Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier: QRyCKlIAfjPXoV6hVX1jRb2LFidctu19940ycwnGLG0=
Subject key identifier: 05:0B:5D:98:F4:B8:52:81:6E:D1:49:1E:58:79:5A:A2:8C:22:1C:5F
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 019A71B926D059F4442C9576E076470BB157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: KlnzqL5Va9bphI9OZ9lIgV2CmdroWHCR21f+V/8Y7As=)
4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:26:d0:59:f4:44:2c:95:76:e0:76:47:0b:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=050b5d98f4b852816ed1491e58795aa28c221c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:88:33:42:88:14:16:8c:2b:56:b9:00:05:
06:ff:0f:07:4b:22:8f:f4:3d:53:04:d5:01:9c:d5:
53:53:e7:1c:23:cc:c5:73:45:87:51:c6:1b:1a:97:
f8:70:1e:68:a1:50:ad:96:83:09:6c:14:1c:ec:d1:
68:55:16:08:cd:4e:8f:dd:bd:cc:3d:be:b0:4d:4d:
0d:3b:2c:55:20:1f:ed:fd:49:73:6a:93:01:b0:78:
a0:46:64:75:f8:d9:2d:0a:bb:7e:2d:ce:89:20:c0:
61:46:96:c7:61:f6:29:8e:bb:52:1f:51:fc:c4:d7:
86:69:60:88:ca:2e:e7:90:5c:69:43:0b:95:f1:31:
b3:79:9d:b0:4c:d5:37:7b:62:1a:43:47:b7:cd:be:
67:20:3e:fd:18:be:fe:ee:23:71:d1:e2:43:5c:c3:
6e:f5:37:8d:09:6f:8c:6c:9d:28:1a:d9:54:c9:5d:
61:d9:b6:7a:3b:a5:12:85:b9:38:ad:2f:88:4a:2a:
ec:26:87:99:2e:44:22:dc:59:48:60:2d:29:9e:74:
32:1a:70:44:da:ff:90:55:e2:06:82:01:c6:d8:e1:
3f:3d:c9:90:0d:8f:6d:64:9c:d1:45:2e:66:75:82:
56:9c:a5:13:8f:d6:b4:d1:d4:f0:a6:b4:e9:60:62:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0B:5D:98:F4:B8:52:81:6E:D1:49:1E:58:79:5A:A2:8C:22:1C:5F
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:30:35:9a:4a:4b:92:c9:4c:6f:6d:92:7f:0c:c5:a6:0c:a7:
5f:79:d6:07:91:02:9e:0c:37:1e:c9:0d:ca:93:49:37:6f:98:
6e:01:74:8b:a0:eb:ec:e6:6a:6b:59:1f:5a:89:87:7d:15:17:
ae:4b:f3:52:9a:4f:d6:88:c8:0a:fb:eb:09:09:e2:5c:9c:20:
13:6e:ca:1e:14:80:62:33:b9:3f:7c:a6:e6:dc:58:6c:e0:aa:
0a:e6:02:01:24:8a:48:40:97:08:f4:b9:b6:84:33:5a:6b:e6:
6a:b8:c1:60:28:91:72:b2:3c:8f:7a:44:35:91:0c:2a:a6:94:
e4:f7:c7:9b:4b:bb:91:87:a3:79:fc:19:91:43:29:aa:02:d0:
37:54:d5:dd:82:26:cb:40:03:81:7f:f3:44:44:bb:49:14:00:
30:9e:e9:18:80:7b:f1:85:ef:86:b4:6f:69:44:5d:a4:9d:e8:
c7:c8:72:5e:1f:a0:32:f8:c8:ae:26:53:38:e5:5d:fd:cb:73:
30:09:82:11:73:bd:3c:6c:a0:3e:28:ae:33:62:04:72:81:43:
74:2d:ff:b5:0e:94:00:ce:a8:c6:d2:68:a4:4c:85:e0:0d:52:
57:00:14:7c:de:18:ea:17:4e:3a:70:8f:c7:be:7b:62:38:71:
95:56:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:43 2025 by rpki-client