Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: CPVEeEc6/9nojo1f4RbXHhB7y8P1ZYL98mEnhdLuL1Q=
Subject key identifier: A8:15:67:D3:3A:43:CB:61:E5:D0:F6:DB:DB:6B:78:62:01:7F:23:05
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019A22523D5A2EA50A9F398FF33FB8373024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0202
Signing time: Sun 26 Oct 2025 21:00:05 +0000
Manifest this update: Sun 26 Oct 2025 21:00:05 +0000
Manifest next update: Mon 27 Oct 2025 21:00:05 +0000
Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: ey1FRXdvuzPhff+DBue1hbBCGEywhbJ2yp/iDko/jX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:3d:5a:2e:a5:0a:9f:39:8f:f3:3f:b8:37:30:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Oct 26 21:00:05 2025 GMT
Not After : Oct 27 21:00:05 2025 GMT
Subject: CN=a81567d33a43cb61e5d0f6dbdb6b7862017f2305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:6f:4d:25:2d:eb:94:a9:2c:e1:4e:8f:98:
b9:f1:3d:b4:2f:71:df:a8:73:89:af:31:b8:9a:68:
f5:b7:71:4a:42:ae:5a:77:15:52:8d:2c:4e:12:1f:
d4:93:e9:bf:10:34:50:a9:0e:88:ce:d8:dd:7a:2a:
fb:a6:44:65:73:34:c9:40:11:0d:cb:c9:e1:d2:54:
7e:ee:ea:63:f1:d1:86:0c:a6:1d:3c:6f:fa:c3:0f:
3f:df:a8:39:3c:6c:11:a0:c7:80:7d:40:60:93:a9:
63:e3:6d:78:7a:d4:93:44:cf:e3:c0:bc:46:f4:d1:
50:00:1a:9d:9e:f1:a6:3d:f5:3a:a8:fd:67:5e:e3:
28:61:d7:56:cc:41:06:56:2b:36:93:2c:c9:46:32:
fa:15:72:d8:e2:25:62:27:19:91:27:5e:d5:ed:ee:
6e:84:76:75:c8:80:7a:8e:4d:ac:81:93:8f:ff:b6:
31:0e:a5:11:03:ec:13:65:d4:3e:40:ac:7d:5c:70:
27:e6:86:19:4e:5a:13:9c:78:35:f7:4c:0b:4e:9e:
37:51:44:f6:a9:57:4a:41:eb:65:68:43:38:5c:96:
80:b4:fc:35:ea:05:06:45:07:0b:39:e1:df:a8:22:
b5:f4:9d:43:eb:b4:b1:e1:53:d6:b5:5d:0e:3e:46:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:15:67:D3:3A:43:CB:61:E5:D0:F6:DB:DB:6B:78:62:01:7F:23:05
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e2:97:b1:41:d9:aa:5b:7b:83:50:00:29:53:77:91:b0:d1:
be:dc:ca:06:1b:25:28:1d:e2:94:fe:95:34:94:51:2f:43:cd:
70:59:8d:87:1a:c0:b3:4e:1a:1b:32:d0:9b:0c:11:fa:0a:12:
9d:08:02:a8:c5:e6:7b:80:a3:82:75:c3:a8:8c:65:19:65:3c:
60:18:c3:b4:e6:d0:9b:ec:0c:af:fa:51:34:a9:e3:70:74:bd:
e2:58:cc:6b:72:7d:f8:4e:a2:02:33:36:04:42:62:c4:19:b1:
f2:b8:6e:0a:c2:32:6c:7b:b8:e0:fd:c9:a9:ce:54:1d:fc:10:
cd:ae:eb:30:e8:1e:45:70:f0:7b:cd:e6:a2:66:52:8b:5f:ab:
83:bf:51:95:ea:0f:2e:93:a8:7c:a7:c8:f5:20:ce:5f:15:9e:
97:28:e6:53:11:ba:a7:26:54:4d:c2:fe:22:27:ff:2a:8f:be:
c5:74:92:34:c8:47:56:34:af:a0:c1:5d:6e:3d:38:bf:50:b8:
09:a6:22:6a:af:ec:79:34:5f:68:c3:e9:9b:f8:ad:4d:e3:db:
d6:f3:a1:1c:ee:d8:79:4d:f2:dc:83:2b:d5:aa:b5:70:fc:3c:
32:39:9e:0d:7e:92:ec:37:28:b9:b4:ec:62:cb:e1:4b:e8:72:
22:32:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:39:02 2025 by rpki-client