Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: Ac/7DevCREx6xGNeIx4A7SC/e+wUSMpnVr6LVAC4IO0=
Subject key identifier: 9D:13:E6:7F:99:BE:C8:41:D1:E6:7B:B5:33:82:95:3C:B3:8D:9F:1A
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019A51BEA97D040F2759B09720C1130656DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 02:00:40 +0000
Manifest this update: Wed 05 Nov 2025 02:00:40 +0000
Manifest next update: Thu 06 Nov 2025 02:00:40 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: 2Q54SxlLAa+BdgUXiSHI9WGMbeMhzvA3U+scuGfRh08=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a9:7d:04:0f:27:59:b0:97:20:c1:13:06:56:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Nov 5 02:00:40 2025 GMT
Not After : Nov 6 02:00:40 2025 GMT
Subject: CN=9d13e67f99bec841d1e67bb53382953cb38d9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:fb:6a:b5:a0:8f:3a:cd:4b:19:47:2e:e5:
2f:4d:f4:25:9a:43:ef:47:76:85:09:50:47:b0:87:
93:cf:84:43:1f:3a:0f:2f:5c:ef:b6:1c:70:75:3d:
22:a1:05:1b:ea:59:3a:2e:90:4d:b2:4d:60:94:92:
bf:8c:05:53:fb:ea:ce:c0:ed:f7:c5:1f:79:27:1b:
1b:62:28:d4:dd:24:f0:1c:0f:bc:03:77:65:f6:38:
d0:ec:d1:a4:1f:d0:3a:5f:c4:07:fa:92:71:03:0e:
1d:8e:31:e7:db:90:d1:1c:6c:b5:4f:86:a4:d9:6b:
39:44:59:db:74:6c:be:e5:3f:44:c4:0e:07:ba:73:
62:73:d0:77:c0:1c:14:a0:41:d8:7d:bf:a7:ba:84:
1a:80:22:18:97:51:6e:cd:6a:47:49:b6:87:36:e3:
4b:c2:d5:24:e9:41:69:8c:e8:e6:5d:42:62:c8:b6:
b0:1c:56:36:20:47:38:03:3d:dd:86:82:62:45:62:
c6:2d:9d:55:99:0e:0e:83:55:50:4d:dc:7c:37:3e:
a3:d6:d8:95:de:90:4b:9d:78:1f:c7:a3:20:39:bb:
38:fa:02:dd:e8:a7:df:56:48:57:30:a7:71:fd:e9:
ee:65:85:42:67:e1:c3:5a:09:1a:8d:79:31:42:a9:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:E6:7F:99:BE:C8:41:D1:E6:7B:B5:33:82:95:3C:B3:8D:9F:1A
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:90:26:c6:09:f2:ab:99:6f:b1:61:b1:e8:47:ea:a6:06:ec:
3c:1c:90:3f:5e:f4:dd:4c:15:a0:2e:b4:af:7f:ee:b0:f2:a6:
63:d2:87:c7:f1:9d:14:73:c3:ad:65:77:e5:73:9a:90:6f:5b:
26:c9:e8:ba:c1:94:61:7e:b2:a0:55:ff:94:ed:14:77:a2:79:
fa:66:b0:c6:7e:ca:c4:c8:61:39:bd:22:82:7f:40:ac:ba:f8:
6f:29:63:50:a0:51:1c:45:62:20:62:d2:4d:d0:91:4b:d4:7b:
c1:dc:d1:fc:ca:a5:c7:c3:95:23:ae:41:57:cf:bf:7f:cb:68:
74:b9:1c:05:fa:5a:bc:43:88:91:db:05:ad:31:4f:40:9d:43:
92:24:d1:0a:27:4a:81:ae:66:24:59:40:73:40:c2:28:04:ce:
99:7a:18:1b:8f:45:ba:b9:2d:4e:0c:f5:3e:09:41:7e:27:da:
ed:5f:90:e6:ef:ad:9f:44:ea:6a:47:2d:01:6a:0a:f1:6f:da:
53:9c:0c:42:97:35:3a:56:0d:d2:66:cd:2d:d9:48:95:8a:34:
ba:91:7e:51:fc:fd:91:86:03:78:1f:13:b9:16:8f:6b:e6:20:
73:da:5f:06:71:53:df:b0:cc:ca:88:70:a2:65:57:d3:07:c7:
a5:55:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:11:08 2025 by rpki-client