Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: iNRSyu4B8WHB7ec8yqMVl0+F8AJDJT9YFnq7S4K7g5Y=
Subject key identifier: 85:AB:0C:5B:3D:51:7F:7B:FE:04:BC:5C:FB:F9:DF:F4:2C:3C:48:27
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 019A71B8321607E0DD68367837F2B66E7122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 15F6
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: Mwj1J6jhI1pMsE2EdHDNjLIxXdu83zKrVP0tujP7CSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:32:16:07:e0:dd:68:36:78:37:f2:b6:6e:71:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=85ab0c5b3d517f7bfe04bc5cfbf9dff42c3c4827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:70:a7:51:5e:93:4b:0f:20:5f:b7:90:11:
0e:31:88:22:ba:ef:c0:e2:22:ae:db:a6:90:1f:22:
4c:49:bf:d4:85:ef:c2:83:9c:a4:a0:99:3f:cd:5f:
9f:f6:f0:17:dd:58:4c:81:92:5b:68:7a:15:be:71:
f8:4e:a4:a8:bb:cb:7d:1b:2b:94:f7:79:cb:7a:d1:
c4:94:52:28:e7:b7:99:7d:48:eb:70:95:54:e6:1d:
59:bd:68:21:3f:80:f1:1c:88:e3:b8:d7:30:49:bf:
d9:39:c4:d9:b2:ae:de:6f:fb:b4:b1:0e:39:39:7e:
b4:8f:81:da:22:66:25:44:6a:57:7a:1a:d8:77:bd:
2b:16:be:b3:b2:8d:9e:69:3e:0e:15:00:38:de:a6:
2c:46:c0:fa:aa:ba:64:e3:ab:93:40:1c:0a:fd:05:
ce:54:07:0b:32:db:f8:b6:84:f8:4e:f2:b2:5b:5c:
7f:e8:41:53:5d:4b:ec:c6:df:90:40:e8:ed:96:78:
2c:56:3a:fa:93:7a:85:61:85:8e:bb:6d:7b:67:48:
8b:82:be:61:d4:e8:53:e9:df:85:8b:4c:dd:92:48:
72:25:b5:28:6f:63:c6:9e:1f:f1:c5:13:e5:13:fa:
48:ef:51:c0:2a:14:13:97:ec:d6:59:49:a0:69:4e:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:0C:5B:3D:51:7F:7B:FE:04:BC:5C:FB:F9:DF:F4:2C:3C:48:27
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:bb:30:87:65:42:d9:53:f8:f8:c4:14:5a:16:9b:6d:2c:
f4:85:f8:ce:06:7f:29:1d:50:72:2a:e3:40:9f:ee:cc:6d:59:
d3:76:a1:42:e8:3b:b9:61:ac:a2:9f:5a:c5:20:72:f3:b8:fc:
93:52:6b:f9:01:e6:a6:81:74:31:5d:ac:c0:f8:ea:de:59:92:
36:6c:60:b9:ff:e3:91:12:cc:0c:2b:ff:ad:d4:cc:df:49:af:
d4:51:76:71:02:71:3c:25:68:82:7c:7b:13:ce:b4:6a:00:9f:
d7:1a:05:d7:28:4d:40:f5:fd:88:df:e1:17:93:9a:41:f5:d8:
2b:ce:37:01:48:9d:d1:34:2d:fd:4f:ea:49:6b:6d:ff:51:3d:
1f:c5:3a:f4:60:c1:c4:f6:f0:b6:2b:43:67:79:ab:7b:f7:a8:
ec:80:74:64:fd:6f:5b:de:12:95:2a:d2:92:38:10:a1:14:1e:
c2:20:31:ca:cf:3b:88:fa:89:b8:e5:e4:6d:e9:05:8a:1f:0d:
55:de:ad:0f:a9:fe:d1:b8:a4:8e:9a:7b:e3:89:96:1c:c0:00:
c3:34:08:30:2c:53:c2:8a:cb:7a:de:a7:aa:43:d8:50:75:f1:
9d:43:2d:f7:8b:6e:bf:62:03:c9:48:8f:da:b5:c9:4f:36:bf:
59:da:56:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:14 2025 by rpki-client