Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: zkh3XUYDr+s0KmhkVz1IY8jiVFatgqE1iT51U3Uweok=
Subject key identifier: CA:1E:A1:26:E7:4B:78:EF:81:70:4D:1D:43:2E:7C:A7:2D:B8:3E:68
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 0199529E3357D8875F2F8B34F1F7A2962FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 05DB
Signing time: Tue 16 Sep 2025 13:02:03 +0000
Manifest this update: Tue 16 Sep 2025 13:02:03 +0000
Manifest next update: Wed 17 Sep 2025 13:02:03 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: uP7Ew9YBim0+LSeEiE/+b2QQjkGa9sHR4+07dh2T6R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:9e:33:57:d8:87:5f:2f:8b:34:f1:f7:a2:96:2f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Sep 16 13:02:03 2025 GMT
Not After : Sep 17 13:02:03 2025 GMT
Subject: CN=ca1ea126e74b78ef81704d1d432e7ca72db83e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:fb:76:03:ce:8f:b9:97:c0:07:0c:f0:74:
b7:95:5f:d6:06:09:71:f7:df:87:fc:b6:a6:67:bc:
54:00:be:f9:11:e4:c5:7e:28:63:52:cd:fc:a4:41:
e1:10:18:04:c7:d0:a6:15:b1:94:4c:a6:09:82:4b:
92:07:41:14:6d:9f:8c:30:b0:87:dc:53:f8:f7:51:
fd:de:c5:f1:39:1c:1f:c2:69:3c:b0:4c:19:7b:25:
b8:b0:58:55:22:48:0c:77:d3:71:c5:40:b3:54:82:
9d:d6:5f:3c:c2:3c:1d:0a:53:b0:0d:5b:f2:ca:39:
05:a6:04:8f:c5:a7:0a:28:74:b1:c0:4b:86:da:6b:
00:d2:58:81:c5:6f:85:18:b8:27:45:72:66:58:09:
fc:47:85:7c:da:2c:29:b4:87:9d:de:67:40:8d:a5:
35:56:c7:e9:4e:11:87:a1:00:95:5c:dc:83:58:10:
25:f3:59:81:d4:0a:f8:d4:a7:36:1a:ec:5a:ff:a3:
de:fd:fc:20:24:7e:02:24:72:38:a0:ea:ef:9e:27:
54:5d:91:8f:1f:5d:2f:9c:65:be:d6:6e:5d:77:a4:
76:e6:f8:9b:f1:20:9c:b6:9f:f2:39:a6:46:a2:b2:
76:3b:a8:c3:68:11:c0:7d:6a:3f:a5:b3:6a:ed:07:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:A1:26:E7:4B:78:EF:81:70:4D:1D:43:2E:7C:A7:2D:B8:3E:68
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8b:60:ef:fa:60:d1:f8:e4:f1:1e:4b:6d:a3:31:a3:68:82:
f9:c1:1e:fd:88:d5:e6:4d:cc:e6:f6:77:31:a8:28:34:99:fb:
13:19:2d:2e:9f:63:a1:2c:68:a1:38:53:f0:01:17:15:9a:88:
24:c6:0c:5d:a0:cf:5e:d8:54:fd:3a:18:b8:62:b6:62:0f:97:
49:eb:66:fc:66:be:64:4d:86:f5:48:47:d0:8d:a4:b1:71:fa:
4b:18:c1:07:c5:95:d1:87:3b:f7:3b:68:20:b7:1e:51:88:52:
48:26:56:e1:cb:09:ba:41:4e:be:42:de:ff:50:1c:05:4c:0d:
03:cb:78:26:a5:65:58:03:73:b3:b4:f4:9e:8c:72:32:3a:f6:
fb:7a:60:f1:ec:7d:aa:1e:5d:2f:3f:4a:40:0a:43:bf:de:fd:
ed:a1:aa:df:55:ab:b1:e8:c0:a6:29:99:c2:42:67:17:4d:24:
cd:6d:d3:e3:61:6b:06:cd:3a:f7:67:38:b3:84:9c:0c:b0:e0:
64:15:7d:39:b2:8b:04:ff:64:97:a8:7d:78:58:43:d3:8a:7a:
42:19:bd:83:e8:04:8e:67:ff:e1:08:22:1f:a1:67:60:43:e5:
32:b5:9d:40:4f:37:93:17:2b:05:bb:af:49:84:01:c1:dd:5b:
0d:de:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 21:39:56 2025 by rpki-client