Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: hSeQR3jdZS1dPegAlGcugoMcEvKA3mMrrJbfay47GEU=
Subject key identifier: 3D:02:7A:F0:06:42:E0:9A:E2:B1:DC:57:72:24:09:7D:1F:B3:A1:C1
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019A23D2CB00986E855916DAD2859C64F06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 13D8
Signing time: Mon 27 Oct 2025 04:00:08 +0000
Manifest this update: Mon 27 Oct 2025 04:00:08 +0000
Manifest next update: Tue 28 Oct 2025 04:00:08 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: RI5O/FdRAPZ7/5JITuK+1nZNHVCqRt0hbkyS4YL3Ipw=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:cb:00:98:6e:85:59:16:da:d2:85:9c:64:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Oct 27 04:00:08 2025 GMT
Not After : Oct 28 04:00:08 2025 GMT
Subject: CN=3d027af00642e09ae2b1dc577224097d1fb3a1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:9d:31:07:55:ca:2b:82:8f:0a:fb:a9:3a:
94:19:07:47:5e:c0:6d:4d:09:13:f2:f5:fd:32:1c:
ac:18:d5:75:b6:16:64:42:0b:93:c3:f3:d9:d8:d6:
c1:a5:81:68:7a:cb:2a:11:ba:76:30:7f:9d:95:70:
89:60:77:4a:d7:b3:4f:60:3f:3b:80:16:ce:cc:ba:
7d:cf:64:67:84:b7:7c:ef:78:6d:4f:83:45:d8:76:
d9:7c:e6:9c:e8:36:f5:8e:1a:e1:98:0a:9d:13:2e:
3b:b8:3c:59:66:96:d9:cd:e1:7e:61:4b:ce:34:1f:
9a:f0:48:7e:1a:9f:a0:ce:a6:39:98:7c:93:18:28:
8a:f1:63:1f:73:b0:7c:66:54:cd:59:5c:9f:d1:4a:
e5:de:b0:b6:44:92:59:1f:c3:36:87:47:62:dc:74:
70:90:ea:83:f6:7b:6a:76:e2:35:4c:f3:95:4a:54:
2b:0d:2d:9e:72:33:8e:09:60:9c:7a:de:44:7a:ce:
8c:4a:c4:68:87:f4:f3:06:17:4b:41:ff:ed:1a:4c:
1c:6d:b9:44:16:35:ba:09:69:a7:09:00:f9:01:12:
3e:74:71:6c:00:3e:af:ec:25:1e:2b:93:08:81:8e:
e8:3b:fd:50:71:6c:52:2c:74:d7:d8:e6:56:f4:6e:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:7A:F0:06:42:E0:9A:E2:B1:DC:57:72:24:09:7D:1F:B3:A1:C1
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:74:61:0f:31:65:e6:2c:16:4d:11:09:1a:0a:16:d0:fc:8b:
b9:d5:81:01:46:65:d7:e2:ff:2d:72:62:89:6e:30:50:17:65:
2f:c4:e4:61:f3:c6:4b:83:63:73:84:f0:8d:81:53:53:3d:c4:
3c:1e:93:75:05:42:5e:35:92:d0:4d:c7:4c:4a:e6:07:29:a8:
4f:b6:95:80:81:5d:b1:47:76:9a:e9:b9:77:4f:59:14:10:c5:
e4:71:4b:d4:8f:bc:c1:38:e7:2b:0a:d1:3b:19:7e:98:4c:c7:
4e:3f:0b:67:53:b0:8e:a3:91:ce:fb:fc:e8:fe:0c:72:46:cd:
53:4c:81:5a:18:d3:f0:f5:5c:0b:d0:d2:18:17:71:c7:d2:3c:
fb:0e:b4:5a:80:da:1f:db:df:a4:3b:37:0d:8e:08:f6:31:36:
a3:db:36:9f:7f:97:84:cd:43:0b:44:f9:f6:4f:ad:85:c3:e2:
21:6b:44:a0:83:0d:68:75:08:06:eb:be:06:4d:93:24:05:7d:
06:36:7a:21:83:39:26:2e:a2:9c:52:14:ae:70:fc:bf:f0:2c:
77:5d:06:83:04:f4:cf:2d:2a:93:c4:ab:5b:97:c1:43:fa:56:
99:f3:09:81:d9:bc:87:c5:ed:89:dd:bc:4d:84:8a:84:7b:79:
92:76:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:28 2025 by rpki-client