Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier: cYJdcsd0bNlLVXaYc43oNd48kgbBYyb66idxjWolNOk=
Subject key identifier: DF:D3:4B:3A:04:FB:36:6F:CD:F5:3B:2B:68:E5:AD:DC:19:39:12:C4
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 019A4EF48DB5235B5C2B2E0E7F4AEDFA3895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number: 1230
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=)
2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: nDVaUScvpdq+TgwM8ezNl9ipsnE6GZfnEtlhujrD5WQ=)
3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=)
4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8d:b5:23:5b:5c:2b:2e:0e:7f:4a:ed:fa:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=dfd34b3a04fb366fcdf53b2b68e5addc193912c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:fb:df:e2:e8:4c:00:5f:a5:29:20:4f:35:
21:88:ed:a8:67:c2:2d:8d:57:cd:87:82:46:8a:6e:
8f:06:de:59:37:f3:84:c1:ab:3d:d7:b9:ed:78:c0:
34:b9:46:27:64:20:dc:dd:71:ee:f8:ec:26:e1:7a:
da:89:73:b2:29:3e:02:c5:f9:9d:ed:12:04:71:0c:
b7:f2:87:6c:5a:35:db:6f:ce:9e:81:d6:c7:86:6f:
35:57:44:8d:07:a3:c0:60:16:eb:59:6c:ad:80:51:
8f:f9:f4:e4:c0:f0:83:51:26:4f:36:94:0f:8f:61:
1b:64:b2:1c:e0:a6:cc:d8:55:f8:d6:e3:8b:5f:7d:
35:95:10:69:5a:6d:29:74:20:23:cf:8b:10:30:06:
ea:8e:d6:2b:37:47:5d:4d:99:fe:ff:6e:9d:b6:e7:
7d:c7:f6:79:86:e7:61:49:61:ae:1f:0a:3c:9b:51:
5b:07:b4:18:4c:d7:14:b5:4b:22:1d:98:f9:a5:19:
ce:73:60:25:51:15:fe:13:5d:10:49:f5:24:70:0b:
b1:b5:b9:a0:98:4f:ed:ed:0e:05:97:47:32:17:cb:
7d:47:19:2f:af:71:13:1a:a4:1d:b6:9a:57:bc:fd:
5c:e2:18:d0:90:83:a2:15:cf:c1:7c:b2:66:06:23:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:4B:3A:04:FB:36:6F:CD:F5:3B:2B:68:E5:AD:DC:19:39:12:C4
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:33:ee:22:34:ca:a2:87:62:78:31:6d:9f:f6:a2:a7:7b:fe:
42:81:44:33:ce:6f:c8:03:da:6e:f5:06:5b:78:dc:05:08:dd:
4b:4d:db:58:fa:97:a7:f4:ba:51:2e:25:66:14:a8:c4:18:3e:
ed:3a:5f:53:c2:1b:bf:a0:54:80:6d:6a:22:95:52:14:e5:ea:
67:f6:de:8d:a9:86:47:da:72:d1:21:a4:ed:71:46:61:0f:bf:
8c:3c:77:27:e2:d5:fb:e3:22:ad:c3:96:39:43:6f:da:d7:f7:
61:45:35:33:41:32:d8:77:ca:7b:1f:01:55:e2:e7:21:fd:37:
23:2c:4d:25:b7:37:90:74:f0:9d:ae:40:96:57:c2:ac:0e:7c:
5d:6a:89:b5:af:47:de:3d:07:1f:75:19:bb:97:9d:1e:01:9b:
86:a4:88:f1:07:36:8f:a7:ea:0a:b6:4f:37:d6:36:c5:7d:d5:
e1:a8:f5:43:15:32:90:e9:82:73:d2:1b:5d:7b:ed:7c:00:38:
34:2a:ef:69:40:df:b5:4d:5d:35:5c:87:87:ec:56:a6:c1:2b:
53:74:0c:47:e1:8f:fe:37:0f:37:09:c2:2b:10:2d:0d:13:87:
2b:c9:66:06:f0:a8:16:c9:38:62:30:ad:87:fd:8e:5f:af:cc:
13:34:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:56:14 2025 by rpki-client