Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: Fmqe464TTLE7dBDyLyLmQUwEFkCFCaKg/HTbDKkS2og=
Subject key identifier: 10:7D:41:A8:A9:8F:23:37:AB:6C:03:CB:66:04:70:78:72:12:77:AB
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 019A176174270EED05374955BC95CF763451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 0A3B
Signing time: Fri 24 Oct 2025 18:00:53 +0000
Manifest this update: Fri 24 Oct 2025 18:00:53 +0000
Manifest next update: Sat 25 Oct 2025 18:00:53 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: a5ydEn5Nj37asF9XhfOq4Y2vi51qdgtnEk6KGZaKm9c=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:61:74:27:0e:ed:05:37:49:55:bc:95:cf:76:34:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Oct 24 18:00:53 2025 GMT
Not After : Oct 25 18:00:53 2025 GMT
Subject: CN=107d41a8a98f2337ab6c03cb66047078721277ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:28:e7:f5:16:06:cc:8e:48:96:b0:f9:d3:
39:85:98:a7:cd:ca:60:e9:a7:79:83:88:70:c6:3f:
db:47:05:b3:81:90:a0:24:e2:a0:27:49:01:6e:21:
23:24:19:7b:55:45:b5:90:f3:1b:a7:70:ff:03:89:
73:f9:6c:ba:b7:98:24:92:6d:74:e6:30:e0:6a:98:
12:96:b0:1c:48:9b:00:90:16:0a:7e:8f:0d:95:ba:
2f:5b:6e:b2:38:bd:e9:6b:62:39:e6:81:5b:e3:d2:
72:26:e4:17:77:b1:5f:7e:15:f7:ae:6e:dc:5f:26:
e5:56:46:81:25:d0:c6:01:db:ad:6a:6a:1f:d5:8a:
16:67:83:4b:f2:42:e4:29:2e:95:f5:15:8b:f8:f3:
bd:bd:8c:fd:6c:26:a7:51:ac:b9:d3:0f:18:88:24:
e4:68:43:9c:d4:9e:7a:ea:24:91:5c:eb:ec:3e:0b:
de:2b:37:fd:af:7a:f4:58:6d:e9:e0:5a:0e:ef:97:
59:01:70:8e:e4:87:76:90:73:13:fe:9b:09:5d:52:
30:cf:d5:1c:2f:93:c3:e0:9d:72:e9:8a:3f:5d:7e:
28:9e:db:d1:72:e3:e4:5b:ec:02:9c:db:12:80:aa:
83:fd:31:aa:0b:d1:db:9b:75:a1:05:8a:1c:b5:de:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:41:A8:A9:8F:23:37:AB:6C:03:CB:66:04:70:78:72:12:77:AB
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e9:6c:cf:ec:73:b3:7a:5b:d0:97:33:e8:19:5f:bb:73:81:
18:dd:51:74:d4:44:e4:e2:ca:3e:77:92:d2:e4:ac:54:9a:77:
ca:75:c1:52:d4:cf:78:b6:cb:fd:7a:a3:1c:e4:14:a3:22:f0:
ae:0d:92:42:c9:dc:3f:10:af:73:11:f9:48:34:b5:ef:2b:b8:
71:92:73:3d:44:0e:51:9f:74:75:a7:4a:87:a4:69:62:1b:ac:
91:72:8a:f6:82:2e:4d:b6:58:43:8b:de:59:e3:e8:a4:de:28:
fb:74:b4:1a:82:ff:24:a4:e3:7b:87:38:ac:ce:34:86:72:93:
59:32:5a:4c:d0:5d:6b:c0:c9:48:23:4a:3b:94:f1:d7:4a:4b:
4a:48:6c:27:b5:1a:f6:e5:66:ad:36:a4:aa:43:c2:a2:13:ab:
32:2e:ba:1b:1f:57:9c:34:fb:61:a2:b0:01:e2:7f:31:f5:ff:
bf:f6:58:7d:fc:72:04:ef:c0:36:f6:86:c8:18:18:34:98:f3:
35:17:27:ae:cf:6e:01:e8:f6:10:b9:37:6a:05:9f:f3:c2:f8:
89:26:de:df:3d:1a:d2:bd:6a:48:7b:f8:9f:39:9f:37:3b:9c:
e6:77:3f:2b:a0:18:19:5e:77:0d:db:c6:cc:50:93:25:3d:3d:
4b:45:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 01:57:21 2025 by rpki-client