Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: JPUonsEFq75x38yVGifTxVm9pBt1A8sRmUGygO4S+1o=
Subject key identifier: EA:0D:31:86:AC:93:EA:6C:73:34:C8:0D:CA:E5:C2:6C:EB:14:69:85
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 019A4F2B3BE804F7992F1F1EE482A4CF7C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 13CD
Signing time: Tue 04 Nov 2025 14:00:24 +0000
Manifest this update: Tue 04 Nov 2025 14:00:24 +0000
Manifest next update: Wed 05 Nov 2025 14:00:24 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: rkoJbeUOe3R4q3sumPiaXAvohhGK7tBVzfLdg6Czb/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3b:e8:04:f7:99:2f:1f:1e:e4:82:a4:cf:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Nov 4 14:00:24 2025 GMT
Not After : Nov 5 14:00:24 2025 GMT
Subject: CN=ea0d3186ac93ea6c7334c80dcae5c26ceb146985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:56:d0:8b:e3:28:29:37:d2:67:12:d2:83:
96:21:e6:8c:74:c2:dd:7a:cd:5e:a7:55:1f:d3:7e:
f3:ef:ad:36:a5:c7:0a:e8:72:32:87:1c:99:25:29:
63:6d:af:22:28:5f:93:85:f2:ee:ee:d0:d4:0a:d5:
14:d2:77:1b:e6:7d:85:9f:75:6d:a2:92:3d:d6:c0:
db:fc:89:cf:7e:f0:c8:71:1c:c1:cd:8b:1a:1f:f1:
a8:22:33:d3:96:1d:31:cd:22:9f:1f:b9:0e:2c:68:
a4:77:bc:9c:86:ee:ca:84:00:bc:e9:ad:43:c3:1f:
e1:48:b9:76:79:9a:04:7d:f8:30:92:05:ee:7d:4c:
a0:0f:2c:71:7d:01:45:99:a4:9a:06:b8:54:57:74:
31:39:f7:ab:88:8a:32:22:74:29:a8:61:d1:81:eb:
23:df:79:bb:49:f7:11:6d:fe:0b:73:f5:76:1d:fe:
45:98:ea:97:34:25:da:f3:55:10:ff:43:ac:58:5b:
36:04:d7:70:a7:f1:98:e6:7e:f3:e8:9d:b1:2c:ff:
0f:a8:a6:67:3c:4b:ea:e5:97:22:7c:09:34:53:a2:
59:de:69:57:e5:f0:32:bb:3c:b9:f9:c5:04:60:14:
4e:bd:d2:2c:06:60:04:b6:29:9c:df:c8:29:8e:c6:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:31:86:AC:93:EA:6C:73:34:C8:0D:CA:E5:C2:6C:EB:14:69:85
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:d0:31:d4:50:21:ee:c5:a7:d2:dd:19:77:77:db:a9:b6:
66:6b:4b:87:95:59:1f:a7:09:fe:4f:61:27:55:3a:ce:19:eb:
62:53:fc:bd:8e:b0:99:86:3b:08:f2:68:98:96:89:74:b9:df:
ff:8d:8f:e5:e8:7a:9e:a4:e9:c9:68:cf:dd:7e:34:9f:4c:05:
98:32:5a:e0:a6:2c:d3:43:93:4c:bd:96:bc:17:97:b1:b4:7a:
10:44:dd:a8:6c:4d:bb:fb:a8:ad:bd:65:47:37:27:9b:c2:2f:
0b:9a:9b:44:65:08:d1:17:f5:2c:08:02:a7:56:dd:61:a5:4f:
6d:b5:15:56:9a:07:6d:d4:e2:a0:9a:d2:86:13:17:6d:bc:9a:
8d:4b:41:11:ac:40:16:cf:9a:ee:43:da:f3:a8:a6:6e:06:b1:
21:6a:a2:56:c6:7b:49:eb:2a:0f:5f:a3:9d:18:e1:80:a1:eb:
84:8e:cc:73:97:62:17:02:ac:25:16:47:50:3e:c5:a7:53:64:
ad:0f:85:91:9c:31:87:73:8c:9a:fc:56:5e:e2:ee:22:ea:17:
ac:87:db:04:f8:ab:2b:3e:4f:3c:4e:0f:6d:9c:05:a0:44:ec:
46:15:8d:dc:02:b0:86:a3:c0:c2:41:d1:4f:20:24:73:9a:9b:
5f:33:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:58 2025 by rpki-client