Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: KqHUvl2zUa/VPCr2MWpnMl3atSc44GWCyusmcXOh080=
Subject key identifier: FE:62:F1:B9:87:AB:30:4C:01:7E:82:3F:FE:5D:16:60:00:2E:5B:7F
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019A1D2BDE88C58D20BEC8544B1A2BF3C09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 21:00:05 +0000
Manifest this update: Sat 25 Oct 2025 21:00:05 +0000
Manifest next update: Sun 26 Oct 2025 21:00:05 +0000
Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: OZ+/dqeyfSFq0ClJzEvFpqFVv4ShdwlfswTZDP1fr1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2b:de:88:c5:8d:20:be:c8:54:4b:1a:2b:f3:c0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Oct 25 21:00:05 2025 GMT
Not After : Oct 26 21:00:05 2025 GMT
Subject: CN=fe62f1b987ab304c017e823ffe5d1660002e5b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:56:ae:b3:71:9f:62:47:b5:ca:d7:b1:85:
d8:36:c9:e6:ab:64:8e:90:6b:bd:37:66:cf:0f:c8:
08:14:b9:16:2a:f2:f5:54:73:33:8f:26:58:aa:e0:
6b:56:d2:83:91:ac:04:84:6f:be:0e:6e:04:07:bb:
bd:60:a7:71:4f:22:eb:69:6e:97:07:03:d8:43:a8:
26:ff:6f:a2:e9:5b:23:2e:a0:57:53:35:15:d7:33:
3c:9f:48:f4:88:a1:2a:e4:2f:bc:c4:45:96:f5:9f:
7c:ff:ce:25:04:cb:c7:40:03:66:66:98:d2:36:50:
56:e9:2d:5e:a5:13:16:fb:06:76:21:5b:79:93:23:
71:49:9f:c3:44:91:e3:23:cf:49:bb:e7:11:c9:fd:
b3:3b:83:83:fb:d9:06:f8:e9:f7:f1:0d:d5:7a:3a:
c6:74:4b:d6:2a:f6:1c:a8:4c:32:4e:c1:df:d8:21:
89:4c:99:03:a5:da:ec:64:ac:e6:4f:1a:ad:40:ff:
c2:75:06:29:bc:62:a2:de:fe:b0:2e:13:c6:9a:9e:
04:24:54:0e:11:19:eb:e2:e1:ce:01:68:a9:07:09:
31:87:08:37:45:f5:a2:dd:93:a0:ea:38:85:a3:89:
c6:3d:3d:bd:af:10:4f:3e:e4:54:52:41:44:87:3a:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:62:F1:B9:87:AB:30:4C:01:7E:82:3F:FE:5D:16:60:00:2E:5B:7F
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bb:5a:95:d4:03:58:ab:f6:ea:b1:d8:8e:ca:e6:8c:04:47:
81:24:84:68:43:b2:4b:00:a0:6f:10:ac:27:50:49:3d:0d:63:
f0:20:d5:91:14:a8:52:13:ed:44:63:a4:7a:b8:7a:f1:c3:79:
ba:a0:f9:9f:89:37:c4:88:36:7e:d5:20:49:8f:d7:5e:57:26:
a9:93:e8:96:d0:69:84:ac:08:9a:ad:66:e0:28:88:b2:1e:99:
12:1a:7a:7e:1b:f3:ea:34:cf:f1:23:1e:35:d8:37:64:16:27:
6b:3b:70:fc:1e:d4:a4:0e:39:71:b3:2a:35:8f:d9:0b:ce:83:
43:ff:d7:b8:cd:5c:f8:d7:e6:e4:3c:ef:ac:83:5e:87:76:f9:
94:b9:7d:e7:a1:c6:3b:e8:ab:27:ed:72:12:96:ad:61:6e:74:
6f:bb:97:d5:a4:04:ba:7b:fb:99:2a:f5:c5:20:1e:1d:22:18:
1a:ef:db:99:d1:96:f7:68:08:4d:cc:45:57:3c:f0:35:6a:ce:
9f:53:b7:7e:92:e0:e2:ca:83:29:e1:b6:e2:15:24:74:01:2e:
95:90:43:e3:b9:17:15:2f:60:43:1f:5b:1f:b3:ff:bd:82:6f:
e4:fa:00:2e:b1:88:12:69:ae:99:21:b1:17:4d:2a:5b:5a:dc:
f4:d4:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:16:40 2025 by rpki-client