Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File: gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier: zWTN25/ZFIGDOBjBkV6peKN1KlL2YYel7vQWyjKFS6c=
Subject key identifier: 8C:85:E9:1F:7C:19:6C:3A:B8:81:5D:10:D4:5B:79:40:75:53:5E:BB
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial: 019A7149B09D8344E7CB8B71CF300710A013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number: 0632
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: +0WsE4wZR2M5VptQAfDtyV50uXC9SsPeq8+8TkSNcts=)
2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b0:9d:83:44:e7:cb:8b:71:cf:30:07:10:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=8c85e91f7c196c3ab8815d10d45b794075535ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:85:65:cb:62:6d:8d:1e:0f:9f:1a:65:5a:
90:6e:3d:05:45:4a:b1:22:8a:6d:2e:64:f3:ea:cf:
0f:69:84:66:22:93:89:f8:0b:b0:d3:c3:9a:ca:4b:
84:e7:5d:c1:be:b4:f4:57:7c:31:f0:cc:56:39:32:
16:dd:d4:94:db:06:40:ff:19:fe:34:a1:4a:b3:cc:
0a:71:5d:00:15:8c:1b:b4:61:7e:bb:29:6c:f6:5c:
60:6d:71:74:a2:d9:a0:e0:6b:81:92:04:06:9c:be:
55:8b:9c:a6:67:08:0a:f6:58:53:d9:4b:de:20:12:
3b:bf:6f:f8:30:b6:1b:0e:52:c5:63:6b:ec:19:89:
e2:05:1d:3b:c6:2f:5e:6d:2a:a6:75:94:49:a5:a4:
f7:70:60:86:99:94:f7:9e:30:a6:17:35:12:6a:11:
ea:77:18:9b:21:29:b3:6b:a4:04:e0:69:23:40:38:
1f:74:ee:8b:48:a1:49:18:35:e7:63:70:20:ab:09:
70:4c:29:a7:50:73:67:56:b8:e4:56:05:5a:6a:ac:
62:1a:92:dc:2f:be:4a:5c:5b:30:6d:c0:15:b3:71:
1a:18:a9:4b:d4:6d:34:c5:20:cc:b1:51:f0:fa:fa:
76:a2:c4:60:7c:22:65:94:dd:27:03:8c:f6:d0:f7:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:E9:1F:7C:19:6C:3A:B8:81:5D:10:D4:5B:79:40:75:53:5E:BB
X509v3 Authority Key Identifier:
keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:08:d2:ab:10:e3:51:d1:83:38:53:05:a9:fb:91:ec:5f:f0:
27:c2:00:4e:08:71:b8:51:dc:d6:ef:a2:49:d5:b6:79:20:54:
93:d7:b9:ac:c3:a2:58:7d:b0:1e:18:63:cf:84:e4:a2:60:df:
ff:6b:11:04:e8:70:a7:0a:70:36:2d:cf:b6:56:78:77:a9:75:
1f:6f:83:a9:e1:50:58:dd:76:5b:9f:9a:fb:61:68:2e:4c:e7:
a8:f2:3a:74:5f:ed:29:0e:9c:9c:3c:61:3b:d0:d6:36:d4:b4:
4d:e1:cf:12:d8:7b:15:59:5c:df:7e:0a:9b:bc:f6:b7:60:76:
f0:d3:b2:ac:e5:33:16:26:58:d3:8b:43:a6:ac:ac:bf:d2:bf:
c1:89:52:3e:e1:63:fa:a7:c2:99:ca:52:19:67:0c:22:b5:e3:
7e:ab:1d:1e:33:23:62:b5:4c:a2:f9:e1:33:e8:8e:ec:23:ea:
bf:1d:a0:97:cd:86:63:c8:33:3e:6d:5d:a2:91:27:34:35:7d:
48:eb:1f:e9:61:3e:54:6d:c4:9c:c0:90:12:71:82:fc:5b:eb:
d1:21:09:d3:61:83:ad:23:9f:a8:ca:48:a5:2c:62:51:80:42:
2b:ab:d7:7f:9e:7c:7c:91:6d:dc:bf:f5:50:d6:69:0e:da:12:
af:61:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:25 2025 by rpki-client