Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
File: gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json)
Hash identifier: a2TLkkXFC/1gOW4IYl7oH2PS/qPWdfOCMCcNc2kZR5k=
Subject key identifier: 5A:2C:99:50:E2:08:62:92:54:43:0A:FD:2E:D8:95:ED:31:FE:B7:42
Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
Certificate issuer: /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Certificate serial: 019A725C724151F15404D0C75A2D0AB0A446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=)
2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: iUU9hD+kUoTSHpz9lqEJihly5N6EoxDqCwVI0AE648s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:72:41:51:f1:54:04:d0:c7:5a:2d:0a:b0:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=5a2c9950e208629254430afd2ed895ed31feb742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:e6:d2:de:b5:db:88:5c:22:fc:0c:6b:e0:
27:6b:7c:b7:fc:f2:bd:da:b1:35:2e:41:c4:e4:f2:
48:35:68:6e:c8:4b:d3:0a:9c:9e:7b:be:1b:3c:27:
f4:bc:86:c6:a7:f1:15:dd:ff:df:ca:6b:8d:a5:bb:
eb:31:c8:fc:ad:1a:1b:90:af:69:7b:ea:51:e3:25:
d5:7a:9d:58:74:51:9a:9e:83:b0:a2:d9:25:7d:77:
21:3d:89:a9:46:3d:eb:42:77:8d:31:6f:06:37:f0:
44:fe:70:73:44:58:f9:e7:90:bd:82:4d:a7:ef:f1:
a0:aa:c1:1c:f2:09:2f:21:44:83:ef:4f:a5:20:71:
00:e5:42:f7:cd:17:af:f2:f6:b2:65:ff:a2:5f:b4:
ee:4d:52:d0:13:60:eb:09:ce:9e:75:02:f8:e8:fd:
a2:55:88:f8:ce:a1:3c:97:94:01:38:d7:66:20:d9:
6c:65:74:9e:14:50:2c:82:b0:fb:15:68:b6:33:1f:
6e:b0:a0:bc:0b:79:d3:c3:54:10:ff:4f:7f:7a:2d:
4b:45:f7:47:4b:b5:49:ee:d8:03:52:ac:27:6a:a8:
61:23:f7:a2:e2:24:7a:6e:5b:06:ed:5c:80:a9:de:
a5:7d:44:2f:c5:57:06:21:f8:c2:70:2c:74:9e:68:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:99:50:E2:08:62:92:54:43:0A:FD:2E:D8:95:ED:31:FE:B7:42
X509v3 Authority Key Identifier:
keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:91:cb:be:92:ea:ad:97:12:4e:57:68:a9:b1:4e:66:e2:
aa:c9:a2:58:15:39:54:3a:fc:e0:a8:0d:4a:1e:b1:26:98:92:
9c:81:d0:78:a7:36:6d:90:93:95:68:a3:04:d6:2c:02:29:fd:
8b:f9:b8:1d:e1:6b:a6:ae:68:50:04:f8:2f:b2:c2:6b:1b:59:
67:ac:44:75:34:68:e3:78:5d:cf:31:0f:43:16:bf:8a:16:a1:
da:0e:09:dd:61:a3:3c:09:4b:17:b8:04:e2:35:24:0a:82:e9:
bf:bd:06:71:61:ab:3f:50:4c:40:fe:00:22:48:0a:16:c2:8a:
64:1f:be:cd:38:d6:48:af:18:a1:5d:c7:8c:0a:10:6e:19:90:
ea:26:8e:cc:4c:a1:bb:45:72:07:c3:80:83:1e:40:76:2f:5a:
45:02:83:dd:c8:61:2c:96:f7:91:e3:0c:45:69:e3:76:a0:38:
b1:5b:d2:56:c8:0e:d6:e3:07:3b:8f:8f:92:b1:c8:c7:5f:eb:
5b:5f:99:b4:c7:a5:37:ee:ae:35:02:19:d0:8a:6f:28:7f:d6:
27:48:97:64:50:de:1b:1c:74:fe:b7:b7:ab:8e:31:d7:98:b8:
95:c2:ae:6b:f8:e7:8a:43:24:c3:3a:62:14:bb:e9:c5:2e:55:
51:58:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:05 2025 by rpki-client