Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: eT29Lbs0tAwRLA+m4eMKjBL/njUyjqQEyO6opcfBuZA=
Subject key identifier: C5:91:89:51:D9:D3:6A:FE:D1:6D:91:0B:02:FA:E8:C0:0E:6F:1C:00
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 019A71EEAF2446E4F563E157C2EBEF9FE4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 08B8
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: HTG4yQpbQDgmP5e9I19a8At1rxJPy7Yckht5kfFQDuE=)
2: h1XtrgQS4y6F2QyLyCE8H5yVgX0.roa (hash: nBro9lqJpw++Y/bB5Bh7ukI6Oz6bg0ejSLEPfy18Wfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:af:24:46:e4:f5:63:e1:57:c2:eb:ef:9f:e4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=c5918951d9d36afed16d910b02fae8c00e6f1c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:cf:08:ee:e6:19:8a:04:98:b7:e5:48:18:
f6:12:2b:5f:88:3a:ad:86:3c:62:07:16:c1:05:a6:
07:4c:de:d6:06:8e:02:98:fb:45:20:90:d6:0a:9a:
2d:e9:51:f8:43:eb:0d:f2:45:eb:ad:e0:d8:25:b2:
d3:08:f9:9d:99:8e:98:a2:21:a2:6e:28:fb:81:79:
e2:17:d7:53:c3:38:73:b5:6d:c3:79:d1:54:14:49:
20:e3:e0:40:e6:b3:48:5d:6e:3f:4d:5f:c8:2f:cc:
2f:9e:d1:15:67:e8:67:3f:c7:f6:6a:25:60:42:2a:
ae:0d:45:b4:a9:5a:a7:23:c1:29:19:38:f1:2e:7b:
0f:de:2a:82:c9:23:ee:86:69:03:af:3b:8e:40:3c:
2c:43:97:d4:96:df:bf:de:37:62:b8:0a:8c:98:84:
f8:b3:8f:db:09:0a:1f:6c:95:55:d6:d8:db:5f:5d:
fd:89:c5:4b:55:56:ea:2c:dc:79:d5:06:1f:a0:98:
ce:56:42:0b:3d:48:f7:32:e1:5d:70:be:c0:ca:ce:
4e:33:6e:9f:48:14:4b:42:40:6e:6d:e1:f6:c9:35:
92:0a:3c:70:d8:58:42:ba:89:9b:39:53:06:63:a3:
58:01:48:b5:52:5d:66:8e:f0:aa:72:87:ec:25:69:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:89:51:D9:D3:6A:FE:D1:6D:91:0B:02:FA:E8:C0:0E:6F:1C:00
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:25:61:c4:72:ee:02:08:8d:98:19:50:70:37:68:d8:02:
75:71:16:25:e3:dc:8a:00:2e:61:0b:30:62:81:1a:75:e2:0f:
2f:10:10:50:31:7b:10:94:bb:2b:c6:d9:8e:b3:9d:e2:3e:0e:
a6:a0:c6:c2:d8:3b:73:a7:47:fd:f3:67:7e:7f:73:c8:44:d3:
07:16:18:5e:0c:3c:ed:15:c2:14:5d:3c:0d:0d:6a:ac:ba:aa:
7d:08:8e:32:8f:f8:98:35:d7:5b:44:0e:8c:de:31:fb:31:1f:
28:39:5e:99:16:3d:2a:b6:6f:90:ce:46:ef:b0:93:a4:89:41:
3e:f0:96:94:cb:49:cc:ae:35:a2:f2:7b:30:20:f1:89:5f:ae:
35:4b:5d:30:55:e1:f8:fb:f4:74:25:4b:e1:12:38:03:7c:d6:
86:6d:8f:34:27:55:1b:6d:d1:c1:a9:b1:e9:1a:f2:fc:b3:14:
68:45:4b:d1:10:35:73:41:08:dc:a9:16:23:63:81:2e:52:00:
1d:dc:4b:a9:93:ec:fe:7c:2f:63:be:c7:0c:a3:e2:ce:79:3a:
b5:cd:35:f8:ba:d0:16:c4:4a:47:c1:c1:1d:0e:38:05:d0:fa:
eb:05:2f:33:55:d7:1c:0f:5d:59:61:58:aa:0e:f9:1e:ae:3e:
dc:e5:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:12 2025 by rpki-client