Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: Z8sbN3MndbK1RkMlccHvtXoDjs6zNVKBJo7XXnN9Bt4=
Subject key identifier: 5C:D6:32:BB:D0:DD:2A:25:C5:42:6F:56:EF:64:AC:B0:B8:FD:8E:DA
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 019A70A56063B8407514050458E232114F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 101F
Signing time: Tue 11 Nov 2025 02:01:17 +0000
Manifest this update: Tue 11 Nov 2025 02:01:17 +0000
Manifest next update: Wed 12 Nov 2025 02:01:17 +0000
Files and hashes: 1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: aaIQNjx6VViEF3ei01g59XGt2iHKZl5pWAj3SOV00U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:60:63:b8:40:75:14:05:04:58:e2:32:11:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Nov 11 02:01:17 2025 GMT
Not After : Nov 12 02:01:17 2025 GMT
Subject: CN=5cd632bbd0dd2a25c5426f56ef64acb0b8fd8eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:01:fb:03:37:8b:67:6f:d4:75:fe:db:04:
b3:ff:38:b6:26:d9:09:c9:22:a1:ef:03:2e:3e:55:
4c:95:84:01:77:7e:58:5d:ba:4c:3e:0b:9e:7a:24:
ef:bd:92:94:b4:bd:39:f9:53:68:c5:d8:88:e4:a6:
77:47:ab:80:94:e5:22:70:35:5b:69:66:ae:e5:39:
74:1e:a2:8b:22:96:a1:3b:14:e2:3c:8e:19:aa:3b:
39:f7:3d:b8:ea:72:45:b6:33:07:33:90:43:73:ee:
3c:b7:43:7b:5c:57:17:d9:c3:17:9e:09:fd:51:b8:
ba:24:a4:20:2b:f4:12:1a:cd:e5:d4:d6:62:30:2b:
50:94:2c:ed:cb:1b:86:db:1d:89:1c:f3:31:85:2f:
95:ee:73:93:7a:6e:42:56:23:63:fa:27:fb:e8:0e:
94:e2:de:f7:4d:9a:d9:34:fa:2e:d1:5a:c7:c9:b3:
cd:09:f4:72:13:e1:32:2c:0b:97:bb:55:52:e9:f6:
9f:85:55:28:e7:02:26:4e:c6:81:fc:2a:f8:39:54:
52:54:04:a0:ba:49:93:66:38:80:37:d9:28:12:eb:
29:ca:4c:95:20:16:bb:6e:ac:f8:31:68:3a:d4:5b:
35:e9:5e:dc:db:3d:0b:b2:f7:d8:0b:13:cd:37:d8:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D6:32:BB:D0:DD:2A:25:C5:42:6F:56:EF:64:AC:B0:B8:FD:8E:DA
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ec:a9:a6:a0:7e:0e:ec:76:c8:a6:4e:3c:44:ac:e2:2b:59:
52:d4:8a:7c:09:77:30:4a:b6:f4:e9:e8:42:45:38:35:b2:bc:
89:8f:5f:c8:fe:41:8a:04:20:6e:66:5c:b1:c7:88:d7:44:29:
af:18:15:83:75:0a:fc:4d:02:bc:59:06:dd:77:64:dd:37:54:
1c:90:c0:56:30:4f:de:38:52:80:5f:18:f3:80:2e:36:61:87:
b0:af:df:00:19:61:20:d1:51:21:56:65:0a:ea:59:03:57:2a:
10:e5:90:3e:b3:be:39:f0:e8:9f:da:3f:39:93:9f:31:e3:bb:
99:b1:ce:40:0f:84:aa:db:ab:56:04:47:02:87:a2:cf:20:03:
77:03:c8:c7:11:61:ed:4b:3d:62:92:ca:7c:24:1b:51:fd:c6:
dd:87:5f:5e:7d:03:09:89:e6:e8:3a:b3:51:7c:b7:9c:b7:f1:
c6:6a:ea:d3:22:b7:40:0f:79:eb:63:ff:f1:35:d2:b6:a2:76:
47:b2:d2:fe:c1:99:bd:a9:64:b3:37:61:87:a0:04:42:44:35:
4d:10:b2:dc:33:fa:d5:6c:90:7a:e5:12:ab:cd:2f:79:cf:d1:
2a:79:81:a0:3f:b1:26:50:a9:ac:9c:57:b5:cc:5f:8a:8f:71:
69:f7:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:25 2025 by rpki-client