Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File: gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier: FNlccSSTWK2CuST659WZiul6ZH1hy4/73xqmPTeEqow=
Subject key identifier: E8:1A:7B:10:E5:38:DD:58:0B:AB:3B:0A:33:43:AF:32:8C:36:29:EC
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 019A4EF4E49A1457709AC21ECD4BB7EF5D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number: 171B
Signing time: Tue 04 Nov 2025 13:01:03 +0000
Manifest this update: Tue 04 Nov 2025 13:01:03 +0000
Manifest next update: Wed 05 Nov 2025 13:01:03 +0000
Files and hashes: 1: M06N0gwo3JL6GFlpwhETdttP9PQ.roa (hash: JdKy18XjO1bCDj++PIiRzZGq0fdEiBKbHucnCQRbUms=)
2: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: K8vEjRkcNwWgzl2ZcBGZPjPaq8rHmCXvpI9+evuYYtM=)
3: l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa (hash: rnPxXzKtfkYxdX0ghFEuYclewjG7j4/p3CTTLzWXDi4=)
4: rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa (hash: o6BNzu4DD6yxBTs+9aSDottFhpX2sbKr1oEfAdwf4NU=)
5: wpH7An9OGaqDDHbjqAXOYrzTOjY.roa (hash: 2UBnZqOnnI+7jNrBotsNcwolkfZL1bsPGHesYmJ3hac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e4:9a:14:57:70:9a:c2:1e:cd:4b:b7:ef:5d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Nov 4 13:01:03 2025 GMT
Not After : Nov 5 13:01:03 2025 GMT
Subject: CN=e81a7b10e538dd580bab3b0a3343af328c3629ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:27:fe:55:57:3f:41:0d:18:4a:1b:81:6f:
c3:88:e6:8c:32:c6:ce:0d:47:5b:20:22:73:d2:d2:
34:cc:c0:ba:13:fe:8e:69:e5:d3:4d:af:74:17:57:
ed:f5:17:fe:96:24:a8:fd:fc:d4:1c:84:64:b4:19:
04:51:29:82:84:fd:9c:f9:f9:e4:55:57:8b:e2:66:
81:4b:84:77:9c:b9:7e:2a:b4:e9:81:9a:67:62:c4:
29:7d:62:30:59:5d:45:a6:e8:1a:d7:8d:d5:b4:5c:
f0:a2:07:54:22:71:de:cf:be:bd:ea:40:6c:0e:1d:
b4:c4:08:cd:f3:e1:d8:07:b9:0e:82:96:91:57:1c:
48:e2:a6:fc:04:e9:45:9b:89:9e:a0:0c:54:c5:2d:
a8:9f:21:87:47:22:12:1e:e2:3c:3c:8f:a7:50:7d:
87:62:ff:05:48:b9:10:f2:54:81:96:5b:9b:1b:aa:
d7:c9:ea:da:76:f6:6d:4a:df:86:08:eb:b3:fc:12:
92:1d:22:4c:ca:80:fa:20:61:d1:f7:84:1e:2c:35:
ed:98:ee:dd:cd:70:18:b2:06:19:1f:8f:8b:ad:91:
ac:df:c4:70:b0:ba:a7:b3:a9:f2:93:cb:ba:1c:1a:
4f:f5:b6:58:e2:e2:87:b5:f9:ad:02:6d:d0:32:b2:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1A:7B:10:E5:38:DD:58:0B:AB:3B:0A:33:43:AF:32:8C:36:29:EC
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ee:1f:33:4d:7e:b4:6e:97:68:d4:0d:11:fc:21:69:03:5c:
c8:06:bc:45:f6:49:0e:f3:0b:bf:9e:d1:1a:e8:ce:c0:88:a3:
0c:f3:22:58:0c:82:e3:2d:ee:1b:94:1d:a6:d1:af:cb:4d:a2:
ea:7b:30:1e:73:14:7b:03:05:b3:06:db:f3:aa:6c:cc:ef:b8:
df:7a:40:14:e9:b4:8f:36:df:0c:b4:8a:2e:cd:45:16:b5:0c:
2a:18:b8:8a:52:7d:f9:93:7a:ec:58:eb:d2:a8:95:49:cb:31:
fd:87:c6:28:67:0c:3c:61:a9:d2:f1:e2:e8:e9:c0:20:a8:3e:
70:dc:e1:af:07:9e:98:fe:7a:50:d6:af:34:c9:fd:27:4c:a6:
df:25:e6:14:6d:55:56:65:28:7c:58:82:5c:11:c6:af:44:e4:
da:ff:cc:01:b4:0f:3e:e5:6c:45:41:6c:63:ea:e8:90:49:65:
35:7b:3d:54:c9:2f:53:2f:5a:a8:40:0c:10:d4:7a:cf:97:9c:
1a:da:db:36:b1:aa:4b:f1:7e:00:f5:03:3e:9b:d2:63:8a:8d:
d2:73:e3:a1:5b:00:c3:80:63:ca:20:e3:9e:4b:83:ac:d1:e3:
98:25:be:6c:d9:62:23:21:09:e0:91:79:1e:4d:1e:12:5b:2f:
b9:b1:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:15 2025 by rpki-client