Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: +2AMpM5ummqWCUwWmkisHsjAXAv40zMxoR1VoUdEbzY=
Subject key identifier: FD:93:D5:C0:9A:2F:3C:4A:65:37:7C:06:D4:A3:3C:B8:A2:F9:52:DC
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 019A71EE61CD3A5176F73A470B32C524A437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0FB6
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: CkwJh25xvgwaiIRr2owp3soUIeA/CCtD0rzMf2fOEvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:61:cd:3a:51:76:f7:3a:47:0b:32:c5:24:a4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=fd93d5c09a2f3c4a65377c06d4a33cb8a2f952dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6c:20:4b:ce:19:0a:48:3a:be:4f:9a:82:e7:
1e:4e:04:60:75:f6:86:8b:a2:d5:aa:ef:57:3c:47:
38:ae:15:04:84:fb:90:fa:a9:3e:bd:3a:36:74:98:
20:4a:3f:72:57:05:60:29:0f:57:7e:2d:de:e8:bb:
9d:12:d7:a5:b8:20:1b:33:91:74:cf:88:74:44:a4:
90:58:6c:72:0a:8c:49:e8:6b:2a:c9:3f:bf:4e:be:
35:cb:de:ad:f7:ad:d4:1c:3d:d5:5a:3f:22:45:af:
c2:c4:ae:2d:29:70:7f:11:6c:26:9c:e2:44:45:19:
f6:3a:6d:76:79:70:81:04:3f:19:09:8a:f4:1c:90:
74:bd:71:8b:00:55:49:40:45:e7:e8:b8:99:5c:d1:
c2:c9:43:03:25:da:29:27:a7:1c:8e:ba:17:74:1a:
b7:33:da:69:47:60:81:19:3e:7e:37:dc:09:8f:ac:
bb:64:5e:5e:ed:31:72:66:a0:f0:5e:3b:8b:7a:66:
e9:6e:f8:8f:b3:6c:17:0c:93:39:ec:e3:b4:c4:ca:
4d:f3:db:3a:fb:9b:43:4d:f7:9b:1d:db:3d:ee:7d:
7b:3a:e2:43:76:d3:66:2c:40:25:07:73:11:7c:1a:
a9:f9:4e:e5:f6:e4:f9:9f:45:e2:8a:c3:6a:96:bd:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:D5:C0:9A:2F:3C:4A:65:37:7C:06:D4:A3:3C:B8:A2:F9:52:DC
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:00:1b:ba:87:7a:3f:da:6c:29:12:70:82:7e:0a:ad:df:
22:e2:80:b4:a0:3f:43:3b:72:1d:70:3b:0b:e1:81:b9:55:a2:
d5:8f:af:60:c4:b9:20:a9:ce:6a:0a:20:42:7b:45:97:38:65:
f9:c8:a5:b3:76:bc:92:0b:8d:3a:70:89:e7:6b:81:b3:a9:08:
dc:40:07:2c:5c:fa:04:1d:cb:95:43:07:2b:01:ae:2e:fd:0e:
60:33:55:cd:a0:ea:50:e9:58:b9:57:c7:ae:f1:e0:75:6a:36:
a9:29:32:75:ad:3b:19:0c:a6:2b:d1:d8:09:52:eb:13:8c:db:
7f:4e:d9:09:cf:35:90:4d:c4:14:fc:58:44:f1:e9:35:9a:a7:
08:64:2a:1b:13:b5:05:ef:f8:09:cf:c1:e0:db:8b:bd:7e:aa:
a8:81:10:ee:9b:4b:09:33:20:2c:37:0a:b1:52:b7:47:7b:ef:
57:df:d1:d5:3a:93:77:fb:ea:ce:97:14:5f:0b:68:dc:24:f8:
00:42:3f:f4:60:4d:6e:8e:59:22:4e:be:40:4b:c4:1b:0b:92:
f1:0f:5c:f7:8c:fb:d9:dc:fd:2f:bd:4b:fd:59:3f:c3:ff:36:
9c:39:f0:9c:78:a4:20:4b:b7:a3:6e:ef:2d:f4:cf:c1:25:40:
ef:fc:09:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mHNOlF29zpHCzLFJKQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDIzYjM5NzA1YjM0NWE4NmVmZjNmMTRlZjZiMWU0ZGI0
NTkzOWUwHhcNMjUxMTExMDgwMDM5WhcNMjUxMTEyMDgwMDM5WjAzMTEwLwYDVQQD
EyhmZDkzZDVjMDlhMmYzYzRhNjUzNzdjMDZkNGEzM2NiOGEyZjk1MmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WwgS84ZCkg6vk+aguceTgRgdfaG
i6LVqu9XPEc4rhUEhPuQ+qk+vTo2dJggSj9yVwVgKQ9Xfi3e6LudEteluCAbM5F0
z4h0RKSQWGxyCoxJ6GsqyT+/Tr41y96t963UHD3VWj8iRa/CxK4tKXB/EWwmnOJE
RRn2Om12eXCBBD8ZCYr0HJB0vXGLAFVJQEXn6LiZXNHCyUMDJdopJ6ccjroXdBq3
M9ppR2CBGT5+N9wJj6y7ZF5e7TFyZqDwXjuLembpbviPs2wXDJM57OO0xMpN89s6
+5tDTfebHds97n17OuJDdtNmLEAlB3MRfBqp+U7l9uT5n0XiisNqlr1YDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2T1cCaLzxKZTd8BtSjPLii+VLcMB8GA1UdIwQY
MBaAFIMCOzlwWzRahu/z8U72seTbRZOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYt
M2I4ZmJmZmY1MzQyLzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYtM2I4ZmJmZmY1MzQy
LzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKQAG7qH
ej/abCkScIJ+Cq3fIuKAtKA/QztyHXA7C+GBuVWi1Y+vYMS5IKnOagogQntFlzhl
+cils3a8kguNOnCJ52uBs6kI3EAHLFz6BB3LlUMHKwGuLv0OYDNVzaDqUOlYuVfH
rvHgdWo2qSkyda07GQymK9HYCVLrE4zbf07ZCc81kE3EFPxYRPHpNZqnCGQqGxO1
Be/4Cc/B4NuLvX6qqIEQ7ptLCTMgLDcKsVK3R3vvV9/R1TqTd/vqzpcUXwto3CT4
AEI/9GBNbo5ZIk6+QEvEGwuS8Q9c94z72dz9L71L/Vk/w/82nDnwnHikIEu3o27v
LfTPwSVA7/wJ1A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:49 2025 by rpki-client