Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
File: gfOofhE2a1RaWhJ7gyh2U7GMilY.mft (raw, json)
Hash identifier: TdpIZpxUww5FdnpEyYyy55HL+reBpQEuSK3lkxeH0lI=
Subject key identifier: 87:26:C4:96:89:7B:7F:3F:7E:3F:2A:D7:E6:60:90:E3:5D:B2:04:03
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial: 019A72266ED28C71932B43DA496559E4052A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
Manifest number: 0104
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: 6P_gjpklOUDV-ve9569qPN1TSWk.roa (hash: nsUb94k03FiZ9rWYZ36yrlnNORo6w84WRFHmo8Sy34I=)
2: gfOofhE2a1RaWhJ7gyh2U7GMilY.crl (hash: pIjbMiTMy/ypM0VdaigXsoKDkKqhGKPsb4vjgJpC81U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6e:d2:8c:71:93:2b:43:da:49:65:59:e4:05:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=8726c496897b7f3f7e3f2ad7e66090e35db20403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:46:b9:bc:c8:10:ee:0b:92:8a:f9:cc:b4:
15:69:58:0c:24:fa:b9:25:fa:70:ea:36:3b:f9:69:
a3:27:99:76:9e:d7:bd:07:29:c5:4c:2e:34:8f:8a:
0a:64:02:e2:ce:4e:73:86:0f:03:f7:f1:b3:75:5d:
3e:ae:2e:75:60:3d:8f:ca:b7:e3:bf:35:2a:27:f3:
22:26:c3:22:fa:5a:40:24:d1:65:b2:c0:9a:db:1b:
83:12:b5:96:12:55:ff:29:cb:ef:9e:ca:4b:71:a5:
0a:d1:01:65:02:8b:79:6a:2c:f7:2b:0b:47:76:c8:
a8:43:27:c7:8c:d8:50:24:50:f8:86:24:14:37:f5:
ea:d9:6b:4e:3d:7e:5d:74:5b:bb:51:76:32:fb:e0:
10:c0:c3:d3:61:61:15:6a:a1:1d:57:76:dd:be:d7:
7c:25:03:5d:ed:ff:c4:04:92:40:c8:08:eb:26:86:
97:29:11:9c:33:11:57:17:a9:fb:88:07:2b:30:3d:
22:4a:93:e1:4b:23:89:12:98:ca:4b:34:8f:72:ea:
ba:f6:31:9d:87:85:b6:53:c9:ce:65:07:0b:f7:c6:
f1:bf:16:f5:56:cd:38:33:e4:81:56:36:a0:4a:07:
c5:2f:e6:2e:e7:ba:69:c7:75:47:aa:4f:7f:0a:3f:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:C4:96:89:7B:7F:3F:7E:3F:2A:D7:E6:60:90:E3:5D:B2:04:03
X509v3 Authority Key Identifier:
keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ce:01:df:bc:e4:63:af:1f:b2:d6:6f:0a:54:91:3d:79:ff:
c5:a0:cb:11:2b:db:98:e6:f8:fd:2c:ac:41:14:ae:19:10:0d:
c1:5f:8b:c7:8c:85:47:29:4d:47:93:74:88:3a:a8:de:43:64:
3c:93:1a:6f:e2:35:15:67:42:40:9d:1a:19:a9:64:35:79:80:
bc:4b:e8:d9:de:d2:0e:e8:f5:60:81:64:b7:18:78:75:b4:f3:
45:df:62:44:31:14:a8:48:53:7a:9a:af:89:88:6f:7e:ae:35:
cf:05:78:98:ee:f4:32:5d:ab:b5:17:d6:12:bc:84:79:1b:ac:
24:88:20:d6:6a:39:02:28:14:81:43:8e:37:73:af:74:5a:bb:
ad:70:04:9e:bf:fe:4b:90:6c:f5:52:a2:d9:93:f2:b1:a3:0a:
7e:01:1f:79:4e:b3:cf:e1:ed:ad:d7:ac:31:69:67:f0:c0:0b:
f8:20:4b:53:fd:2f:b8:f8:b6:da:45:6d:98:08:a8:ab:6f:3b:
8f:b0:7b:0b:49:3c:31:30:dc:8f:e5:b7:3e:1c:44:1f:73:b1:
21:8d:bc:81:f8:94:6d:c5:60:fa:8e:e9:ee:a7:43:d9:f2:d9:
46:bb:bd:4e:2a:98:16:bf:a7:2d:ba:90:ff:97:80:08:e8:6b:
c3:01:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:09 2025 by rpki-client