Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: rmcH4DMlU09LlA3FpvLgiVtVU4bSQc49P16gQJb0bqo=
Subject key identifier: 25:BE:DC:90:BD:0A:B9:7F:97:8E:B0:48:7A:9C:E6:BF:54:6F:FA:C5
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019A25534E23C2F3173177406CED37875BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 11:00:07 +0000
Manifest this update: Mon 27 Oct 2025 11:00:07 +0000
Manifest next update: Tue 28 Oct 2025 11:00:07 +0000
Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=)
2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=)
3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: GGud/ln5dJXLRIA6+38F6KZCMjRjLlvLj2WIix868xc=)
5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:4e:23:c2:f3:17:31:77:40:6c:ed:37:87:5b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Oct 27 11:00:07 2025 GMT
Not After : Oct 28 11:00:07 2025 GMT
Subject: CN=25bedc90bd0ab97f978eb0487a9ce6bf546ffac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fd:b5:7b:c5:2a:71:3d:63:a0:05:1f:76:db:
16:e7:df:4f:e3:af:76:91:61:97:26:22:77:c7:86:
cd:42:13:13:6d:20:cd:f5:51:a5:2d:fe:83:09:f4:
e1:a1:07:73:2f:b5:18:1b:a4:ab:2f:a6:a4:dd:a0:
f0:b8:d2:56:6b:88:25:3f:e1:28:08:aa:74:50:41:
4d:25:1e:37:2a:7e:a4:be:6f:84:1d:ea:03:92:af:
41:e8:6e:1e:a4:7e:a8:b7:01:3d:bd:9d:cf:4c:13:
e4:a9:de:ae:a8:8c:ab:de:08:b5:4e:02:5b:fe:2e:
c1:f9:74:55:79:f5:f0:68:f9:92:ac:9b:f6:65:89:
e2:40:17:76:c0:fd:08:d3:d6:95:62:f7:ec:73:4d:
7c:8c:51:51:c2:52:14:d8:08:77:38:07:06:a5:d5:
01:c0:e4:b1:08:bf:0a:17:72:36:06:d7:81:b9:13:
2b:bc:06:1a:46:2e:a7:4b:2a:8c:91:8e:3c:e9:a9:
0e:17:44:0c:0a:bc:b5:b9:74:a3:45:21:d9:44:51:
9e:f8:6d:99:11:5e:fd:b2:a2:39:ca:3d:0d:d9:61:
b4:7b:06:04:ab:39:c0:66:7c:94:6e:06:91:02:a1:
30:94:02:dc:43:ad:95:8b:03:12:0c:ad:43:a3:41:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:DC:90:BD:0A:B9:7F:97:8E:B0:48:7A:9C:E6:BF:54:6F:FA:C5
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ab:e5:1b:86:e6:05:36:e7:11:41:f2:a1:5d:42:8d:ec:01:
62:24:49:68:f5:dc:9c:95:49:66:72:3d:23:ee:e2:9f:f5:66:
1c:7a:f3:94:e9:20:53:16:49:3e:57:eb:5b:74:b7:f0:8e:59:
c8:cc:f7:c3:5c:9b:1e:ee:82:44:7c:8b:96:ed:ff:ba:5e:8d:
5a:3f:1d:ce:ef:e5:e6:0b:53:83:a6:ab:66:b4:41:d8:f3:7d:
95:23:fb:b2:01:7d:b8:a3:c3:78:94:56:98:3d:bd:f7:1d:41:
85:42:13:4f:3d:91:1c:c8:e2:35:42:eb:1f:35:ae:ee:0c:ef:
1f:87:70:80:7d:e1:ad:0b:1a:5c:22:5a:9c:5b:de:02:3c:cb:
7b:0d:ef:f5:9c:31:1f:f5:8c:e4:d4:7a:d6:d9:c6:96:c8:f0:
7a:d5:8a:30:78:e2:ea:31:ee:51:d3:ac:22:fa:c8:3c:38:18:
7e:ae:af:45:6e:04:7d:15:4e:d2:0f:a4:a8:d8:77:5b:d7:c4:
c7:aa:3c:fd:1f:1b:56:49:20:ac:a0:12:8a:6d:e0:a9:33:d9:
4a:e1:ed:7f:c1:c6:2f:6a:c1:3e:4e:72:04:b0:7d:d2:c9:2b:
ea:ae:d9:5e:b8:20:5b:b7:f7:ba:e0:b7:38:a5:6b:de:53:0d:
db:78:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:11:19 2025 by rpki-client