Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: ASP89mHSRyP0rfC1zlTIlPx2/9+mnLGpHFGTA6QzYFM=
Subject key identifier: 87:24:73:23:5A:61:1C:54:D1:E2:46:E6:21:B9:88:A8:4B:D4:0A:28
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019A7149BF12912E4E38EF875146A9BF0640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: YX/P1kxnfbaDLLojzUx6GXAuQayd0SqORS5tVCcSC0I=)
2: SOh-9AAaSpzRiCALvSALovJFWu8.roa (hash: Tovu+fswKVdq06B1Pl/w9wlU78BC7j3d4snPXyqHjIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bf:12:91:2e:4e:38:ef:87:51:46:a9:bf:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=872473235a611c54d1e246e621b988a84bd40a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:ad:d1:32:21:27:3c:d4:bc:19:09:99:6a:
7a:4a:a0:f5:e6:80:51:dc:87:a8:c3:4b:ed:d6:4b:
7a:98:30:bd:fe:16:fd:7b:09:21:a8:3a:8a:fa:e7:
8d:ea:00:46:4f:02:a4:6d:76:99:91:71:0e:37:61:
b6:bc:27:3a:bc:62:3c:74:af:74:52:f8:22:ea:0f:
fb:f7:d6:9b:f3:83:05:b8:c7:c5:45:cc:8d:b1:f3:
02:f3:1d:24:c8:75:fd:29:ba:ce:b4:e3:93:d0:26:
8b:31:ed:10:19:b3:cc:07:ab:1a:db:b1:4c:0f:93:
1c:56:9e:67:85:58:30:41:e8:45:ee:d6:d6:ff:db:
2d:6d:54:b5:2c:94:cb:b4:2f:61:ff:31:c3:bf:88:
b8:65:28:42:3f:5b:12:0c:1b:af:40:08:46:65:e8:
50:55:cc:92:17:31:5f:36:52:88:a1:05:48:9b:1e:
20:42:c8:05:eb:f5:e9:38:1d:50:f5:ed:09:69:07:
c6:e8:f8:c1:c3:6b:3b:cc:ed:7d:8a:37:0c:85:ba:
78:42:5c:df:4e:54:b7:8e:3d:6a:ad:0c:43:ad:2f:
7d:70:d1:51:cc:a2:e7:f8:b3:30:78:85:d1:3f:4c:
f2:dd:c8:e7:50:d3:c0:06:34:3f:b4:bc:1a:e6:66:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:73:23:5A:61:1C:54:D1:E2:46:E6:21:B9:88:A8:4B:D4:0A:28
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:cf:d2:4b:da:1d:df:69:78:7c:de:b1:9c:8a:a7:36:24:
f4:ef:28:10:e7:28:39:2c:8b:bd:4b:30:ab:34:11:14:af:3e:
b1:c7:b5:bc:e8:c5:3e:4b:fc:bc:5f:a7:f5:4c:22:63:92:83:
88:59:73:01:6b:9f:31:03:55:c8:f2:64:81:44:df:b1:bc:09:
a4:1f:04:af:47:65:ad:79:a4:e0:3d:85:9c:4b:bb:82:f2:2e:
34:77:5a:78:41:aa:d7:7a:4a:b5:e5:54:82:19:4c:ac:cf:00:
a4:4c:20:2f:9a:79:df:6a:68:9e:e0:0d:54:04:ad:82:82:f4:
38:f1:7e:29:23:9a:37:24:82:b7:7e:49:68:80:c8:3e:9c:24:
47:26:24:c7:71:42:4f:4b:07:39:66:72:c2:8a:ea:34:d1:7d:
a7:f3:8a:a3:f8:84:c0:ed:c4:20:63:2d:42:c9:e5:78:c6:dc:
04:b7:f2:f0:52:10:1d:83:c3:55:3a:32:58:aa:bb:ac:01:15:
fd:12:3e:47:3d:8d:31:82:3f:2f:c5:72:05:16:b2:a3:9d:68:
6b:f5:36:24:9c:76:96:ef:d8:32:30:52:8a:23:95:91:e7:ad:
06:54:e9:57:7b:d6:7a:f8:ba:fd:20:ca:5a:d0:eb:65:b6:75:
43:d8:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:54 2025 by rpki-client