Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: 5k5S9WjU66lOyu8ZpK+uCX2LH/wlyj5akfqjYSa4RWk=
Subject key identifier: BE:4A:D0:53:76:F8:E5:22:1D:6A:6E:36:A1:77:67:64:D4:80:D8:A8
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019A53763AB91DDE81ECF5BDDBC8F19B28DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 02B3
Signing time: Wed 05 Nov 2025 10:00:48 +0000
Manifest this update: Wed 05 Nov 2025 10:00:48 +0000
Manifest next update: Thu 06 Nov 2025 10:00:48 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: Sv65mjiJsksi4GusOyOiFLeYVuwxkKU3yDiZeZUgOfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:3a:b9:1d:de:81:ec:f5:bd:db:c8:f1:9b:28:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Nov 5 10:00:48 2025 GMT
Not After : Nov 6 10:00:48 2025 GMT
Subject: CN=be4ad05376f8e5221d6a6e36a1776764d480d8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:1f:a8:73:37:d7:f4:04:84:77:9c:75:2f:
04:30:a5:72:7c:ee:2e:87:27:81:8e:9d:2d:69:c9:
e9:86:03:27:0d:84:58:c8:91:cc:bf:7c:11:9a:55:
22:fd:b5:1b:0c:4d:d4:79:1a:16:29:7a:a2:12:7e:
d9:ce:b7:45:10:1d:2f:c8:26:6f:e1:b1:aa:ce:33:
9f:ea:ab:51:0c:f4:af:f5:ab:77:4b:c8:b9:ea:50:
d3:f4:31:8f:5e:52:2f:4a:e7:b2:82:4f:85:3a:55:
3c:fb:16:47:bf:f2:a7:bc:f0:e2:d7:94:2b:e7:63:
90:b8:bd:8a:2e:95:b7:68:66:41:0a:25:bc:8a:02:
13:6d:96:ab:25:be:cb:71:de:35:76:78:57:fa:21:
95:c6:e0:c3:87:10:13:45:b5:42:b7:ec:9c:8e:5f:
83:31:f0:8a:3c:3a:d3:1b:14:b2:7e:66:45:68:85:
81:5e:8e:a6:b9:fe:b7:f2:a3:9c:21:fc:61:40:7a:
e9:36:1e:dd:77:a1:22:d7:9c:29:99:19:3f:38:9d:
c0:9e:09:43:42:72:69:c6:62:ca:23:a2:3b:b3:ab:
35:4f:25:da:dd:12:e5:9a:c9:04:1a:82:dc:53:d8:
f3:1d:ed:59:32:90:5b:d4:ea:34:49:73:6d:be:ca:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:D0:53:76:F8:E5:22:1D:6A:6E:36:A1:77:67:64:D4:80:D8:A8
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:ee:54:4d:bb:0e:27:53:e2:85:06:4a:21:c8:8d:24:c4:
0d:92:76:e0:56:3a:a3:47:5e:0e:a2:75:40:b8:dc:55:5a:78:
41:5e:79:ba:84:22:39:29:6b:02:c6:e3:e8:e8:b6:38:c0:92:
45:82:02:02:8a:f5:43:1e:80:5b:59:bf:79:c6:e2:c7:20:62:
fa:6d:0e:4d:c6:e9:21:9d:df:58:64:e9:6f:24:ee:78:8d:e4:
b6:a3:ff:b8:f6:32:38:70:b5:a2:cb:79:33:14:3a:3a:51:c5:
fd:53:ed:5a:a6:a3:f4:93:93:d2:5a:34:f7:83:80:4a:cb:19:
a4:fd:f2:b4:f3:70:f8:46:5e:8f:4a:f9:ef:2f:7b:10:08:67:
d8:67:df:59:a4:1d:4c:61:e1:5b:1c:c3:d2:a0:c6:45:30:98:
9b:d0:b5:bf:2e:c1:1d:ba:93:01:12:25:37:0b:a2:28:25:9e:
48:55:ce:c5:a7:b5:89:44:a2:a8:30:36:3e:46:9e:bb:f0:f2:
3f:b9:0b:e4:f8:05:b8:29:52:ce:f3:12:59:52:f8:28:31:ab:
ce:dc:9c:16:8e:fb:03:34:85:fa:a1:ab:9e:95:25:8b:18:ad:
17:98:06:f5:ac:ce:3e:9e:cf:9a:85:bb:c0:15:6b:d1:da:11:
ed:35:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:30 2025 by rpki-client