Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
File: gjptycYnXW8k-Z3kFmCcYihYlt8.mft (raw, json)
Hash identifier: 6+X0Hww8gKCzf3XrtLsHvwU5SjDJQT+A1zXKFqnd+/M=
Subject key identifier: F3:D9:F0:E3:77:3C:93:CD:55:69:07:8E:AB:42:54:64:C4:C6:D2:B1
Authority key identifier: 82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
Certificate issuer: /CN=823a6dc9c6275d6f24f99de416609c62285896df
Certificate serial: 019A71132D86C51534B04211D704B04D64A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
Manifest number: C6
Signing time: Tue 11 Nov 2025 04:01:13 +0000
Manifest this update: Tue 11 Nov 2025 04:01:13 +0000
Manifest next update: Wed 12 Nov 2025 04:01:13 +0000
Files and hashes: 1: NffDktQuVy0NogDD09U6PC5HmAQ.roa (hash: y6i7rh8IsEpcOTBzp8E42OtcSaXWP9UqmHzWItp6aDk=)
2: gjptycYnXW8k-Z3kFmCcYihYlt8.crl (hash: CC81wKkdA4uOL1PrX4FUfZc/gDZAbjnKyJGFg+HcUgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2d:86:c5:15:34:b0:42:11:d7:04:b0:4d:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823a6dc9c6275d6f24f99de416609c62285896df
Validity
Not Before: Nov 11 04:01:13 2025 GMT
Not After : Nov 12 04:01:13 2025 GMT
Subject: CN=f3d9f0e3773c93cd5569078eab425464c4c6d2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:51:f9:14:4c:44:83:20:22:29:78:2d:ed:
00:07:7e:e1:8a:be:30:72:59:45:75:2d:70:be:3f:
62:43:45:35:80:28:c5:ba:0e:28:34:57:4f:cf:90:
b8:5b:74:2b:79:2c:88:10:9a:fe:67:c4:c6:9b:88:
64:9f:9b:22:61:f3:f3:12:da:19:8a:74:4e:9b:fe:
58:37:97:36:31:63:64:e9:5b:0b:d8:d3:05:9a:d3:
a6:ad:7d:b1:be:21:2a:22:96:7d:ac:c1:71:76:65:
8a:e4:66:2d:47:9d:37:f8:71:72:99:59:88:94:1f:
92:ba:72:96:af:a2:d3:99:c4:8f:aa:83:88:e8:2d:
34:77:a2:a3:bc:36:ff:2e:90:81:ee:1c:76:b5:c0:
54:8c:b4:cf:c7:c8:5c:ad:2f:69:8a:40:35:9a:64:
8d:49:41:1e:5a:03:51:bc:3a:2e:bc:15:16:90:f7:
7b:57:b0:7d:83:63:5a:fb:fc:d0:d0:78:f0:08:2e:
9b:64:c3:27:c6:7c:5a:9e:5c:bf:01:9a:89:72:aa:
86:fb:65:3c:fb:d1:49:b7:21:b6:8f:34:6d:47:21:
cf:a2:63:f2:3b:e5:64:71:9c:50:41:68:90:86:cc:
db:85:09:99:b6:3b:93:82:92:28:14:ef:88:ba:21:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:F0:E3:77:3C:93:CD:55:69:07:8E:AB:42:54:64:C4:C6:D2:B1
X509v3 Authority Key Identifier:
keyid:82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c1:2f:0c:4f:96:08:d2:ea:4a:fc:c8:b0:84:85:a0:6b:da:
b7:a6:53:74:78:c4:68:d4:6a:99:d0:7b:be:62:a1:32:ff:be:
0c:b8:d7:e1:ec:e3:6d:83:51:0e:0c:4a:90:f2:4e:e0:36:45:
80:41:23:26:b2:6b:91:3c:90:aa:f6:fa:53:dc:37:58:85:96:
bf:90:e3:14:ca:cf:ec:e3:e3:4d:37:e8:2a:51:b5:35:7c:1c:
98:af:40:ec:c7:8c:70:c0:51:bd:4c:5e:6a:04:fc:7f:b7:b0:
97:98:46:20:da:18:bf:9e:5f:fa:d8:31:ed:b2:3e:04:f1:56:
96:91:47:dd:9d:17:ac:90:f2:3f:8b:c0:d1:29:7b:cf:d4:ec:
d8:68:af:15:c2:c9:0d:ca:ff:4a:ff:34:7d:c8:ea:9f:2d:d8:
94:8d:96:75:ad:d5:e0:4b:db:c0:25:d7:d1:52:28:0f:7b:59:
06:a8:71:cf:a8:40:b8:fa:b7:37:58:7e:e9:02:c9:66:53:c0:
9a:ca:a8:c5:30:ed:9f:33:c4:98:c0:ae:f1:5d:9d:b0:27:e4:
ec:80:5a:c8:2d:9a:53:b7:2a:3e:a8:54:f2:76:24:7b:47:49:
f1:a5:de:b9:28:c8:0f:3e:67:d3:35:3e:a9:f1:05:94:0d:18:
1d:6e:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:22 2025 by rpki-client