b:13:1c:07:06:ba:3d:11:af:eb:19:
42:12:c4:eb:c8:fb:24:20:93:0e:2c:5a:d2:bc:15:
8c:22:30:27:42:75:92:a5:3f:60:bb:33:65:71:6d:
88:8f:a2:5b:a3:30:0a:2a:34:7a:64:4f:e2:06:bc:
78:b6:88:cc:75:a1:0c:f1:51:cf:43:15:e4:77:7b:
15:fe:f1:53:a1:ef:5b:ca:db:d6:e7:22:a6:f3:06:
f3:db:53:13:0b:7d:4a:45:bd:62:d5:c0:b4:87:95:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:A7:A9:BB:FC:6E:46:1B:C0:8F:04:01:5F:C0:B8:87:11:97:64
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c0:73:2e:35:8d:55:8b:58:7a:30:31:34:52:e1:1c:af:90:
a6:2c:82:75:91:6b:d8:09:6b:d4:9a:ef:11:35:8c:f9:8d:d1:
b9:17:60:58:e7:b9:9a:23:45:6e:97:f3:2d:ec:77:ad:de:33:
31:ec:53:d9:cf:50:a4:06:fa:ad:cb:cf:af:3a:66:a1:a5:a0:
da:f3:89:ad:67:a9:9f:6c:98:c0:04:66:f6:bb:d0:2e:bf:89:
0e:4a:27:ad:24:61:12:9d:48:14:15:81:8f:97:cb:ae:d5:e1:
3d:a9:2b:28:7c:6a:61:f4:81:11:e1:24:2d:82:f9:79:c5:ec:
8b:a6:4c:df:ef:83:2a:bd:3a:4e:b8:3d:50:6d:da:13:fc:d0:
fa:f9:a3:6b:5a:1d:7c:08:e4:20:a6:39:42:72:ad:a1:2b:3e:
04:19:f7:5a:b3:4a:d5:31:6b:9e:8a:cb:b7:b6:ca:01:b4:9c:
fc:00:44:67:2b:73:95:87:4f:3e:0b:da:75:3b:f9:13:b3:52:
8d:8d:b0:66:bf:7f:5c:1e:84:37:06:66:ca:8e:fc:0f:6a:48:
ec:66:23:8f:17:40:b0:20:cb:08:a4:87:9b:18:ea:42:51:50:
11:6e:6d:7f:3c:a8:d5:27:19:ed:45:4c:b9:fe:d8:90:65:30:
cf:7c:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:51 2025 by rpki-client