Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: hPf2u+kwj9al1TdGOl3urEO32DKObF0n29vKFuKauYo=
Subject key identifier: F1:2C:FB:16:03:2E:15:C5:BB:67:77:C7:B5:41:CC:40:A5:90:D1:6A
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 019A722637B1C108BFDD9CA2B492F55F4BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 0425
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: DCnVch+sAiOz1bQKIPrw6NPoIDAyTrxEjer1s4wiHfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:37:b1:c1:08:bf:dd:9c:a2:b4:92:f5:5f:4b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=f12cfb16032e15c5bb6777c7b541cc40a590d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:46:0f:f4:21:f8:88:32:6d:84:98:a4:a1:
92:24:7c:0a:b9:77:63:c8:32:e6:41:54:a6:3f:98:
f3:51:a8:e3:42:7f:c4:f1:c8:c1:5b:92:eb:cf:09:
71:22:83:16:42:b5:08:eb:9b:8e:d3:41:1a:47:55:
ee:88:73:b6:5e:d6:da:3d:7c:1f:f6:61:a8:c9:8b:
b3:cd:ce:f0:cd:55:3a:d5:1b:c6:94:d4:04:42:7b:
d9:00:36:6b:49:26:80:3b:0e:f6:04:70:06:2d:34:
bc:aa:eb:c4:91:6e:af:cc:e5:0c:d1:78:8f:09:b1:
53:68:b8:6f:cf:f3:70:b3:bf:ae:81:f6:1b:b7:f2:
93:36:50:a2:85:d3:2c:7b:20:b0:9c:31:16:4f:23:
8a:00:30:ae:8b:a4:76:e4:cf:62:22:08:98:d2:0c:
c2:63:10:b9:ff:2d:ea:47:c9:7b:be:44:50:f6:5c:
a6:13:d0:2a:77:3e:c3:2a:2b:ba:79:f5:c1:82:af:
18:4d:8b:e2:b7:04:d0:2e:63:d9:5f:aa:2e:48:8e:
98:ed:17:bd:60:38:7e:16:73:90:e1:6e:08:bb:3a:
36:40:7c:a1:c2:40:f0:19:a5:3c:cc:9c:8b:6f:33:
98:9d:87:fd:ac:bf:71:2f:29:8b:a5:83:d7:9b:38:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:FB:16:03:2E:15:C5:BB:67:77:C7:B5:41:CC:40:A5:90:D1:6A
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:89:39:2b:ed:39:84:fb:b9:89:f0:cf:cb:c6:64:c2:0a:
8d:21:9f:c0:ce:f4:86:96:d1:c6:0e:ee:d8:5e:90:de:73:0c:
21:e0:3c:ab:e9:b9:ec:ec:11:4d:8f:dc:c6:b1:80:d7:9d:8a:
9a:b4:08:f5:2d:4c:79:7d:ae:d3:a9:d6:ec:1c:16:01:b9:3f:
af:e8:fb:0a:45:f0:5d:c6:73:9e:21:86:88:46:4c:6e:81:e9:
fb:5d:0b:20:69:6c:b8:25:7f:77:a9:e9:70:37:05:32:44:1d:
10:20:34:26:d3:ca:49:79:b6:f2:56:2b:4f:2d:95:fd:39:4c:
5d:fb:da:15:19:0d:5f:8e:0b:2f:3a:9d:7f:84:44:23:cf:e7:
c9:63:22:a3:44:a4:c4:5a:bc:4b:7a:c4:e9:9a:68:0e:8f:5f:
ce:af:32:7d:a5:85:b6:21:3b:65:1e:c7:be:da:b3:cd:f7:e1:
1f:0b:83:a9:eb:cf:a8:f7:74:34:a0:e5:af:09:84:78:9c:2c:
e1:aa:b3:8d:17:80:93:51:b0:8a:77:78:12:a4:de:65:a1:1a:
6f:29:6a:28:33:76:bb:e4:72:a0:18:3a:84:57:f3:65:af:2d:
c2:0d:3b:3b:57:7a:88:6b:da:41:75:bb:96:d0:1a:ee:25:ee:
43:91:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:44 2025 by rpki-client