Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
File: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json)
Hash identifier: yvGja+/c8C/hDlMVnOaP/qOnaxVC43xeDabazz8YYCc=
Subject key identifier: CF:E0:53:54:AE:26:EC:CC:F2:43:E5:25:BB:DD:16:7E:C7:A3:72:FA
Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Certificate issuer: /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Certificate serial: 019A714A2C55598D3107DFD357902D130832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
Manifest number: 0809
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: 31uLN1utttIVET6kwrLqzF/YLvdIR8PTxgtOj/71F74=)
2: oYPmCSWvS8EzeEC8QLUq6x_eYrI.roa (hash: 1A9wNN6kYL22cNZ71fS4DQFjU5QHCoE6jNJ2g/Xtw44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2c:55:59:8d:31:07:df:d3:57:90:2d:13:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=cfe05354ae26ecccf243e525bbdd167ec7a372fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:ed:d3:d5:22:fd:af:c9:2b:cb:f6:6b:bb:
35:77:0c:4f:a1:77:53:31:26:41:9b:d7:c5:93:cf:
65:4d:68:44:39:da:c1:60:72:62:e5:fb:1a:77:35:
ed:ac:24:a3:99:63:e7:58:0c:7b:bb:85:9a:1f:1c:
6e:47:39:c5:35:0b:55:55:3f:19:ef:dc:45:ad:85:
31:79:4e:d4:16:07:fa:d2:46:d8:06:c7:d6:c2:fc:
a9:b7:f9:c4:3c:4a:d7:97:40:19:83:09:75:38:44:
66:02:14:a9:e8:cd:2e:d2:90:6e:37:0c:75:83:5d:
38:0e:0a:62:3d:16:fc:17:96:bb:93:41:3b:fa:51:
c1:bc:31:26:87:15:ae:12:67:f1:28:b1:d7:43:50:
7c:09:7e:9e:c6:27:0f:d0:7f:43:5b:1b:ff:06:c4:
6c:91:4d:02:4a:bc:86:eb:49:3e:ee:8b:ec:50:2e:
3d:bf:96:b0:ac:6c:24:11:5a:82:e9:b9:73:ee:c2:
5e:bd:66:e2:76:8c:7f:73:ff:36:22:21:0d:5a:e1:
59:67:23:62:01:61:07:a6:5a:83:19:fb:d4:15:25:
fd:1a:dd:ec:39:a8:05:7b:ec:fd:eb:57:e1:c9:16:
b4:24:59:d5:6a:49:f0:23:01:26:0c:fb:a1:c8:fa:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:53:54:AE:26:EC:CC:F2:43:E5:25:BB:DD:16:7E:C7:A3:72:FA
X509v3 Authority Key Identifier:
keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bb:86:f7:b4:4a:75:06:2a:09:6e:da:dd:38:7b:0c:b8:0a:
2c:cd:e8:ac:7a:3f:82:d1:55:68:75:1b:ae:32:6f:f9:18:31:
d8:b9:d1:ae:3f:07:53:5a:d0:79:e0:f2:0d:3c:c6:8c:19:d8:
a6:fa:c3:a3:0f:93:b0:c6:b5:ed:09:55:11:17:d2:6e:0c:e3:
77:60:3d:65:66:a2:32:af:7c:c5:44:d6:44:ff:54:39:6e:f5:
62:06:31:a0:68:82:c6:80:82:85:17:27:4d:26:70:25:c6:9d:
93:9e:97:44:b8:72:9f:b6:f0:a0:b2:83:af:b8:39:be:2e:2f:
bf:de:83:85:88:44:c6:0f:2e:5d:f5:42:fc:9d:07:2c:de:75:
b7:4c:d2:0a:87:30:3d:87:97:c0:59:eb:1a:e5:27:b8:d0:db:
6d:81:0e:6d:92:7d:b0:41:d9:53:5f:b0:44:b3:23:d9:2b:a0:
bb:38:d7:fe:a2:b5:53:eb:69:85:92:92:02:93:59:c2:aa:da:
8f:17:ac:61:d8:49:3a:c9:23:02:70:6b:00:8d:4a:61:ee:38:
85:a2:9a:4d:1e:44:d4:98:dc:26:a9:71:56:ea:69:a5:03:ca:
15:a6:34:f2:48:6d:66:bb:49:4e:d9:7a:89:5e:bc:47:41:93:
69:8c:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:36 2025 by rpki-client