Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
File: gXRkmx7wDcg8KFOaOdKQs1MO37A.mft (raw, json)
Hash identifier: 2tTL7QZvKd2IXWc9t1kLmbasyjo/8V9bNYwX8QZbg7Q=
Subject key identifier: 6C:76:5F:06:77:54:BF:03:52:82:C0:B6:31:46:6A:C1:6B:2C:4E:CB
Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Certificate serial: 019A722645C198FE40F54EE78BFCD9E75DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
Manifest number: 022C
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: GQ42kTqn472NU0Utg1aKLG7W0bI.roa (hash: oM3P06tzeH7/sG3RLnC5jVN3WHhv6hvEc5nYDWBm418=)
2: gXRkmx7wDcg8KFOaOdKQs1MO37A.crl (hash: 89NIIC7MPM9DN5IRwj+1yfmbUDKaTiXy1lnh44+QvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:45:c1:98:fe:40:f5:4e:e7:8b:fc:d9:e7:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=6c765f067754bf035282c0b631466ac16b2c4ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:0e:2c:39:30:7f:88:01:22:a3:21:ba:18:
62:fc:12:15:a0:94:0f:72:65:7d:64:0e:20:ea:68:
13:a6:bd:58:3c:db:92:80:5c:83:8e:4a:cc:5d:e8:
0c:d7:65:3f:92:55:c6:a7:a4:9b:41:08:09:b5:a3:
63:2f:f0:15:b3:a1:2b:6a:87:2d:e9:d0:4d:80:de:
df:a3:50:23:86:2f:ec:0f:5c:ab:2b:a6:a9:46:58:
e6:c4:7f:8f:e9:cf:82:ee:3d:d6:bb:59:4d:6c:56:
28:4f:8b:ef:7a:55:4d:ee:bd:70:0c:0c:c4:83:4b:
f8:17:0c:d0:42:95:96:ea:67:4f:48:f5:ec:6c:34:
c0:b4:36:86:3c:82:c5:d0:e4:90:31:4d:0a:5a:1a:
88:22:4b:a3:c9:9b:f2:e2:d7:eb:25:6f:50:41:fa:
e7:8b:bf:de:ae:c2:5e:4e:91:31:d9:23:18:bb:0f:
cd:12:2a:70:53:6b:63:38:37:c4:74:9f:2c:85:98:
d8:38:0f:59:8f:98:4f:12:21:5a:e0:22:b3:56:6e:
3a:9d:c5:98:4b:e8:33:e4:8d:bf:5e:e6:54:4b:7d:
06:75:f6:b4:c9:dd:83:ee:5f:3e:c8:35:41:69:34:
22:3d:cc:99:6f:40:6a:e1:79:75:f1:d0:ac:92:59:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:5F:06:77:54:BF:03:52:82:C0:B6:31:46:6A:C1:6B:2C:4E:CB
X509v3 Authority Key Identifier:
keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:aa:b1:bc:0e:55:ca:b0:16:b2:01:69:34:ec:ad:de:88:3b:
1f:08:45:4f:a7:58:19:2f:31:ae:ac:a4:6c:56:9a:cf:0e:1e:
81:72:2c:a9:23:36:66:eb:f4:fe:76:2c:d8:77:5d:f7:c3:7a:
b0:15:7b:9b:a2:1b:4c:a1:b1:f2:de:9d:a3:f7:21:f5:b6:d5:
c1:c9:9b:66:fd:66:ee:84:0e:55:02:0d:18:02:3b:10:ce:64:
25:70:e8:61:dd:11:2f:c8:9b:db:b1:af:55:57:4c:ea:13:7b:
93:85:e3:0c:c2:d0:80:1c:0d:ec:46:d5:cc:9d:34:22:13:fe:
61:a2:09:fe:7e:87:0a:e8:6f:3e:68:3c:74:28:d8:93:09:23:
10:fc:93:b6:0f:ca:3a:75:86:8b:ae:3b:78:f2:6f:05:e1:a0:
0b:24:df:52:1c:e8:2d:77:c5:f7:75:42:b2:a5:2a:26:18:c9:
5a:ed:72:10:1b:ac:6c:9f:e2:00:6e:eb:2b:0d:93:fd:de:e7:
60:70:8e:de:8b:c8:8b:59:70:45:1b:1e:96:fc:2e:a7:17:70:
cc:57:75:b0:a6:f2:e1:fd:1e:8c:26:da:7f:76:94:62:7b:6f:
f5:0a:6a:a4:40:9b:8b:fe:e8:16:9d:cd:bd:ee:81:28:d5:84:
64:ea:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:33 2025 by rpki-client