Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: EBrWb4fZRBvDCcGchGSKYyGRgP7dhlXIwIog8+4tGR0=
Subject key identifier: D9:3B:39:90:9E:A8:F7:6C:6B:1B:8F:E7:85:45:02:B5:8E:57:2B:96
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 019A4E864637F84EDB4C8337E48EB593C816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: t+yDFHk7/Ez7p6pQBt7xZyD3uyx7q9HWwco0IFkP6eA=)
2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:46:37:f8:4e:db:4c:83:37:e4:8e:b5:93:c8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=d93b39909ea8f76c6b1b8fe7854502b58e572b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:64:6c:0f:b9:43:f5:0c:fc:75:79:fa:ba:
be:92:2a:58:be:6e:50:35:a3:02:92:24:30:b9:d1:
45:5f:39:4b:cf:6b:76:52:9f:8e:e5:e1:a5:99:20:
3d:e1:42:85:e1:74:a2:be:44:35:57:ee:e7:68:2e:
2c:3a:d2:c4:16:94:27:6e:12:4d:a1:7d:f7:01:fb:
77:26:67:62:78:90:e8:10:e1:bb:ee:29:cf:a9:ee:
fe:74:ad:ec:80:3b:27:b7:c5:3f:b0:74:66:73:07:
40:6c:54:b2:cf:3a:6c:ed:b5:f8:dd:dc:e0:c5:a6:
8f:85:42:c7:87:16:96:19:6f:94:81:b9:bb:40:18:
7f:8c:05:8c:9d:04:19:0a:c2:8c:37:75:e4:d0:38:
19:cd:1b:2f:76:96:e3:d0:af:ea:89:05:0e:6c:58:
61:1d:78:59:82:55:46:73:cf:8b:9e:35:f7:e8:42:
35:80:43:09:c9:ad:90:9b:db:75:99:ae:46:92:6e:
ce:f0:56:3c:23:82:ef:68:d8:9a:5a:39:13:d4:1b:
52:43:7b:05:6e:23:ee:3f:35:42:c9:f9:fe:d7:b7:
08:12:96:2e:b7:59:5e:b3:fd:c8:20:a0:1a:23:9d:
c9:1f:57:ea:c4:bc:ba:6c:3d:7b:6c:ae:00:9e:5f:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:39:90:9E:A8:F7:6C:6B:1B:8F:E7:85:45:02:B5:8E:57:2B:96
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:99:b7:52:35:12:03:02:8a:0b:4d:b8:96:fa:8c:a9:4b:01:
53:36:19:d7:1e:4c:2c:21:04:4b:2d:2d:e1:3a:74:94:4c:0a:
30:be:c7:5a:4e:0f:be:af:10:a1:a1:02:68:7f:bc:ce:b7:6f:
50:48:0d:02:e7:4e:a6:0d:68:7d:6b:b6:92:c5:d6:d2:ed:2e:
1d:c3:5c:bf:3f:9e:33:3a:70:92:d3:ad:6b:af:74:7a:fd:c5:
1c:44:35:bf:fe:5d:cf:6d:3f:39:b2:3d:ea:cf:62:e8:9e:19:
93:22:5b:2a:a2:e0:ac:10:e8:56:bb:03:ab:6f:e0:ad:39:ea:
99:b4:b3:36:0e:89:66:20:81:75:ef:ec:a3:2f:8c:b6:bc:1f:
64:a5:5e:ba:7b:46:44:40:c6:1a:89:6e:7a:49:05:72:c8:5a:
af:4f:4d:2b:61:17:98:d4:4d:dd:4d:cb:fa:17:5d:40:1f:87:
ea:65:b1:6f:98:68:ef:70:ef:83:99:bf:5b:7c:d9:6e:55:e9:
5c:7c:56:e4:6f:ab:79:73:94:af:80:54:76:65:1e:88:54:a2:
62:f2:bb:71:01:90:5f:96:8e:7a:b3:4b:a5:b4:e8:05:14:86:
3c:d8:b3:96:bf:ec:6a:31:47:28:cf:ca:ce:45:b1:00:30:38:
78:d8:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:43 2025 by rpki-client