Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: bimZxhDpehmbUt7gxwS7FOhCRalP+YZIvPelonQSuow=
Subject key identifier: 88:07:3F:44:E2:25:A9:A8:05:5E:57:A5:A5:C2:78:BF:F6:B7:10:1B
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019A4F2B71BA1F3C9176C875EFB7FC340162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0868
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: U15Qt1jB_OrSJnk2-GsuZxl_HGg.roa (hash: ViBEGhLSRDySzjvRDBVQx2K1SB4Zl4Aix1chhJ6C9AM=)
2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: o2lEzsn6FPJlWlzyYhjTYYeHfs0QxjtN4NUgzXw5OIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:71:ba:1f:3c:91:76:c8:75:ef:b7:fc:34:01:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=88073f44e225a9a8055e57a5a5c278bff6b7101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:15:54:7f:6f:7e:6d:b7:e8:ac:9d:f8:45:
e8:03:d6:d7:d2:84:13:05:18:9d:a8:54:8a:c5:91:
8c:bf:c3:30:41:e4:d3:20:4b:62:16:5e:57:de:e7:
a9:d9:3a:bc:71:57:30:74:b2:b7:22:a4:d4:23:6e:
0c:11:cc:c9:85:08:d9:63:8b:8e:63:4b:c1:43:9b:
47:ae:09:e9:1d:49:86:22:18:57:8d:07:c6:5e:6f:
bd:27:1d:c1:f7:8d:0c:ef:71:76:a6:4d:01:7d:5a:
9d:3d:62:f9:13:0b:18:08:54:e6:cc:64:c9:5f:eb:
be:65:41:43:a8:7e:70:77:32:29:70:e0:9b:62:8e:
cc:27:34:d1:6a:6d:75:20:ae:06:8b:3e:5b:1a:2f:
60:b3:ec:6a:8e:27:6c:ef:a5:8d:90:75:d2:fe:8e:
d4:1f:69:79:64:0f:4c:d1:5b:15:32:33:a2:97:be:
6e:b0:0d:8c:2a:fb:93:18:d3:2d:52:ff:c2:a6:db:
57:55:1e:c2:d6:76:5d:46:f4:1c:5f:b6:27:ad:82:
64:81:b8:96:04:d0:54:07:a3:ec:5e:5e:8e:ee:50:
ab:3d:1d:89:79:23:bc:46:eb:1e:85:ae:a6:bb:d6:
7d:48:db:6f:d6:68:d5:cb:11:e6:aa:14:99:61:80:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:07:3F:44:E2:25:A9:A8:05:5E:57:A5:A5:C2:78:BF:F6:B7:10:1B
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f0:bb:91:44:97:1a:5c:9a:40:b6:b9:b9:29:f6:4b:87:a7:
fc:b3:2d:4b:21:cb:b8:22:5a:c9:99:b2:2a:34:18:eb:bc:ff:
01:17:da:bd:a1:c0:22:12:2c:7a:a7:3b:0d:b3:81:95:3d:31:
32:5c:bd:4a:1a:89:08:67:30:7a:3f:41:9b:8d:89:a4:f6:52:
3a:c2:b6:7d:e6:2d:36:81:0f:e3:6f:ef:21:cf:97:9d:19:26:
10:78:4c:88:3d:d0:9b:a2:cc:1c:27:6e:3d:a3:86:62:dc:d6:
43:8f:91:2b:f8:da:47:6a:ef:dc:98:c2:06:5d:5c:64:1f:19:
4c:67:ab:9a:ee:64:d9:90:4d:af:a1:97:2b:fd:89:f4:dc:ba:
fa:0d:25:34:11:65:4c:2c:9c:51:32:bd:41:a3:a9:9a:51:56:
f9:2e:0f:18:93:a7:6b:91:1a:5f:3b:82:6a:58:df:1b:dd:fb:
fc:66:c3:d9:25:53:e3:e3:3a:be:27:00:22:cf:63:62:57:c0:
14:91:d6:a6:54:7a:21:13:4d:85:12:7f:a4:57:4a:1c:02:27:
33:10:4b:02:aa:12:07:0a:63:cb:74:31:e5:d2:89:2c:06:46:
c6:fb:bd:0b:1a:82:8b:fe:75:e6:1e:cc:19:f3:ae:14:c2:6f:
cc:3f:66:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:03 2025 by rpki-client