Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: GLofi7NHCCXhQErKONgzQN27H/FjgSlxLdHFE2nJMCU=
Subject key identifier: 17:D0:4F:07:24:30:51:E1:24:C7:44:EC:15:0C:C7:B0:97:CD:6B:AA
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019A722678599C4B966489ECCD5EC73E790E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0E12
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: VAhq6jkb8Q/jIo7gWpyKBzXf2Znnc0WmBF+Fb1lZVrI=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:78:59:9c:4b:96:64:89:ec:cd:5e:c7:3e:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=17d04f07243051e124c744ec150cc7b097cd6baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:63:42:67:59:f2:67:6e:c7:fb:f2:56:e3:
11:4b:87:3a:f6:fe:8d:3e:23:2b:20:36:58:8c:53:
4a:0f:fa:1d:f8:28:c5:32:ee:21:6e:d6:6e:e0:00:
60:e4:33:37:ab:ff:41:0b:e2:4c:ff:20:45:75:52:
d8:91:f5:b3:58:4a:9c:7a:10:fb:ac:84:22:d7:91:
13:e0:a0:40:c1:93:18:84:80:15:e2:df:16:2f:46:
24:7e:d8:38:50:3d:d3:d2:c5:69:a1:7f:12:3d:ca:
c3:de:19:1a:15:78:87:eb:15:45:bf:9c:56:df:c7:
71:86:59:32:0f:d8:c6:29:c3:64:e8:d5:8d:c2:40:
ac:1b:35:11:b5:9b:3e:a5:16:5c:85:a0:87:6f:21:
b7:79:b6:b7:d5:e4:a5:5c:bc:b0:19:df:70:db:3b:
07:5e:97:6b:23:10:9a:e7:b1:e1:30:28:48:bf:79:
34:b9:eb:01:fa:a6:0b:eb:15:66:f7:a5:62:df:fe:
86:52:e7:c4:3e:1d:66:76:f5:b5:8e:2e:6b:d2:85:
04:27:48:fa:f5:05:b6:e4:6e:d6:37:b6:b7:60:11:
5b:72:fa:c6:09:7c:01:35:1c:cd:3b:68:7f:58:b9:
2f:53:de:3f:dd:92:e1:e5:ff:01:0d:bf:a8:df:c2:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:4F:07:24:30:51:E1:24:C7:44:EC:15:0C:C7:B0:97:CD:6B:AA
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:76:bb:b4:72:a7:27:c0:b5:50:2c:f8:04:e9:64:97:a4:d9:
48:b1:5d:0a:90:f0:b0:a6:68:b4:ff:f0:77:38:7d:41:e5:74:
06:e1:30:20:1e:25:a7:1b:63:d5:1b:67:68:85:4e:f7:4e:e1:
2d:c9:74:1f:59:ac:35:ef:e6:19:90:66:9a:36:4f:6a:d2:6b:
0e:df:0e:3c:8b:a7:c6:e5:e2:24:50:d5:8d:cf:1e:9d:11:39:
cc:bb:37:a2:f3:bb:40:81:dd:a3:79:2b:87:e5:78:f4:32:2c:
d5:a1:39:67:4c:6d:31:88:98:f3:53:e1:37:a6:bb:55:53:e7:
71:d9:7a:63:25:29:13:4e:4b:8c:ff:54:47:04:d1:ae:ee:ad:
80:74:96:fd:b7:f4:59:7f:17:33:7b:78:ab:fd:41:45:42:58:
3a:d9:8b:62:a4:bc:f9:bc:ec:05:03:74:73:27:c7:99:26:d3:
ee:1f:84:54:9c:74:f5:52:44:2f:12:54:9b:cf:ee:7a:dc:65:
e0:1c:3a:6f:a9:e8:f1:f8:3d:a8:30:1c:47:21:37:c8:5e:f8:
ee:95:d2:d1:0f:59:93:1c:6f:91:dc:58:67:8b:6b:fb:fb:19:
6b:f2:01:a7:57:94:9a:97:3d:15:6b:bd:39:dc:52:0b:ec:bc:
2a:39:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:37 2025 by rpki-client