Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File: gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier: 1qBDAKiKnHS2cvHGhgbqEjjiSZQaDMuP7R2yWe1tbS0=
Subject key identifier: 06:79:40:DF:09:E6:A0:7F:FA:FE:38:2A:DA:95:28:30:AC:8D:84:EF
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 019A72CAA2D5AAD4164C81685875A8AFFE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number: 0D9C
Signing time: Tue 11 Nov 2025 12:01:13 +0000
Manifest this update: Tue 11 Nov 2025 12:01:13 +0000
Manifest next update: Wed 12 Nov 2025 12:01:13 +0000
Files and hashes: 1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
2: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
3: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
4: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
5: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: paa/SiMopA/eF4Ix+scCaTC2QBoOTjL6qaxlhPLzxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a2:d5:aa:d4:16:4c:81:68:58:75:a8:af:fe:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Nov 11 12:01:13 2025 GMT
Not After : Nov 12 12:01:13 2025 GMT
Subject: CN=067940df09e6a07ffafe382ada952830ac8d84ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:62:c4:80:f6:0e:1f:49:05:c8:c1:61:01:
0a:25:82:e5:7d:d4:16:21:d7:78:35:98:5e:2c:fa:
5e:b9:3a:0a:69:19:a5:0f:71:10:2b:13:45:f2:2f:
bb:f0:9c:0a:cb:41:37:fe:5f:33:06:15:df:0c:9b:
73:54:6f:90:57:0d:a0:22:92:c9:0c:83:21:74:b9:
5f:45:9a:14:a5:16:f4:b1:60:89:b0:5c:fb:ba:5e:
0a:2d:a5:5b:8f:e4:36:28:df:19:15:86:d5:65:f3:
6c:7f:80:de:8c:91:fd:e7:b0:cb:77:02:a9:d5:09:
a4:af:ed:47:1c:c4:de:e7:c4:d8:b4:53:76:03:80:
4d:70:c0:d5:90:06:51:99:21:30:3c:4c:59:01:72:
a6:42:95:ca:cd:9e:74:66:62:a7:9a:a3:c4:ea:03:
79:d4:ee:ed:da:e8:7f:72:86:03:71:a5:a7:26:30:
e2:1e:dc:47:59:11:a4:3e:03:d7:1d:39:b6:00:d3:
fa:c5:9c:3e:c7:81:b8:1d:50:93:4d:2e:4a:ca:8b:
e3:a1:e6:c7:ab:0e:44:85:22:da:8f:eb:f3:6e:eb:
b3:d8:57:d8:36:c1:68:f5:22:2c:88:50:af:37:06:
7f:37:92:47:9c:08:01:81:ec:82:d5:2a:1b:73:6c:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:40:DF:09:E6:A0:7F:FA:FE:38:2A:DA:95:28:30:AC:8D:84:EF
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:33:9c:21:3d:66:93:b0:01:3c:51:4f:9d:96:00:92:b7:
01:a8:43:43:f7:74:ec:d0:4b:8f:6c:cb:5e:a5:b2:ed:d7:67:
9a:2d:96:ab:4b:c1:96:26:20:24:a1:0d:d3:54:59:a5:97:59:
af:ea:ad:b2:88:38:5e:f5:85:77:a2:76:0f:19:01:f3:46:ab:
d1:e3:eb:5b:fe:6a:4a:fb:24:4b:76:fb:f6:ad:d2:a2:af:6e:
45:26:cb:2b:e2:21:2e:86:99:23:bf:a6:16:b1:7d:6b:7d:d4:
ae:42:cd:f9:3c:e8:f4:31:cf:96:2c:0a:be:31:a2:06:36:30:
16:81:a8:d7:0b:d8:56:1a:9a:66:a5:b2:da:18:38:9b:52:f7:
5d:a5:99:57:93:d6:fb:a2:56:a4:b1:42:31:4f:32:d9:9e:ba:
3c:37:a5:58:c7:8d:f8:80:14:18:0c:b6:bd:0c:1d:a6:c5:a3:
42:62:cf:cc:c1:92:f9:5f:dc:98:68:0d:c1:d2:ab:b4:c0:ff:
a3:f2:ca:03:88:9d:a9:a1:66:24:39:96:b9:fd:9c:d6:55:93:
f2:e4:23:64:35:20:cc:1a:59:2d:d0:64:fe:4e:55:bd:9f:d7:
5f:3c:ad:a9:81:83:ea:56:c4:d0:21:a0:fe:ea:48:f7:a3:91:
53:1a:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:24 2025 by rpki-client