Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: 2q/GQjiwPvMb4YdmunrGqsIaYRjoh2Q7k9tNsETIOKI=
Subject key identifier: EB:29:58:13:CF:93:F7:06:72:AE:C8:5E:52:E6:84:6B:2B:3D:D5:B6
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019A7225A68E84C1FE630C7B3C2753D642EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0140
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: YdAjbfCRxVQuhwuJCOd8n6-9uGc.roa (hash: ryQI+IE9GniEW1zRKSAQBzSoJ8r45pp9QujhZtOYmEk=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: 4IcvSOICfVD5HyGGbpMbZV0r6Qa4+Ao9GbKDP6kSvOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:8e:84:c1:fe:63:0c:7b:3c:27:53:d6:42:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=eb295813cf93f70672aec85e52e6846b2b3dd5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:81:13:e7:a5:b0:4a:27:84:0c:f7:a3:ca:
65:42:9d:36:7a:92:0d:e0:6c:2d:2d:e0:84:f6:d0:
0d:97:58:6e:54:fb:21:01:2d:16:01:13:ce:f8:a0:
de:00:35:40:5a:20:69:48:11:4e:7e:6e:c8:61:bf:
a0:a1:97:6a:4a:99:46:d5:32:1a:a0:c2:65:9c:d4:
fe:fa:5f:10:0d:37:ec:61:b9:ca:7c:86:b6:cf:b1:
3d:0c:6e:ad:b9:65:16:2a:ef:fb:9a:37:1f:a3:50:
a9:f2:a5:14:a6:47:1f:8b:a0:45:b2:a0:35:c8:41:
d2:34:69:27:0e:9b:6f:58:37:09:fd:f3:27:2b:3c:
35:2a:d0:fb:0a:f1:6a:96:c1:87:c8:9d:bf:32:42:
c3:09:ee:4b:91:13:c0:80:4b:d8:41:dd:2c:da:68:
7e:3f:53:4c:a7:52:d1:2b:32:f9:81:32:5c:f0:a4:
9f:67:e9:d7:4b:85:9a:b9:df:4b:85:06:cf:14:2f:
15:4b:e4:6c:2d:02:18:1d:f6:8d:53:8e:38:86:19:
a0:58:45:8c:e4:5c:32:be:e8:f0:1a:84:a0:19:b3:
9d:5b:8c:ff:bd:ef:da:25:74:1c:66:1e:d5:69:25:
88:e9:db:e4:b9:7b:bf:65:75:d4:d6:27:07:7c:2e:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:58:13:CF:93:F7:06:72:AE:C8:5E:52:E6:84:6B:2B:3D:D5:B6
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c3:d9:28:8e:e9:c8:81:ce:f4:be:45:83:b3:72:42:d3:ef:
da:44:bf:2e:de:d8:de:10:9b:2c:ca:aa:75:20:e0:6f:8c:6d:
68:eb:c2:90:46:19:05:4c:5e:b6:d5:d1:a6:6e:ab:fc:61:16:
68:2f:e7:08:00:65:3f:78:91:32:48:eb:30:b7:74:78:55:03:
32:96:9c:38:61:64:37:e5:f4:52:f8:b3:23:86:68:48:71:23:
8b:09:17:24:4d:1e:e1:8e:6c:a4:0b:f8:51:2f:df:90:4d:c2:
5d:5f:16:b1:15:ed:0b:0f:a9:01:f6:38:a1:99:79:40:71:97:
60:2e:a4:49:2d:8f:1c:87:71:5c:ea:96:ed:d2:e7:4b:f6:ce:
94:4b:b5:ba:83:a4:fd:d8:e2:40:8f:64:eb:0c:78:a0:68:15:
85:3e:a3:2d:ed:a3:ff:8e:f5:73:bd:98:a8:8d:51:ca:e9:4b:
8d:01:9d:3f:a3:6a:be:6a:f9:62:17:ad:ad:da:d2:8f:f0:84:
64:ba:12:5e:6e:10:6a:a6:58:3b:f4:2b:8c:d0:8d:43:9f:fa:
be:36:1d:31:e3:5d:f7:78:0c:f3:18:87:32:2d:a6:71:40:91:
d6:14:1f:75:d9:52:63:c7:9d:41:58:27:a1:f2:31:b2:17:b7:
ad:cd:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:53 2025 by rpki-client