Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: 3fH7OKvFufl9k82byojjK4vNKL+1emU2uSXnqmDjZGc=
Subject key identifier: D7:30:BC:BA:C2:5A:E6:3A:1B:EA:B3:38:0B:61:71:BD:8A:DF:06:C3
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019A26D40290E417184DDBAFB4FDE250E279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1396
Signing time: Mon 27 Oct 2025 18:00:19 +0000
Manifest this update: Mon 27 Oct 2025 18:00:19 +0000
Manifest next update: Tue 28 Oct 2025 18:00:19 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: ix3gdLzraulu9qsgfhyPsClOrB+E8vRQwLs2CTAfcGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:02:90:e4:17:18:4d:db:af:b4:fd:e2:50:e2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Oct 27 18:00:19 2025 GMT
Not After : Oct 28 18:00:19 2025 GMT
Subject: CN=d730bcbac25ae63a1beab3380b6171bd8adf06c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:06:1e:a8:a5:d2:b2:44:89:87:0d:c9:8c:
a9:5c:51:90:ff:05:09:81:fe:a0:50:72:e8:fa:44:
e2:79:53:6f:04:ee:46:e2:5d:21:30:7b:96:26:af:
c4:bf:10:91:4a:f7:e9:38:e6:31:21:77:c0:38:6e:
35:22:dc:15:d3:f9:18:ee:41:91:25:6a:2a:ef:08:
df:61:43:a1:07:46:7f:49:cc:15:29:cb:92:03:55:
fa:b0:41:73:ad:2a:d0:88:9a:5f:c4:5d:51:c3:40:
82:a6:d8:19:fc:fb:e2:76:08:4e:c7:8c:6a:cf:90:
57:6d:b2:d0:14:12:bc:9e:f7:92:9e:c4:e0:d0:91:
75:f5:da:56:05:5e:38:da:eb:23:f8:39:fb:d3:10:
98:75:69:b5:c9:5d:01:3f:06:af:58:e9:1b:00:83:
2a:73:9f:6a:b0:74:77:c8:f0:e7:7d:cb:6a:0e:d3:
16:09:a8:14:81:1f:87:9a:9d:f0:41:40:6b:b2:4b:
6d:3b:1b:37:01:25:ee:b3:1b:61:fd:a7:48:b7:f1:
2d:42:78:dd:13:10:c9:a4:a6:45:ff:33:aa:5c:59:
fc:72:4c:0c:7d:78:73:52:31:a8:14:fc:68:f4:c7:
7d:93:d8:2e:47:03:a8:f4:86:03:61:b4:0a:a3:19:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:BC:BA:C2:5A:E6:3A:1B:EA:B3:38:0B:61:71:BD:8A:DF:06:C3
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:75:c3:4f:b3:74:19:bb:15:64:95:c4:d8:ee:fc:4d:ca:51:
a5:4b:86:6c:57:8c:f2:20:0b:dd:ad:ed:51:d0:e2:7e:fc:9c:
6b:ac:21:97:d5:dd:fd:8b:ab:7f:31:b8:82:39:9d:f4:da:a3:
57:31:b3:b8:9f:c9:51:a5:49:a2:eb:0f:b4:06:e5:1f:9a:5c:
6c:11:8e:9f:4e:20:f6:0c:9a:ee:0a:91:8e:fd:6a:ea:5e:c4:
7c:44:ce:0b:9f:a5:be:fa:25:50:b8:3d:5d:a5:d4:1d:a1:10:
b1:b9:70:e1:e7:7d:c4:5a:42:19:91:45:1b:bc:bd:70:61:46:
ad:09:da:62:e1:d1:16:12:c6:cd:6d:61:77:65:92:9a:1a:43:
ab:c3:b7:1a:3c:c4:01:0e:cc:26:38:31:5c:3e:fb:8b:a0:a6:
9c:95:48:a5:b0:c8:5d:fc:2e:0b:df:82:82:d3:67:0a:6e:24:
a2:75:52:07:88:e1:b1:39:e9:81:6f:51:e4:17:3d:cb:83:58:
d8:2f:b2:2d:00:54:41:fc:90:25:94:8e:bc:6b:46:80:e5:77:
af:61:5c:0d:54:c4:37:53:2c:72:89:7c:56:4d:19:fd:14:6e:
84:97:0a:ff:79:6e:ca:67:40:7e:91:f1:54:7d:74:39:b6:a3:
e0:ee:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:34:30 2025 by rpki-client