Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: MHRF1OzMnvfR1UBRVmhcgULiqBHygdcHDHjZ3KnEtE0=
Subject key identifier: 15:DE:C6:8B:CE:1D:32:D2:BF:A7:8F:04:9D:57:3F:A1:01:E2:BC:F5
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019A7225E3065DF9DC746C515E9C552D4F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: 1fT8GDjYdpt3jX1efCzN23db6SIVru8JLtXQ4VzQpZQ=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e3:06:5d:f9:dc:74:6c:51:5e:9c:55:2d:4f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=15dec68bce1d32d2bfa78f049d573fa101e2bcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:f1:05:f7:8e:ab:88:1e:f3:b7:9a:9f:e6:
7f:ce:05:2f:20:1c:bc:3a:9a:78:2f:4f:ec:dc:c8:
a9:50:cf:38:80:b2:e2:3e:1a:35:14:d6:c7:91:39:
77:88:10:29:40:f3:3e:ee:de:15:bb:f6:f7:80:b0:
c5:d6:db:ff:54:ac:e2:95:68:20:73:a3:71:59:cb:
cf:97:e4:ea:f0:66:93:95:a1:b0:d8:d0:c9:00:19:
62:1e:c3:a6:31:4d:bb:c9:4f:6d:36:8e:2c:1b:eb:
d5:fb:fb:42:da:fc:42:15:24:df:42:1b:ea:71:36:
0a:a7:76:3b:51:48:d1:14:ba:08:9b:37:d5:aa:a8:
06:0b:d8:ff:48:cb:e8:22:a9:54:32:fb:37:2e:93:
4d:ee:0c:3e:0d:38:fd:d6:35:68:e0:53:23:d5:fe:
6d:2e:11:6b:54:b6:9a:31:bb:8b:a7:9c:e9:21:5d:
1c:ab:51:47:26:25:59:c4:a9:c8:99:8e:0c:25:4e:
96:51:ff:09:d3:95:bc:21:84:6f:54:08:c7:a8:46:
6c:52:88:af:98:ac:97:b4:fa:4b:92:70:90:3c:da:
15:cd:a0:ad:a3:b3:d0:0c:33:ba:96:fb:10:d5:17:
c1:37:fe:7b:a6:26:05:3b:85:f6:07:fc:cd:54:13:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:C6:8B:CE:1D:32:D2:BF:A7:8F:04:9D:57:3F:A1:01:E2:BC:F5
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ac:22:79:4d:1a:8d:a3:14:dc:45:c1:2d:c2:61:0f:26:cf:
0d:d9:89:7c:56:d8:52:be:4a:65:6c:8f:3c:fc:7f:5c:b6:b9:
b3:07:56:95:28:4f:ec:75:6a:cb:44:b7:09:2e:47:66:c2:28:
24:40:e8:2b:4e:94:de:b5:73:05:aa:ea:f5:30:9b:dc:ac:b7:
df:67:aa:f2:c0:97:26:ff:2e:de:bf:c9:c7:9c:73:6c:1b:cd:
66:87:b8:35:5a:01:ef:80:37:5b:36:c9:7a:d9:d0:9b:51:a6:
06:9b:85:fa:92:e8:f1:4a:bf:36:01:82:c0:79:9b:cc:1e:36:
50:e1:db:05:8b:cf:06:6b:7f:d6:d7:05:02:56:22:a8:e3:a6:
0a:08:24:76:ec:b7:13:5c:3d:fe:03:67:a7:1c:9c:80:1d:06:
8d:a7:44:5d:2b:41:b3:67:d6:1d:be:f8:08:a2:f4:cb:67:9b:
95:a1:08:b1:6d:24:ec:54:69:04:59:eb:74:52:d2:7c:0a:df:
98:02:28:06:e7:b4:39:72:9d:d9:85:88:c0:eb:81:32:fa:41:
e7:51:d3:4d:17:28:87:ba:01:bd:31:e2:d5:ff:48:32:60:b3:
e5:53:12:a6:70:11:8e:10:93:86:8d:bc:8f:56:8a:c5:0d:bc:
f0:68:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:54 2025 by rpki-client