Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: vByz16XiniW+Y2ntrEGUklxqOHhZSyas40EJ7T5ztQc=
Subject key identifier: CF:4C:3F:5A:B1:6E:44:11:32:21:1A:27:D8:B4:32:4D:A4:EB:FD:03
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 019A70DC60ADF8CB3BB9C79716FB852EE7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 03:01:22 +0000
Manifest this update: Tue 11 Nov 2025 03:01:22 +0000
Manifest next update: Wed 12 Nov 2025 03:01:22 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: cxBAxx/G8X9EdcdvvbR+OvwGG2a/Y4K+ORQ9akzc3k0=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:60:ad:f8:cb:3b:b9:c7:97:16:fb:85:2e:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Nov 11 03:01:22 2025 GMT
Not After : Nov 12 03:01:22 2025 GMT
Subject: CN=cf4c3f5ab16e441132211a27d8b4324da4ebfd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:11:da:7d:d0:0a:98:4a:bd:85:7b:97:33:
ee:34:32:2e:71:5f:56:85:6e:bb:ee:bb:29:0d:f9:
31:7a:0a:0d:02:aa:ee:b8:67:39:50:cb:cd:9d:8c:
c0:96:c3:0f:83:3f:32:aa:80:d3:e7:85:a1:c3:d9:
64:1a:d1:80:56:35:1a:ba:b3:9e:b3:c2:8c:de:08:
f5:41:da:08:4d:c1:c3:f5:c0:37:70:50:79:02:b3:
bc:fd:73:2e:50:86:1d:48:51:98:d3:cf:d2:25:d1:
4b:aa:71:11:8d:08:14:fb:e6:77:1a:6c:5f:07:75:
f7:9b:09:94:d7:12:4e:5b:22:14:43:a5:87:ae:5a:
d7:82:0b:df:ec:b2:64:17:12:cc:bf:d6:d4:2d:04:
db:7d:ac:e9:55:e9:d4:4a:9b:78:60:20:97:0a:d0:
fa:fb:d1:78:cf:70:f3:6e:1c:a8:9a:8a:86:ab:6d:
17:39:3c:04:bc:fa:86:62:69:76:6a:c9:0c:1e:b7:
6a:34:72:54:f6:5b:37:df:c8:4e:ac:43:0d:2b:07:
63:ba:40:2d:47:5c:28:da:33:80:ea:e5:19:41:ce:
2c:72:f3:67:6d:74:76:48:a8:62:3f:3a:a5:0f:1d:
5e:97:da:ce:f4:60:66:94:2e:fd:d6:00:d4:5d:3c:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:3F:5A:B1:6E:44:11:32:21:1A:27:D8:B4:32:4D:A4:EB:FD:03
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d4:61:a7:6a:44:0d:8c:2c:6a:63:f5:87:c6:05:9d:bd:3c:
c0:dd:54:8a:74:9a:fc:24:a5:a0:4b:3a:8f:66:90:a0:d7:8e:
0a:93:6e:fc:1c:96:cf:a4:28:f6:8c:72:45:f2:a3:3e:7c:c9:
64:03:1e:a5:75:e3:41:6e:d0:39:a4:88:71:69:65:77:1d:b1:
66:21:97:9d:cd:e0:f8:33:2f:9b:24:90:d3:47:28:9d:e3:65:
39:9e:e3:8d:e4:8a:66:0b:e3:e2:e9:72:90:6e:70:06:89:c9:
ac:48:de:c9:09:6f:49:eb:38:c9:50:49:19:26:4a:b0:9a:3f:
f8:d6:9a:e8:89:ca:8e:39:2a:3e:7a:4e:9a:16:f7:21:74:cb:
6f:00:65:fc:4c:45:de:32:5e:60:58:db:52:14:22:27:6a:13:
bc:8f:e3:96:fd:82:fa:5c:df:c7:ed:91:9f:2d:63:7e:cb:9f:
c0:83:42:27:80:a3:a9:cc:4b:aa:97:2b:e8:f3:3c:53:45:e9:
5c:52:fb:be:d3:8b:3f:5a:42:40:77:1c:d8:64:d7:be:20:24:
e9:ad:3c:4c:04:39:b1:dd:ee:31:f2:24:54:75:ea:dc:b3:7c:
64:f0:83:ef:c7:9e:77:76:52:06:55:d8:15:68:f0:4a:4f:c9:
87:06:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:16 2025 by rpki-client