Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: ROVd0Ixfv1MF/watEEfcAu7iPwdZxbpNDwF/llL3/N4=
Subject key identifier: 58:8C:82:EA:04:6A:3A:F5:DF:91:70:89:D5:8F:57:94:0D:56:0E:5F
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 019A12A8A99639988EFC3C4D2BDE240E3A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 0C85
Signing time: Thu 23 Oct 2025 20:00:34 +0000
Manifest this update: Thu 23 Oct 2025 20:00:34 +0000
Manifest next update: Fri 24 Oct 2025 20:00:34 +0000
Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: Yyq4g9TjhKlOMu/Xlmbi3Fe1ONbIVkiWEowSbSGCbj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:a9:96:39:98:8e:fc:3c:4d:2b:de:24:0e:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Oct 23 20:00:34 2025 GMT
Not After : Oct 24 20:00:34 2025 GMT
Subject: CN=588c82ea046a3af5df917089d58f57940d560e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:3e:58:7f:4a:b3:0c:86:fd:8b:85:2a:1d:
e0:3b:20:ec:ac:8b:93:27:7f:47:5f:a5:b4:33:5e:
34:00:87:88:0a:be:02:4c:3d:74:90:59:e0:13:aa:
3a:9f:57:2e:b7:2a:1e:a0:df:a5:3a:57:67:50:cc:
89:ba:e0:2a:1c:98:40:12:e4:d8:b0:ae:e6:d2:aa:
0f:65:bd:36:a3:af:1b:e4:49:4b:87:f8:ca:a4:90:
7b:b7:46:f4:4c:1c:06:d7:49:c0:e2:93:cc:8e:b0:
53:10:4f:17:b1:3d:92:9a:e2:1a:30:fc:a7:60:43:
19:a6:5c:72:78:b7:f0:b9:c0:af:24:8e:73:32:93:
bb:16:49:92:16:c4:7c:c9:bf:20:d2:21:fe:94:1e:
6d:a7:e2:f2:f6:23:11:e9:25:05:52:b9:5f:ad:91:
f4:ed:a8:d1:37:bc:47:68:03:63:99:b3:f6:dc:4d:
ea:f3:0b:9e:f6:a0:de:fb:54:38:8d:79:4e:ba:42:
ba:17:50:2e:e8:ba:22:a9:7c:c7:2a:08:0c:0a:f0:
ee:a1:6f:90:63:97:c5:66:6a:92:32:1f:0b:bf:07:
02:db:12:46:c8:24:d1:73:cb:fd:cc:c9:8d:19:df:
8b:e1:8e:5e:a8:0d:95:76:6c:ef:92:d2:67:b1:58:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8C:82:EA:04:6A:3A:F5:DF:91:70:89:D5:8F:57:94:0D:56:0E:5F
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d1:35:e9:e0:39:70:c7:cc:94:56:00:e3:24:46:37:af:a9:
1b:80:f1:88:77:1e:fa:f7:66:9c:a7:8f:77:61:af:05:57:b9:
c4:4f:f1:31:d9:54:2c:23:60:e5:a2:08:d4:8a:73:a5:68:63:
e4:16:f5:c2:73:a2:16:fb:73:76:5b:b4:84:2e:da:e8:f1:5d:
62:cd:07:c7:4a:3d:5a:5e:d7:1d:9e:b7:25:c5:17:c7:5d:44:
ae:c0:49:c5:7c:46:ae:a0:1d:39:7b:f6:45:ad:92:89:d6:54:
26:d8:73:cc:9d:23:0a:b6:a8:5c:e1:2d:f3:ac:0a:5f:9f:ab:
6f:f9:8e:81:65:bc:75:26:07:e7:93:72:df:0a:25:af:4c:9a:
69:fd:50:dc:9e:0e:4a:de:a8:89:2b:f6:53:98:47:52:99:b4:
09:41:62:29:13:88:be:65:d7:5d:7b:96:9d:02:c0:09:ec:df:
79:e7:cf:62:49:b5:98:7d:f4:77:73:c5:81:b8:1b:38:4f:40:
d7:b7:aa:af:2c:42:b2:c1:55:99:e1:f8:4a:2d:73:2a:26:26:
49:5a:89:e7:a9:1e:b6:b8:7e:8c:34:e7:30:09:cd:a1:25:36:
2a:b8:f7:a8:bb:0d:c6:fa:97:ae:f9:4f:49:c5:32:1f:ae:74:
e9:16:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:30:18 2025 by rpki-client