Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: 31qbPX8jBN8p8RJRZgKeRMo0rGBsxWUCJRSzZ6/UztI=
Subject key identifier: B1:79:13:A3:18:D2:BF:09:98:5C:4A:3E:95:61:F1:EF:82:C5:57:B2
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019A71EF020D3C6CA3C23533851A97EC82DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1240
Signing time: Tue 11 Nov 2025 08:01:20 +0000
Manifest this update: Tue 11 Nov 2025 08:01:20 +0000
Manifest next update: Wed 12 Nov 2025 08:01:20 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: 1tujIXmMKyDB33x+1LkmDQOST38i4SJKTYg7oPeMDT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ef:02:0d:3c:6c:a3:c2:35:33:85:1a:97:ec:82:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Nov 11 08:01:20 2025 GMT
Not After : Nov 12 08:01:20 2025 GMT
Subject: CN=b17913a318d2bf09985c4a3e9561f1ef82c557b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:3f:c0:cf:18:b5:52:1f:9f:77:a4:c6:67:
da:67:21:8e:a1:60:08:b2:55:8e:f9:af:4a:b4:7d:
bd:5c:57:91:04:85:7b:35:15:69:f9:4d:63:b7:a1:
6f:62:25:98:68:9f:81:8c:90:60:d1:17:7f:6d:65:
cc:29:57:f7:1e:4e:6b:60:84:17:e5:e7:9d:c4:f9:
9f:ed:13:c4:2f:76:20:06:a7:30:35:8f:b4:1c:3e:
94:ad:ac:da:13:b5:c6:d0:73:a0:18:95:7d:0d:5c:
86:b1:51:47:03:1a:33:cc:65:07:0e:79:9e:1c:02:
ca:f6:c7:8b:53:84:bd:5b:a1:1e:7e:ec:a3:bf:d1:
16:6c:0f:6a:01:64:72:03:97:ea:20:c3:0a:c9:27:
fe:8b:ed:c6:b5:dc:0b:36:a5:c2:3b:f3:b1:b8:a7:
11:21:be:8a:2c:5b:bb:0b:76:09:53:93:07:ba:f6:
38:45:ab:35:58:69:6e:31:e0:31:4f:12:0f:24:91:
f1:81:c8:b4:7f:2f:83:83:33:72:4e:66:b2:76:11:
f0:29:47:e9:eb:d4:6f:e5:64:cd:73:b7:7f:28:da:
ce:f6:7e:cb:e5:d1:1e:8e:dc:58:eb:df:7d:13:65:
3e:8c:48:53:5d:7e:23:86:48:d9:30:a9:9d:3a:47:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:13:A3:18:D2:BF:09:98:5C:4A:3E:95:61:F1:EF:82:C5:57:B2
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:22:eb:d9:1e:1b:c4:54:96:95:2f:63:8b:0a:b3:88:c8:b7:
8b:ef:7a:fc:87:7f:ef:d7:6c:5c:6c:d1:21:18:f7:cb:22:23:
a9:7f:b8:19:97:5f:d0:84:63:4e:e8:46:8d:80:54:84:7d:f3:
05:cd:ec:7a:0b:f3:7c:d8:e8:d2:2b:26:d9:10:cc:61:98:00:
e1:a2:5e:d5:af:08:af:3c:01:f7:68:81:37:75:cc:ad:28:f8:
bf:0f:69:63:1e:8c:e2:35:32:44:57:27:0f:54:8d:cb:3b:20:
a3:83:ed:b5:22:1c:58:46:d2:9a:f0:92:80:d0:1c:6e:d8:64:
fd:4f:13:5d:c5:1a:07:54:12:62:b7:4a:e0:6a:c5:e0:47:1c:
3d:ba:61:d0:09:16:23:6c:11:10:f7:d1:6b:78:6b:ac:63:f8:
92:f4:c9:a8:9a:f7:30:64:b0:45:d8:52:a1:9f:da:98:51:e3:
c7:07:76:24:39:ec:f0:5d:f8:b5:82:7a:74:ae:99:4d:29:d1:
79:aa:f8:35:26:3d:3e:10:7b:0b:ce:cb:06:49:82:d1:b4:5b:
0e:3a:5e:a8:e6:2b:ac:b3:11:55:7d:65:ce:68:bb:ee:f7:2e:
b0:36:84:16:0c:d8:1b:8a:8e:31:eb:1c:c6:43:3b:8f:b0:9b:
82:6d:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:54 2025 by rpki-client