Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File: gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier: Ykf9sPOKG5T3KpRV1eBG2saVdGk88nHxUIaarsvjkVc=
Subject key identifier: 9D:5B:3C:E3:45:18:59:21:9A:96:09:F1:9B:A7:57:A6:EC:26:D3:5B
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 019A4F2B4CC8DFC1400EA82E9E3D7D6E7B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: 78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa (hash: dHUSFpGblHkPXU9NYMPaCtIz+bczpLlHXComKZfL/BA=)
2: FQcgCQcG__7aM5eRsupFU2EPhlA.roa (hash: xigvLo77r4Zkdva8w7DgHnMdwBCwRTMrZ+SBoUs6iWs=)
3: MfGfVoxcZRKcXeryJdrARrFNT30.roa (hash: NP17Awbv8VvBz7g9no++bSqGAeudeK0bPJQ8VG+ovrs=)
4: WD7CCMj1boEtISgVQIZGdGTenUQ.roa (hash: 4IOANIE3kXmhVP0/F3MzPDZJAgrgCHcPBEmcnYUkUzc=)
5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: wp8WKn0qVOYMe8DYc4DhWEn+GgpaONXwmSJm2NZvwA4=)
6: sjitqywkz9ufiQpRQwXHpL0dJPA.roa (hash: O1YNzqfVoGDW6rve4zWAx2oDjZ7sBc+TeGZe932UNgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4c:c8:df:c1:40:0e:a8:2e:9e:3d:7d:6e:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=9d5b3ce3451859219a9609f19ba757a6ec26d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:b1:5a:f4:f1:3f:bc:5d:a0:6a:e1:f0:b2:
79:35:8a:69:9e:51:c7:13:5b:13:ef:1a:98:9e:5b:
a6:87:f2:f0:ec:5c:34:c4:da:e5:cc:1c:5e:14:54:
67:3e:51:0d:97:8a:39:d8:88:ac:f6:2f:98:d0:b4:
98:c5:b0:89:01:26:e7:1a:83:3a:6f:55:d6:14:9e:
c6:54:6e:59:03:06:d7:b1:64:63:b8:a1:c9:86:a5:
d7:59:30:eb:b0:8f:b3:fc:ef:96:8c:5d:27:48:4b:
ae:b7:8b:32:c6:77:39:1e:7f:5f:1a:97:94:3f:c1:
2e:37:08:6a:3f:41:e0:11:81:b7:1b:e1:4b:72:8a:
99:e9:2f:d8:10:25:a5:fa:81:d9:51:12:eb:2f:e7:
ab:36:ab:1b:07:c0:c8:8c:29:d7:70:7c:af:aa:12:
b3:9e:8f:72:04:89:45:eb:92:65:35:a9:7b:b9:cd:
d4:16:e3:91:b5:57:af:d5:97:df:f2:17:9b:d0:48:
92:fa:ea:7c:58:68:3c:88:ce:0e:da:40:d2:b5:a2:
26:5c:10:73:e8:4c:84:37:3f:2c:16:1c:f9:37:ef:
a6:22:93:ab:22:82:e6:4f:67:c4:10:b8:b8:fb:33:
0e:d6:ec:a0:c5:0e:a0:bd:67:0b:71:38:09:29:9d:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:3C:E3:45:18:59:21:9A:96:09:F1:9B:A7:57:A6:EC:26:D3:5B
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c4:e1:e1:ef:2c:59:1d:cf:54:ad:2a:f6:f7:f4:54:75:f0:
89:22:d1:18:66:de:f6:c2:ef:6d:9e:50:73:a1:24:fc:ca:50:
52:ee:80:52:7d:be:6a:30:03:4e:dd:6e:47:37:93:cd:ae:89:
db:07:87:15:a9:d0:d6:88:a7:6c:70:de:90:f6:0b:9c:de:1a:
d0:1d:10:07:4d:a6:bb:d5:fe:a3:c8:5c:98:45:92:d5:80:36:
8c:54:73:9e:53:d1:3a:43:8e:70:85:9f:82:8c:e6:62:70:06:
52:ab:7f:ae:28:70:20:14:ea:99:a4:65:71:05:1d:a8:a4:ca:
7f:24:a6:0a:92:6d:20:1f:c3:5f:d8:db:fd:f1:69:c0:9d:34:
7f:01:98:9f:71:07:af:b0:29:44:30:1b:47:7c:a0:92:ac:74:
0b:76:16:90:68:3f:31:63:d2:0c:37:e2:a6:d0:48:d3:42:47:
cc:45:de:70:8a:88:82:62:a3:a0:8c:4a:c2:70:2d:d0:f3:01:
3a:a0:2c:e7:07:cf:94:4f:ff:35:61:b4:b5:71:fa:f0:c7:85:
da:dc:cc:25:dc:0b:a1:56:28:ce:31:3f:d1:10:3a:c2:80:0d:
1b:9a:a6:c6:0d:50:cb:33:d0:0d:8b:6e:17:a8:53:7b:1c:0c:
8b:c8:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:49 2025 by rpki-client