Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: vkM0EDdVpBnlJJZZzQcGLAltcZE+CBSkr4BGS2zp0Bw=
Subject key identifier: C3:26:D5:8E:10:63:0E:A3:C1:A2:73:B6:48:D8:64:2D:C3:A4:A7:32
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 019A725CC34458BE825FF15A07A0AF88151C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 0670
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: N9MCc+yCl/cDYxENKSebcc630O7Lgv+8MTjZEnVW4gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c3:44:58:be:82:5f:f1:5a:07:a0:af:88:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=c326d58e10630ea3c1a273b648d8642dc3a4a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:55:32:42:e4:48:0c:e0:e2:18:72:32:fb:
d0:b2:9d:19:ae:db:8f:bc:d3:6d:59:4d:3e:5a:e8:
26:9b:61:e1:0c:f6:e7:02:17:0e:07:9a:3f:72:8f:
4a:9d:ba:b2:04:77:79:6e:a7:f8:45:09:d6:16:a8:
2b:b8:86:af:2a:20:f2:f1:7a:b6:ca:55:06:35:61:
b1:cc:81:45:5a:d2:a8:b5:2f:20:ad:93:49:fd:96:
b1:80:ec:11:f5:a2:3a:30:96:a1:04:b9:6e:3c:5c:
08:23:e5:ca:91:34:22:4c:cf:12:30:51:12:43:97:
79:7c:5f:d8:00:7a:73:fe:7c:a6:cb:2a:89:f9:87:
3a:4e:62:fb:a4:e8:6e:75:28:8e:45:13:84:27:cd:
30:e2:18:c1:d1:85:f9:1e:db:93:8e:e6:ac:60:52:
c5:79:64:66:a2:ff:0b:90:b9:3f:29:30:2c:db:28:
8f:ae:d6:96:c3:9e:ff:37:53:09:90:7d:d7:f6:83:
85:9c:be:0c:f7:e2:6c:40:eb:43:43:eb:c8:a7:1e:
b0:18:f7:b7:b0:d9:ce:ac:b1:bd:f8:7f:13:bd:32:
40:44:0e:5d:fc:d0:f0:63:0f:8d:5b:96:57:71:cb:
af:64:c9:58:52:7a:89:21:04:15:61:cb:31:bf:b7:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:D5:8E:10:63:0E:A3:C1:A2:73:B6:48:D8:64:2D:C3:A4:A7:32
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:2d:ca:de:63:82:67:27:fb:e2:41:ea:02:8d:54:77:fa:
e5:62:bf:8f:d3:a5:0c:b6:d8:42:05:0a:96:d4:5c:d1:e6:ac:
43:b4:e8:9c:0c:6c:a6:84:8f:25:8c:19:d8:e4:8b:90:b7:52:
54:f0:7a:c6:97:ab:fd:18:06:c5:95:00:d4:3e:db:ea:98:86:
59:2c:be:b1:71:ad:76:89:bb:23:3c:41:c6:2d:5c:ac:f6:7c:
f6:8c:df:f8:50:6b:f5:a7:0d:97:8e:d8:34:ec:19:93:71:32:
c4:dc:b1:6e:8a:bd:d0:92:27:cc:34:88:83:70:89:6b:ea:03:
4d:1c:29:e3:08:cf:06:7f:28:54:76:6f:8f:2c:6b:a3:06:dd:
30:eb:19:46:fe:24:8a:6e:c4:39:83:56:49:eb:3e:ee:0f:e7:
03:a8:60:ac:b3:7b:59:cb:f5:c6:f9:d8:1c:8c:d3:60:4c:4f:
94:19:4e:5d:ff:d4:56:42:c6:df:c7:c6:15:60:0c:c6:48:df:
b1:27:3d:90:2b:41:4a:59:72:5c:e6:3a:1b:ba:aa:da:b8:f1:
3a:4b:ed:98:44:c7:ad:ec:b9:4f:f8:42:38:85:fb:33:88:00:
b4:eb:23:bc:56:c2:dc:df:cf:fc:f2:c1:71:e1:bc:a9:3c:a5:
be:10:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:35 2025 by rpki-client