Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier: R2RjQAV1PepBcmNeW9MaCxtreenA+hhTr5O1mUcMG9M=
Subject key identifier: 62:7E:B4:41:13:CB:A5:AB:08:ED:CA:4E:7B:47:23:A4:95:9A:4F:9F
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 019A240A4AE21390FC9D2D507281F7DE3933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number: 0E7E
Signing time: Mon 27 Oct 2025 05:00:45 +0000
Manifest this update: Mon 27 Oct 2025 05:00:45 +0000
Manifest next update: Tue 28 Oct 2025 05:00:45 +0000
Files and hashes: 1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: rFLb/emPTygDTtFWqQ1RPUbjqT5NNhWcJ4HgDadlJ/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:4a:e2:13:90:fc:9d:2d:50:72:81:f7:de:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Oct 27 05:00:45 2025 GMT
Not After : Oct 28 05:00:45 2025 GMT
Subject: CN=627eb44113cba5ab08edca4e7b4723a4959a4f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:e0:4f:8a:b4:33:ba:34:21:1d:c8:f9:81:
09:88:f5:5f:2b:ae:cf:c6:da:2b:c3:62:40:ee:f0:
e0:52:18:f4:62:2d:b4:ba:bb:b4:dd:95:1c:37:9d:
aa:41:21:b2:79:7d:3b:c8:9d:05:2d:b4:b1:6e:6d:
ee:be:c0:a6:3a:17:59:b4:fd:cd:cf:a6:42:f8:04:
2b:5e:eb:ec:db:88:3d:f8:8c:59:f5:01:4d:1d:44:
fa:1c:db:3c:05:d5:ca:5e:ab:aa:c2:22:08:29:fe:
42:d9:8b:80:9c:6d:6c:3e:63:b7:1f:91:22:17:c6:
1c:8a:11:0b:d8:b8:76:65:25:a8:96:19:6c:14:4c:
30:cd:52:95:5a:b8:c7:40:e3:b1:52:cc:42:96:82:
60:26:8d:83:31:5a:7e:b8:53:70:c7:fe:4b:d7:d3:
4c:05:88:41:fc:3c:79:6a:62:91:9e:de:f1:fe:15:
b6:82:c9:41:bb:76:47:8c:24:62:34:85:99:66:2c:
a9:e1:30:13:54:ec:64:41:59:94:79:0f:b0:fc:9b:
48:00:f3:85:de:eb:89:eb:8d:22:b0:b6:c9:2e:b7:
9b:e3:48:a5:9a:38:ac:2d:c8:d8:08:d1:b1:03:98:
e7:c8:db:36:6b:31:5d:ac:12:c8:e1:f5:0e:4a:2a:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7E:B4:41:13:CB:A5:AB:08:ED:CA:4E:7B:47:23:A4:95:9A:4F:9F
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:93:4c:b2:ff:64:55:6e:09:23:64:27:b5:79:f1:9c:63:
96:e6:4c:fb:b6:a8:c7:6d:1b:c7:b5:ca:04:03:a2:e8:46:e0:
29:6a:b0:2a:0a:ab:42:82:7c:c5:a5:d3:af:9c:aa:42:ee:ec:
12:5b:ba:0b:a8:7f:70:95:c6:97:d3:d9:58:b1:58:b3:16:a5:
d5:88:d5:82:ba:c5:79:00:f0:04:48:db:e0:c3:9e:f7:94:fa:
4d:03:60:65:9f:58:c7:94:f3:c9:72:fd:c7:2a:8a:8c:51:49:
60:e9:31:c9:4a:0c:08:6f:2d:0c:94:74:22:5e:5b:09:ff:f0:
d6:f5:3a:cd:84:a6:40:84:f1:10:49:69:24:35:27:27:e6:c1:
c2:81:af:4b:07:1d:df:6b:17:7c:fc:0d:cd:56:1a:98:4a:a5:
24:d7:d0:4d:a0:19:96:a0:bd:47:e6:19:b1:eb:ba:40:ec:70:
50:3a:2e:ad:2a:80:9b:b3:a7:b2:eb:cd:57:b3:87:9e:31:80:
79:58:9e:50:e6:43:35:19:a4:17:36:30:96:2d:09:5c:67:2e:
99:8f:57:aa:02:b1:c5:fd:e3:de:36:ae:5d:c3:11:b2:43:d5:
ab:98:54:43:6a:78:04:42:5a:cc:82:92:c8:2d:9a:1b:6f:f8:
fd:5c:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:36 2025 by rpki-client