Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: Y+JlwJQRFc0AwgKMgtT/aS3EgQP3azE7W2CGCngdwao=
Subject key identifier: 88:7A:16:7C:31:8D:AD:F5:DD:38:5E:7E:49:0C:D5:3B:C9:B0:E2:62
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 019A73018CC07FB8CB139E5B9F68B975F8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 11FF
Signing time: Tue 11 Nov 2025 13:01:12 +0000
Manifest this update: Tue 11 Nov 2025 13:01:12 +0000
Manifest next update: Wed 12 Nov 2025 13:01:12 +0000
Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: S9kNhn+j5De9j0XpbBAj/crHDH2jdsA9VCDUJdugCxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:8c:c0:7f:b8:cb:13:9e:5b:9f:68:b9:75:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Nov 11 13:01:12 2025 GMT
Not After : Nov 12 13:01:12 2025 GMT
Subject: CN=887a167c318dadf5dd385e7e490cd53bc9b0e262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:10:85:b8:8a:db:ee:25:e3:43:44:7c:63:
e4:96:2b:db:d4:b9:d6:bc:ad:c2:f0:62:f1:d9:f3:
68:c2:b4:93:44:43:61:11:b9:b0:b1:a4:43:a6:96:
7c:04:b5:ad:ce:98:7f:a7:6e:2c:86:02:55:b0:dc:
fa:dd:ac:04:d4:4e:4e:99:a3:60:08:fb:30:c3:19:
a8:f0:da:1d:3b:bd:82:46:5b:f7:28:ea:48:4f:c4:
85:ff:b2:1a:ee:2f:16:30:ac:54:9f:99:d8:df:37:
37:c3:df:08:08:b8:b3:03:7b:19:eb:d9:b2:76:b2:
fc:5f:88:cf:72:07:8a:bd:88:87:ce:4b:66:e3:29:
d8:00:30:22:ce:90:09:76:56:b2:83:11:0a:88:89:
f2:5f:d3:0a:35:b3:06:6e:4d:25:69:3d:b7:f8:02:
51:28:07:fd:af:3d:c1:98:5c:ce:78:cd:c0:8c:27:
71:b7:82:5f:9c:b7:7e:77:45:b1:81:92:74:54:66:
d6:2d:c8:83:fa:04:69:d1:48:9c:fb:cd:2c:a9:b2:
da:5e:e2:5f:c6:1c:21:27:28:5b:61:4c:33:b1:ec:
9c:66:27:4b:4b:c1:fa:60:ba:d0:ed:27:43:8c:8c:
d2:19:09:89:88:d7:8e:b8:90:20:90:0b:b9:13:6c:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:16:7C:31:8D:AD:F5:DD:38:5E:7E:49:0C:D5:3B:C9:B0:E2:62
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:10:a2:45:69:19:1c:38:72:87:d0:38:cb:26:5e:01:12:df:
85:11:64:92:44:9b:ed:ac:0c:7a:70:8d:f5:b4:73:ad:2b:95:
8f:a0:d1:68:bd:fb:c3:9a:d3:2a:78:d1:32:49:72:bf:17:78:
b5:55:9b:1d:1c:f4:29:9a:a9:c5:aa:7f:74:96:9a:1e:cb:57:
1c:a3:cc:2f:3c:f3:1d:93:ee:4f:a6:36:85:db:c2:c1:7b:36:
72:3c:a8:89:6b:5c:c5:c0:61:eb:60:e6:96:b3:f1:cb:a6:b5:
d8:64:91:99:81:70:20:b3:e0:2d:8a:95:4a:10:3c:71:fe:8a:
5e:69:ed:b0:80:8c:19:f8:0c:ec:f9:1f:ea:75:96:b4:fc:fa:
2c:b7:d2:36:f4:19:5a:2d:d5:62:3e:3f:49:51:ff:bf:33:f3:
32:d0:bc:92:92:41:dc:f1:2e:41:1e:c0:eb:66:2d:e5:be:10:
d0:96:c3:c0:d9:a6:d4:f0:94:b1:82:6e:35:c4:1b:94:ed:0c:
be:b8:17:f6:d6:45:96:e2:ac:0e:2d:74:11:f6:fc:b9:b3:19:
7c:a4:00:30:9d:c3:f4:a5:4a:b4:08:d1:2a:85:e9:09:9e:dc:
28:92:a3:55:21:38:54:d2:35:43:c6:76:7f:3a:a5:b1:f9:bd:
44:b4:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:15 2025 by rpki-client