Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: izb2QPk7xlt0Q5qov0ajz9NppuwuTuubqovDwetTc6c=
Subject key identifier: B1:51:46:3B:B8:AF:6E:78:CF:06:F1:73:74:4D:BC:76:65:B7:CB:1A
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 019A4EF41514392D2099DF10CEECAED4A062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0DEE
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: CT1JDpMDKqigCTrdqWaywwYgSxV7q++x/8WHau/vRDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:15:14:39:2d:20:99:df:10:ce:ec:ae:d4:a0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=b151463bb8af6e78cf06f173744dbc7665b7cb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:40:eb:71:3b:02:a6:2c:2b:db:a9:13:81:
69:e2:98:de:33:e5:62:b1:c1:4e:2d:21:50:6d:88:
ab:d7:b8:eb:01:b2:ed:98:27:d7:e1:fc:c2:a4:92:
9d:9f:d1:2e:66:40:b5:30:0a:33:7c:9a:59:92:77:
38:f0:10:98:0e:3d:80:8e:2e:fd:2f:1b:11:84:d6:
13:97:7a:39:da:19:2c:7f:86:47:20:30:96:7f:06:
3c:e2:b7:9f:5d:4e:6d:c7:c8:39:b5:9d:02:b3:dc:
16:3d:77:47:f4:00:0a:92:ef:50:ae:27:ff:0a:dd:
5c:77:f6:a7:d1:c0:7c:65:38:ce:65:54:6b:1e:62:
c7:72:6a:7d:fe:56:91:6c:67:8f:ea:66:33:2b:ef:
a2:c7:45:9c:20:72:0d:28:54:4b:f0:70:57:b6:48:
97:27:85:73:d7:ee:1d:f7:97:d8:42:8f:67:96:aa:
50:72:66:b5:7a:1b:bd:6b:f0:5d:12:b2:29:63:06:
28:d2:1a:ac:64:53:84:9e:28:a0:c3:e6:e4:d5:8b:
d6:fe:34:a7:87:80:1c:2b:af:fe:db:99:ea:53:3b:
74:3a:a7:39:fc:85:2c:43:ba:30:0e:22:34:54:8f:
36:ed:78:20:3e:83:05:34:e1:56:f3:99:5d:75:55:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:46:3B:B8:AF:6E:78:CF:06:F1:73:74:4D:BC:76:65:B7:CB:1A
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:81:95:44:58:5a:f0:93:bd:a4:e1:94:12:80:ce:af:17:99:
7b:18:29:77:8e:66:6a:a3:09:c5:ff:c5:ed:2b:a1:c9:aa:b8:
59:2d:5c:8d:94:46:24:fd:58:a0:a3:33:22:25:c8:50:b8:79:
fa:3b:e0:c7:45:db:4e:45:b2:a1:c4:3e:4c:21:5d:f4:3c:ba:
25:dd:0c:a7:ca:05:da:ff:03:4f:28:93:c4:a2:6a:39:20:da:
19:b5:06:bc:db:6d:ec:3a:6b:af:fd:d9:4c:84:9a:51:c7:02:
59:d3:64:09:2d:e2:6d:27:25:e2:72:2b:80:81:3b:e3:6b:a7:
77:17:10:e5:53:a7:e4:f9:25:3d:43:9b:97:6c:1e:a1:4c:0f:
97:1f:37:af:dd:cf:b1:15:98:e3:6e:1a:d1:4a:45:16:bc:52:
e8:4c:21:11:3b:d9:0b:d5:bf:3b:d7:37:1d:60:6e:58:7d:11:
6b:54:64:fe:a5:9f:17:00:9a:97:c1:ae:77:de:c1:6e:a8:79:
9d:48:ad:9d:80:02:12:01:64:ba:54:91:ac:dc:d2:5f:46:75:
33:5b:55:eb:2f:34:c1:bd:3d:4a:f1:51:f5:73:f1:a9:30:cb:
5d:33:9a:b3:45:42:26:bc:a3:d8:d0:90:97:b6:70:b6:de:c5:
72:62:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:34 2025 by rpki-client