Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: EL/F8NDV+o6t0V/Nr9YyCXqyTlpyini6BitKouTOeuY=
Subject key identifier: 43:24:77:B0:6C:D6:DE:F0:26:49:99:85:56:2D:3F:53:49:92:12:E2
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 019A1460046C56DA84AE154A75AA7955D7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 10E6
Signing time: Fri 24 Oct 2025 04:00:28 +0000
Manifest this update: Fri 24 Oct 2025 04:00:28 +0000
Manifest next update: Sat 25 Oct 2025 04:00:28 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: vUmSFzTYIafwTZPof0MNl0uSeaxNA26LJyr4272Scgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:60:04:6c:56:da:84:ae:15:4a:75:aa:79:55:d7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Oct 24 04:00:28 2025 GMT
Not After : Oct 25 04:00:28 2025 GMT
Subject: CN=432477b06cd6def026499985562d3f53499212e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:82:2d:b7:7c:08:4c:45:0e:de:aa:9b:30:
19:ac:ef:0d:61:d8:1d:09:41:37:d8:d9:1b:ce:fb:
d5:45:1f:03:61:0b:26:45:df:4a:4f:34:5b:72:22:
e8:90:91:89:cd:19:d3:54:e3:93:88:6a:3b:18:c7:
59:45:14:b0:2a:4d:5a:bb:61:5f:99:d9:84:33:2b:
84:54:1c:fb:64:47:c8:6c:1f:b0:83:83:24:63:96:
c0:ba:95:e6:bc:b2:f3:de:95:c9:97:62:d4:78:0b:
03:43:c2:7a:de:3c:66:40:59:9d:f4:00:7d:74:03:
9c:cd:74:ca:2e:7f:cc:0a:a8:67:3e:a6:d6:c3:9a:
3c:d8:13:fc:fa:77:4c:fc:3e:df:0c:01:fa:c7:f0:
53:13:3e:e5:71:55:b8:7d:c6:9e:90:95:23:d5:02:
25:24:dd:61:91:f6:d5:01:6f:61:c2:17:fa:6e:db:
3b:2b:5d:72:7d:2d:e7:0a:38:3e:6e:31:7f:13:5a:
9e:d3:db:d6:e3:14:73:8b:04:96:90:f1:8d:db:2a:
8c:d9:d0:2d:17:95:4f:1c:24:9c:fc:0d:f9:c1:a8:
82:5d:0d:1a:e2:46:f7:6b:f7:46:83:58:c0:67:02:
9c:6f:10:6e:23:7b:bf:11:40:20:73:07:8c:35:cf:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:77:B0:6C:D6:DE:F0:26:49:99:85:56:2D:3F:53:49:92:12:E2
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:f6:e3:52:10:e5:c7:e9:7b:75:91:11:87:7e:fb:82:a7:
48:f4:2c:21:4c:ff:66:1b:c5:39:03:ba:de:dc:da:e0:3e:c6:
c4:b7:73:fd:d2:46:fe:08:3a:86:72:20:e5:8c:68:a1:85:20:
92:46:f1:0d:bd:86:5e:4d:7a:09:bf:28:7c:70:0c:c5:92:76:
48:20:4a:1a:3c:41:36:bd:37:4b:4a:96:81:aa:12:37:2c:c0:
95:0a:e4:1c:14:a3:38:10:4b:bc:6d:b5:fa:69:a8:e8:79:48:
ca:e0:38:65:98:f0:83:4d:1c:a0:50:11:f4:aa:48:1b:07:6e:
35:61:2f:12:a6:60:93:6f:f5:ef:56:3f:7f:95:3f:cf:5f:e7:
6e:75:2a:43:99:0d:55:4d:ee:69:98:81:38:f7:c2:94:c5:92:
d8:59:c9:35:9f:6f:b8:20:c6:0a:1b:cc:21:38:cb:14:d1:59:
b6:4e:dd:a7:b4:2e:7e:fb:35:cc:be:81:cf:55:49:62:3d:6f:
09:8d:85:79:3c:a4:d6:0c:2e:17:31:5e:9d:6c:36:9c:f5:dc:
e2:46:91:2f:14:b4:24:ab:69:5d:f8:03:6e:46:39:f3:92:d9:
09:e4:9f:ff:48:27:3c:07:13:af:36:84:21:25:59:50:7c:72:
57:63:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:21:01 2025 by rpki-client