Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: 2It6HbChCQs8GYpusX95CpwRjOQDLSKsc0ZdpogauAs=
Subject key identifier: BE:8A:5A:F5:DD:BC:84:6F:F9:6F:C3:29:46:73:02:56:E3:A9:A0:0F
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 0199C532AB896D708D3E592D02189AB85813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0D34
Signing time: Wed 08 Oct 2025 19:00:56 +0000
Manifest this update: Wed 08 Oct 2025 19:00:56 +0000
Manifest next update: Thu 09 Oct 2025 19:00:56 +0000
Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: pAVRipN1SUa0FdX293ryBx9amOORYfbenMvMNNa2fUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:ab:89:6d:70:8d:3e:59:2d:02:18:9a:b8:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Oct 8 19:00:56 2025 GMT
Not After : Oct 9 19:00:56 2025 GMT
Subject: CN=be8a5af5ddbc846ff96fc32946730256e3a9a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:2a:c1:9b:8b:e1:1c:d2:7f:ea:33:51:8a:
d7:13:95:3b:9f:13:ee:0d:71:db:b2:48:bf:e7:c5:
37:75:7c:27:40:e3:0f:cd:28:4c:89:f5:09:35:5e:
2f:f4:85:f6:af:d3:52:9c:f1:a5:74:9f:c8:bb:d9:
10:e6:68:de:04:80:4f:32:51:15:4b:28:11:09:3f:
56:48:ee:bf:18:60:05:87:5d:da:22:74:49:a5:65:
ba:88:c3:64:ae:33:17:2d:3e:9a:12:35:48:00:66:
9f:7d:16:85:e6:e1:f8:c7:59:6f:80:32:19:6a:de:
5a:78:76:4d:a5:83:2c:82:35:1a:f3:bd:dd:37:99:
18:74:a1:51:eb:cf:9f:58:7c:fe:91:9e:41:34:ca:
5b:7e:aa:09:b4:e9:06:07:b7:c9:98:01:4d:4a:f0:
f3:1c:32:68:4f:47:4b:fd:89:dc:3b:e7:d6:e2:c6:
d2:50:0d:fc:7e:7b:b1:b8:5f:54:47:5d:62:13:24:
2b:58:61:c4:56:79:ea:c3:1d:36:94:a4:4f:f5:fa:
dc:e5:17:c8:d8:b9:37:36:98:ee:33:cc:66:8f:2d:
30:eb:a7:cd:b5:c3:e0:8b:99:d0:39:c8:f3:34:e7:
6f:02:62:a1:58:66:53:cc:bf:42:50:46:7e:b9:aa:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8A:5A:F5:DD:BC:84:6F:F9:6F:C3:29:46:73:02:56:E3:A9:A0:0F
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2b:a2:ac:60:4f:6c:1e:00:5e:1d:5b:8b:be:77:d8:9a:86:
7c:db:17:6b:14:de:ce:d0:0c:6e:63:0f:d1:cb:35:0c:3e:60:
54:2a:33:a4:59:1a:40:c6:ce:f2:46:ac:5a:65:8e:11:79:1f:
05:a2:3b:b2:31:ec:e2:0d:f4:a8:d9:1e:a6:33:63:80:af:0a:
34:32:f8:01:32:3b:bf:14:45:d6:51:41:b7:23:1d:ca:78:6b:
27:2e:9f:55:5a:b3:bf:b2:58:98:f3:65:ff:22:ae:d2:a0:4d:
fa:c6:4f:eb:99:26:87:30:99:cf:bc:91:93:fa:87:5b:09:93:
81:62:53:26:00:a6:fd:64:1c:a4:f0:1b:24:17:e1:a9:51:c9:
77:de:e7:f9:d7:18:74:85:e0:e2:47:85:2e:3b:69:d7:83:79:
42:8e:96:3e:a5:06:33:36:d0:50:d7:9e:96:26:97:02:6c:57:
02:6d:53:cf:e0:a7:8a:15:62:24:53:8d:15:e4:b7:02:27:08:
90:5c:ae:24:dc:46:6e:79:0e:d1:1c:26:9c:71:5a:07:da:eb:
23:4d:ee:7b:e3:09:2f:c9:68:82:8a:9a:60:77:0f:5f:75:ed:
9a:71:04:2a:a7:76:2d:e4:9a:dc:8d:ef:81:92:b3:5e:e4:95:
75:d5:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:45 2025 by rpki-client