Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json)
Hash identifier: 5ZP3+2+XhqP+1avhN7tuDQpepaMQc88OdrMlweR4usU=
Subject key identifier: 4E:6D:C5:A6:5B:C9:27:85:03:4C:AB:C5:DA:19:87:B6:FD:F3:E8:A1
Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54
Certificate serial: 019A73382352DD4F8334CF9A08F07CD8417E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 14:00:49 +0000
Manifest this update: Tue 11 Nov 2025 14:00:49 +0000
Manifest next update: Wed 12 Nov 2025 14:00:49 +0000
Files and hashes: 1: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: N0ztrz0GgNNosAhlI810oTnlnNbTFWXNGKQlv7/IVj4=)
2: rrr9lD-1fMY09SJ_d8OflA80hiM.roa (hash: dlPtuTm7KAs7BBecLGSQ0tXT2j/4sVnjNpjS2hSNO9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:23:52:dd:4f:83:34:cf:9a:08:f0:7c:d8:41:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819ca93d13ec213591289594c41763ac07046c54
Validity
Not Before: Nov 11 14:00:49 2025 GMT
Not After : Nov 12 14:00:49 2025 GMT
Subject: CN=4e6dc5a65bc92785034cabc5da1987b6fdf3e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:ad:03:b0:3c:29:cb:3a:d5:8e:97:2f:78:
f2:db:5c:73:80:71:f9:7e:49:f5:e7:c0:4b:ac:01:
10:c4:36:f7:f7:16:2c:15:95:13:68:44:96:21:86:
ba:09:21:1f:66:53:23:d9:eb:1f:8d:07:b9:fb:09:
7c:13:3c:0b:65:99:c5:fc:94:13:95:14:50:89:6e:
f3:d0:6b:6c:2b:43:cc:b3:66:f8:65:c4:95:95:68:
9d:70:ed:f6:0d:86:48:ba:0b:79:a6:58:88:50:f3:
36:17:84:d2:7d:ed:71:a3:fc:5e:70:3a:a6:85:30:
9c:5c:fe:8f:2e:71:47:d7:17:0c:24:6b:28:5f:f5:
2b:89:99:3a:6b:63:ef:17:61:f7:a0:fb:88:2c:b2:
08:c8:9d:2b:98:87:7b:54:6c:94:85:38:42:2a:26:
35:6c:0d:fb:4b:bf:9f:1b:8d:62:62:04:6c:f7:12:
57:e4:11:35:2e:57:06:eb:a9:71:c2:c4:11:5e:d9:
e7:8a:07:c6:ec:83:30:8c:e3:4d:c3:c9:b6:21:ff:
2e:94:6c:58:e9:50:4f:41:ef:85:ce:4a:18:1a:d8:
2a:1c:fd:25:e2:e7:b7:f9:76:87:75:ed:fa:fd:be:
f4:80:de:63:0c:94:0e:5a:b0:5f:f6:0a:ec:e7:d9:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6D:C5:A6:5B:C9:27:85:03:4C:AB:C5:DA:19:87:B6:FD:F3:E8:A1
X509v3 Authority Key Identifier:
keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:15:d9:a4:f2:48:ae:09:93:7c:f2:71:c7:15:e4:8c:9f:ec:
de:d1:9e:bb:5b:b9:e3:5c:62:7b:2d:47:c1:f8:64:1b:80:bc:
b7:3b:da:ff:ae:ea:9a:36:4d:9a:4a:db:f2:b3:41:2e:a0:32:
f0:71:9f:df:4a:d1:2e:bc:66:28:d1:d6:06:65:43:b9:07:59:
01:1e:90:40:1e:4f:66:b7:e2:0d:19:0e:4c:38:9a:fb:40:f0:
18:0e:f0:dc:01:ab:f4:9e:1c:8d:2c:59:f4:d8:1e:f6:50:78:
04:6d:59:3d:a3:b5:bf:d9:7c:08:2b:2f:b9:8b:9b:e8:5b:ac:
67:8c:e2:49:01:c2:de:7f:16:88:2e:22:a8:76:e6:b1:92:e4:
b8:73:3b:9a:91:fe:88:67:01:44:8f:84:fd:d9:9e:a1:ff:d0:
21:86:51:5a:75:fb:29:4a:41:31:aa:bd:2e:0e:48:d0:92:d3:
a0:4f:39:b3:8b:b9:f9:88:1f:b7:b0:49:2b:03:e5:49:59:a2:
98:ab:b8:24:20:c0:97:2b:40:9a:83:b9:71:fc:f7:86:fb:8b:
72:e2:24:69:e8:7e:9d:fb:5e:de:cb:13:d9:fc:62:e3:ea:b6:
64:d5:25:97:d7:42:6a:9e:e5:a3:6a:b1:da:8b:6d:80:46:37:
be:d4:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:51 2025 by rpki-client