Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: U5LMbDn7teZloJIonTw7WZuly/ieuShsxFWnXdLj07Y=
Subject key identifier: F0:DB:7E:92:E2:3C:A0:E2:BE:22:3E:CD:5E:DB:3B:2F:2A:FE:DD:16
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 0199345C055DE70EECC248E93C8B48A62CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 13A5
Signing time: Wed 10 Sep 2025 16:01:09 +0000
Manifest this update: Wed 10 Sep 2025 16:01:09 +0000
Manifest next update: Thu 11 Sep 2025 16:01:09 +0000
Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: dxZ1r135r1dMDEU1UmXKq9MLBTeugQ/gX2T72jQTlQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:05:5d:e7:0e:ec:c2:48:e9:3c:8b:48:a6:2c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Sep 10 16:01:09 2025 GMT
Not After : Sep 11 16:01:09 2025 GMT
Subject: CN=f0db7e92e23ca0e2be223ecd5edb3b2f2afedd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:75:5f:f5:14:40:8c:4b:f3:61:93:ab:2c:
5e:2a:8d:c1:75:07:d6:72:bc:bf:1c:6b:ea:3e:98:
b5:34:17:6e:04:4f:c8:e6:11:4b:3f:26:87:e3:ea:
7a:8a:47:96:bf:f2:71:bf:cd:a5:94:43:52:5a:96:
6d:4d:10:34:fa:a2:e4:4c:d7:09:df:17:3e:a2:e8:
6b:c9:6c:a2:e6:f6:38:f7:a8:ba:c9:e3:1a:c4:1b:
78:c8:df:16:a0:b2:ef:f4:11:c2:32:05:0e:a3:27:
21:18:6d:b9:c9:0f:1f:c7:69:29:63:e9:5e:48:5b:
be:bd:73:a0:66:ce:07:22:46:4b:a1:05:91:17:4c:
00:94:23:4f:f8:57:34:b7:6e:d6:76:6a:d2:08:e5:
b3:8c:27:d3:1b:6a:92:79:11:62:9d:61:bb:8f:6f:
e5:8c:b2:04:d4:5e:f0:9b:c3:cf:62:d0:bd:6e:d8:
a4:4b:74:60:fb:27:e5:36:ed:23:d4:e6:87:49:c9:
12:09:60:5a:c2:5f:f8:6c:f9:9a:e7:41:07:3c:b8:
7c:aa:b7:89:f6:be:fe:eb:c4:f7:c7:aa:65:fe:23:
cc:9c:0b:99:73:24:e7:d7:59:fd:7e:ec:f8:df:c5:
36:58:e1:d7:eb:77:83:b2:e1:d4:06:07:de:92:b7:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:7E:92:E2:3C:A0:E2:BE:22:3E:CD:5E:DB:3B:2F:2A:FE:DD:16
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:eb:56:be:c9:67:b8:65:4a:b5:c8:b5:cc:a8:e9:0d:b3:ef:
d4:39:17:78:bb:78:08:64:bd:dc:42:6e:5b:5c:bb:f1:bc:b8:
9b:31:4e:25:72:85:07:09:34:cc:50:58:f3:fa:0f:50:0c:c4:
c3:42:b4:fe:ad:4b:ae:0e:85:76:d9:05:14:5a:e5:87:8c:78:
c5:be:58:25:40:31:33:0b:48:6b:a3:ac:1c:e6:41:b0:43:d8:
ca:d0:c5:5b:1e:56:41:1a:b7:2d:8c:65:ef:ab:39:6a:0e:45:
26:e0:9c:2e:de:39:00:b9:e7:01:a0:d2:87:ed:e0:bb:95:f0:
3e:6d:8d:50:58:f5:74:0a:28:f8:8a:11:32:00:af:d2:d8:e0:
bb:36:66:59:f7:52:fc:48:f7:eb:7a:f4:bd:75:44:7d:f1:ba:
92:9b:c8:46:36:9e:78:ab:a7:47:62:d3:fa:cb:b9:01:6c:ae:
56:10:7b:82:96:6e:0f:66:15:82:26:9f:ae:50:8a:74:39:b5:
ec:dc:0a:02:07:ca:d0:2a:e9:18:cc:c7:07:a2:46:76:28:3d:
e0:2c:d2:df:0d:5f:b1:d9:a5:a2:ae:b4:ba:74:05:7f:ab:44:
d1:73:ba:5c:39:85:e1:9f:e4:bd:07:92:b9:b9:2b:d7:bd:c3:
6b:e5:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:26:20 2025 by rpki-client