Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: 4pgHGynxUDmeZQym97AW+4w7nFPGDNsDDY6Ly5CN0K8=
Subject key identifier: EF:CD:BD:1A:4D:90:51:2C:60:A8:7A:BD:3A:DE:4A:4A:E5:95:1F:61
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 019A7112D63FDB8E2B532F48254E7A04D504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 11CB
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: 3CfLaSt5L6loUnOebeZlq4Vtt1J9pKhPbaqvUbCeIYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d6:3f:db:8e:2b:53:2f:48:25:4e:7a:04:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=efcdbd1a4d90512c60a87abd3ade4a4ae5951f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:fd:0a:4b:4d:6b:c6:ec:94:99:28:49:f6:
c1:a0:6c:34:d2:05:a2:e2:c3:e0:ce:45:2e:82:e7:
25:b0:e3:ea:05:e9:cc:a4:24:3a:f7:cc:b0:43:19:
fb:5b:d8:a8:9e:de:a3:d5:49:7b:d9:6b:9d:0f:53:
0f:d2:47:a7:f3:b6:0b:b4:bb:70:1c:25:81:a7:79:
84:26:9e:c1:ce:40:4b:69:b9:e6:19:d6:e1:54:e3:
6b:59:87:3c:54:72:1c:31:4b:87:44:64:0d:80:ef:
54:ea:0f:dc:4f:7e:f4:c0:c5:95:70:89:f7:f5:9e:
cd:95:46:25:cf:86:b2:91:15:2d:58:f6:07:68:30:
12:81:00:a8:11:f8:e2:07:cb:07:4b:11:62:0e:ba:
f4:68:93:c9:17:8f:8f:ac:fe:bf:4f:a5:56:cf:1a:
08:2c:0f:69:92:59:50:9c:76:ba:36:c3:87:3f:5a:
9a:a1:69:ce:a6:a9:58:44:bd:cb:5d:3c:a7:9a:fb:
60:72:4c:17:25:28:d4:cf:61:03:26:41:2d:46:5b:
f5:0d:e1:a1:5c:9c:1d:2e:bd:f3:bb:9f:50:f5:59:
d3:43:6e:81:2d:2a:f2:e1:1e:db:4e:5c:ef:08:b6:
a1:b0:0d:b7:1c:a9:71:5c:b1:21:cd:0d:1c:1f:77:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CD:BD:1A:4D:90:51:2C:60:A8:7A:BD:3A:DE:4A:4A:E5:95:1F:61
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2c:7c:18:ef:b1:a2:33:c5:f0:26:79:31:9b:d4:65:91:a4:
3b:bf:2c:62:44:92:bf:ab:44:82:00:32:7a:14:08:fb:bd:da:
14:96:6c:d5:7f:ae:fb:59:23:6a:c6:42:2d:0a:cf:d2:3f:7d:
91:90:a6:67:d8:23:b9:fa:23:fc:87:3d:7d:f2:9e:96:5b:e2:
b7:c2:af:d0:bf:8e:98:35:c6:f2:fd:77:50:17:96:67:5c:6c:
32:da:a7:0f:fc:07:31:04:0a:f0:a3:32:a9:4e:e6:7c:90:22:
b0:98:f8:67:58:fc:6d:f5:8a:96:a6:52:4f:7a:68:7d:c4:80:
e6:34:8e:1e:49:da:ca:1d:b6:96:fa:ab:be:7e:be:28:31:46:
7c:2a:ec:3d:46:ed:6b:68:fd:5a:39:27:3f:e5:9c:18:0d:c9:
26:b3:70:32:e9:82:79:c0:c2:82:04:3d:4d:fe:bf:c4:9a:66:
e3:13:b8:58:5a:fa:8c:09:15:c1:6e:a5:8d:31:30:78:e8:ae:
4a:b0:db:5c:82:8c:75:0d:13:bf:9e:a1:04:cb:a8:48:8c:a5:
31:a7:24:54:90:2a:03:b0:3f:41:f3:80:41:8f:fb:83:a2:90:
4d:59:cb:f6:d5:46:4e:d1:ff:6e:a2:35:4f:71:0b:cc:d6:1e:
20:7c:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:46 2025 by rpki-client