Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: ClhsdlpKxc72fqg+lKTlI9VYZaLvl+kMsyZ6jSbaMo4=
Subject key identifier: 2B:A5:95:7A:75:C0:3A:DD:19:C0:30:32:AC:91:48:D1:CA:14:42:A4
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 019A50E40FF2FF1E6391622C3EAFFE171BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 16DB
Signing time: Tue 04 Nov 2025 22:01:54 +0000
Manifest this update: Tue 04 Nov 2025 22:01:54 +0000
Manifest next update: Wed 05 Nov 2025 22:01:54 +0000
Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: ygO5YFvHIApSzEO6nwK4pk2kZBn31dS2+tSS4Z0JytY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:0f:f2:ff:1e:63:91:62:2c:3e:af:fe:17:1b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Nov 4 22:01:54 2025 GMT
Not After : Nov 5 22:01:54 2025 GMT
Subject: CN=2ba5957a75c03add19c03032ac9148d1ca1442a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:2f:f0:b8:c3:77:7a:b2:24:df:03:19:a4:
93:c5:c8:99:61:96:9a:fc:4a:8d:06:f6:53:be:d1:
cd:7c:b7:5d:85:9c:35:ab:2f:95:6e:b3:27:d9:f7:
2f:c7:74:71:cf:04:dc:ef:63:89:33:50:94:18:e8:
93:78:40:29:6a:04:3d:c3:be:3b:03:52:46:f4:37:
33:b4:e8:42:9a:e6:60:28:2d:cd:9b:d2:14:3c:bf:
f2:df:f8:b5:3e:e9:bf:0e:d7:7c:75:3a:57:82:96:
89:61:d3:ed:f9:cc:a5:f5:a7:18:b6:8f:ed:8e:f7:
df:4c:ba:5c:72:4e:99:14:10:85:2f:c9:9c:14:18:
42:aa:79:ee:98:cc:a7:15:4d:1a:a8:7f:e0:ec:06:
be:f0:fc:3c:45:ce:ee:b1:c7:25:52:84:10:83:31:
f5:2c:f4:6d:f8:65:b7:6a:4d:d8:cd:e2:b0:f1:2c:
b7:9a:c2:ad:52:c4:1b:3f:f0:36:50:a1:3b:b1:a9:
89:1a:e0:53:c9:bf:61:31:65:1a:f1:34:a9:df:6e:
a7:14:55:d6:a5:69:88:fc:6e:19:ac:a0:90:8f:44:
52:8c:fc:fe:47:34:d4:1e:a1:37:d6:6c:b0:a1:46:
14:90:21:9a:98:5d:6b:22:d8:db:41:5d:9b:d5:39:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:95:7A:75:C0:3A:DD:19:C0:30:32:AC:91:48:D1:CA:14:42:A4
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:6c:37:9c:bc:3d:d9:49:68:c3:c2:23:13:cd:11:d1:b9:
e4:01:66:44:7f:df:0f:d2:97:86:f0:7b:85:2e:ce:09:5a:63:
6e:5c:bc:72:5c:91:31:32:05:22:26:e2:8a:3f:fc:2f:48:fd:
fb:aa:7f:87:61:0c:50:5f:a8:c1:b5:f9:17:c1:7c:e2:81:64:
9d:43:72:b9:2b:42:29:90:8c:37:eb:16:b1:1b:83:60:d8:63:
9a:40:99:49:30:2a:4f:aa:63:7b:37:58:12:fc:d2:ab:76:ac:
b0:19:65:a5:d1:53:24:76:72:e3:e7:83:3b:17:52:8a:81:85:
09:a1:ba:47:b7:18:84:cf:f6:f0:c1:fd:10:ff:81:de:1e:cf:
0c:ae:b7:11:2d:b2:8a:0c:bc:16:30:80:ec:2c:15:fc:d5:64:
3d:91:f8:11:b2:c8:b4:27:03:b7:45:f0:0e:80:30:02:fe:79:
d7:9e:be:0f:4f:86:5e:59:28:ba:1f:05:af:da:73:e8:10:3b:
41:de:c4:12:91:f5:3c:37:8a:6c:80:6d:ff:29:91:9b:b0:25:
de:5e:36:59:ba:1f:7a:28:68:ae:4a:42:87:ad:41:aa:52:26:
82:30:3b:7e:51:8a:93:7c:53:4f:7f:80:c9:95:10:43:26:35:
e2:02:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:29:21 2025 by rpki-client