Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: 178GCdnwuOmFobVvvUrO+07pKAfY1JNjznpKmHRMAM8=
Subject key identifier: 0D:14:7E:AD:D4:2B:A7:2E:61:FA:F6:40:97:03:E3:C3:E1:A5:AA:40
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019A71136F1DA99ADB4FEB57DCA456C65486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: VqrhjcgRPiKakDdd730AUmusBCPc7NAqgdtWvAgU6mg=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6f:1d:a9:9a:db:4f:eb:57:dc:a4:56:c6:54:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=0d147eadd42ba72e61faf6409703e3c3e1a5aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:20:cc:f3:cb:4e:21:d4:f1:a6:65:f8:6f:
d3:7d:fb:be:6b:10:4c:c7:00:c5:6d:d8:0c:47:bc:
af:f5:a4:e4:c6:2e:26:9a:d6:d4:dd:43:e0:55:1a:
fc:12:67:d7:0b:b4:c3:43:22:30:0d:7c:e1:59:11:
5f:96:2a:21:82:a6:da:22:ba:b0:c5:67:3f:1a:1a:
e0:00:36:3d:7b:76:53:4e:f9:80:03:b5:72:c8:17:
61:74:be:87:69:5c:3d:e0:25:da:ab:b1:b5:21:92:
d0:cd:30:56:ec:e7:89:8f:a0:c0:b7:53:d1:a7:2a:
5f:41:ad:a4:f9:d9:50:4e:dd:19:8a:61:c7:cc:fe:
08:f1:7c:ff:8b:a0:59:46:a6:09:9c:4b:b6:2b:54:
77:fe:58:b1:f4:a6:7d:84:49:54:57:53:5f:a4:a6:
02:5f:ae:cd:03:e2:88:98:d1:6d:38:f9:94:de:18:
95:62:35:17:8c:66:32:bf:fa:6a:36:d8:e3:59:c1:
97:3f:3c:85:88:3b:a5:89:6b:77:d4:f7:52:9a:fe:
ec:84:50:6f:b4:d2:ee:2e:ca:14:26:c6:fc:a1:f0:
4e:ae:4c:a7:6b:11:49:51:18:8d:c5:b4:0e:10:72:
65:23:db:7c:62:23:0b:dd:8d:46:29:ca:da:5e:96:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:7E:AD:D4:2B:A7:2E:61:FA:F6:40:97:03:E3:C3:E1:A5:AA:40
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:27:62:11:93:ef:89:e8:bf:cf:b2:92:99:af:f1:47:1d:3d:
51:e5:d2:32:bd:57:59:f3:e3:cd:61:65:0d:ef:fc:3a:9d:78:
55:70:df:d0:be:67:0e:1f:52:c4:7d:8e:18:14:c5:c0:74:c0:
b4:1d:4b:a3:a1:2b:db:22:c3:da:d7:dd:61:de:f9:a7:9e:7f:
97:a4:50:f5:40:e4:3f:ed:21:24:be:80:96:b3:c0:70:51:a6:
59:6f:6a:d7:db:c3:dc:5f:35:0a:30:f6:2c:5c:40:ca:b5:13:
27:5f:08:c1:d6:d5:ce:cb:0c:a4:eb:87:ef:55:1c:3e:d1:e5:
49:b6:35:0b:ba:6e:7b:9d:4b:9d:a0:99:1a:c3:3a:8c:38:06:
9c:df:16:f4:65:c1:15:35:3f:2f:a8:a5:2d:f2:e8:1b:03:50:
3e:8c:c8:d3:b7:c5:5b:0f:b7:92:3d:ca:29:68:b8:e6:07:88:
99:f0:db:fd:b0:73:f6:51:ad:ac:0e:61:1d:a5:dc:72:18:8e:
6c:e9:14:cd:b4:80:1a:c8:73:d0:44:dd:bc:ca:88:ab:25:c3:
33:67:97:e9:fd:5b:fa:7f:df:84:0b:a0:a0:a3:d5:81:d3:b0:
27:0a:e4:48:d2:0e:6a:46:21:2b:6c:30:61:a2:6b:77:72:d3:
9b:dc:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client