Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: fPaDxo4hLmWXOYApHeHgFWjNwuUvsNYy2X3UySQNRh4=
Subject key identifier: 2E:FD:8B:FA:2F:E4:12:A1:5A:07:FA:0E:3D:1F:E4:1C:85:74:19:36
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 019A72262DE168089AFED318CF823C4D7FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 02AD
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: a7yHPIeqIRLmM/r8wGKe5u1zm8jPD7KKJzUAUsnbQC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2d:e1:68:08:9a:fe:d3:18:cf:82:3c:4d:7f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=2efd8bfa2fe412a15a07fa0e3d1fe41c85741936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:42:0f:22:15:37:f6:10:55:80:2c:65:78:
84:50:ca:ed:a4:e4:cb:06:94:69:fb:73:cd:f0:60:
42:6d:a7:00:b1:64:e6:bb:38:35:28:c8:c7:2a:4c:
dc:5d:47:f1:ca:ef:60:44:aa:0d:be:19:27:8f:e8:
08:ec:11:de:8f:3f:56:bd:ee:67:5f:66:95:9f:4a:
96:1e:3c:fd:fb:4e:65:f1:ac:65:67:49:90:d2:9d:
46:b3:46:5d:e3:39:ca:45:62:ea:45:f4:bc:99:aa:
d3:3e:06:2c:53:4a:1b:b1:96:6f:e8:20:79:72:13:
26:e7:68:36:87:ca:db:b8:b2:af:e2:03:29:2e:f5:
77:d6:84:51:08:d6:b4:f2:2d:09:45:81:07:40:84:
4a:92:64:07:d9:4b:8d:b2:10:d3:f1:bf:8d:f9:5d:
53:e4:65:d6:08:f0:8c:01:55:aa:cf:32:96:c0:45:
a5:78:7e:e1:25:e0:59:41:f1:9d:b7:23:a8:63:03:
e3:50:f4:c9:6d:d8:03:26:88:f9:d1:d3:70:1e:1f:
3c:83:10:f1:3f:76:66:e5:89:a9:96:e7:8c:9b:da:
5a:56:80:f2:1c:40:2b:e6:4b:0d:84:12:48:ee:37:
a2:6d:f6:4b:d2:74:4d:e2:03:9d:07:77:d6:77:78:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:8B:FA:2F:E4:12:A1:5A:07:FA:0E:3D:1F:E4:1C:85:74:19:36
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:5f:1b:5e:c9:f5:f8:bc:63:3d:ae:55:d8:09:28:0e:78:f1:
7e:16:11:9f:fa:c0:18:46:27:08:5c:38:43:75:4f:7b:92:fb:
4a:04:9d:29:e9:24:72:4e:ef:97:b7:2c:b8:2a:3d:08:18:f8:
8c:72:f1:6a:f8:64:9d:33:b8:da:d4:15:28:58:25:ce:be:6d:
14:ce:93:98:dc:85:9d:51:0d:c4:93:9b:44:45:46:92:68:b8:
f0:6b:d0:b0:3f:b3:3f:92:d3:ae:ff:53:d8:13:37:5c:21:8f:
92:bc:17:4e:53:ef:d3:10:3e:be:1e:4d:07:6a:43:ea:8d:cc:
96:92:5b:23:e0:41:21:a7:7a:61:67:05:c9:6c:20:d8:1e:80:
df:aa:4e:c1:c6:22:82:28:77:e8:f6:3b:57:06:fe:0b:4f:50:
29:df:68:a7:9a:73:28:00:91:a8:57:6a:bc:6d:a5:3f:9a:9d:
8a:ac:fb:af:72:d4:88:59:02:fd:03:62:34:88:fd:b8:03:a8:
12:78:3a:58:18:d7:1f:28:52:7b:b6:5d:06:20:c1:cd:9c:d5:
30:ea:4d:47:3e:5e:0d:9f:8f:4f:84:93:76:0f:fe:09:81:fe:
83:29:96:ef:be:98:63:02:5b:e7:61:65:d6:03:db:29:ee:35:
f6:66:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:28 2025 by rpki-client