Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: JB1boug3XaImydVYhiQH6gxLDYaKLir0XusMCDZdHOk=
Subject key identifier: E5:2D:2C:D4:87:90:08:9C:FF:1E:BF:D1:A0:BA:40:75:C1:60:32:83
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019A725CCB21703E9530F8FBF4E56F267729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 02C3
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: g6wZWo5K1EHtrlwL1ZsApoy9RQaMRKQlS0poa7wmygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cb:21:70:3e:95:30:f8:fb:f4:e5:6f:26:77:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=e52d2cd48790089cff1ebfd1a0ba4075c1603283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:a2:3c:6e:87:7b:de:b6:13:c3:53:69:ee:
5a:f9:b3:ea:cb:5b:c4:17:4d:42:96:73:62:58:ec:
84:12:7f:37:b3:f3:a7:44:c3:de:4f:4c:99:fd:12:
d3:0f:8a:c1:9a:7c:39:f7:e4:ed:02:0d:45:ae:ad:
d5:2b:ac:c6:b3:14:85:15:38:2f:eb:1d:f2:27:db:
2b:cb:f1:7a:b9:ba:29:00:7a:9b:b0:5e:94:6f:bb:
85:44:98:8d:a5:54:5f:d3:4b:61:a6:55:40:17:03:
26:e0:82:69:23:b0:8a:fa:a3:24:27:57:29:9a:fe:
37:49:d2:4a:07:f8:f6:fd:a3:03:6e:ac:47:42:5d:
d8:7a:a4:f5:90:30:d8:09:fd:7f:16:78:d5:b9:64:
d6:c6:7d:5f:95:73:8e:a2:d0:4a:9f:42:32:b6:9e:
c9:aa:ad:bf:62:ae:f0:0e:cf:cc:38:55:88:0c:52:
55:0b:34:3f:2b:bb:6c:e4:27:78:42:7f:10:5f:75:
0e:ee:a6:ba:1a:09:d7:52:b7:0a:2f:c9:91:f8:9e:
96:ec:8a:93:1e:d2:92:90:91:4e:87:19:21:e8:00:
76:2f:fc:7f:84:aa:78:97:3f:72:3a:48:10:3f:69:
02:a0:d9:09:ab:fe:88:b1:6a:f9:06:be:7e:68:29:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:2C:D4:87:90:08:9C:FF:1E:BF:D1:A0:BA:40:75:C1:60:32:83
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:05:2d:a8:e8:8e:22:ab:a8:53:40:62:82:84:13:70:11:c4:
e6:0f:15:1e:d8:60:3e:6a:f9:23:2e:f5:70:0f:e4:51:50:62:
15:88:28:8d:a7:e4:af:24:52:0c:35:58:94:e7:dd:b9:2a:93:
7b:55:71:67:c2:0b:4c:ed:0c:cf:19:37:68:fa:c3:2b:86:35:
e0:da:00:3d:79:4c:b2:dc:f0:6e:50:89:0d:ba:0e:f4:17:ac:
77:c7:c1:cb:8d:56:0a:62:82:07:32:c9:6a:69:5e:a8:f7:7c:
4b:ee:09:99:f8:70:bc:d1:77:67:c8:22:6a:5d:29:59:db:04:
ca:bc:f7:46:a3:28:a3:04:88:7d:f3:7e:1e:2a:70:99:18:a3:
2e:93:52:9e:7b:59:e0:7a:31:39:a3:b0:51:65:ab:cc:cf:2c:
fd:98:95:b3:6b:1e:5c:6e:bf:58:d1:8e:11:e2:79:8e:fc:21:
ab:a1:aa:97:5c:d9:d0:45:c9:b9:8e:88:07:c1:9e:4e:db:c6:
ca:6b:34:88:1f:51:3f:3e:11:c4:5e:ca:4f:97:a8:e4:e8:62:
f4:8b:80:8b:c4:8a:0f:c2:ec:0e:c3:01:37:7d:3f:b1:a9:d4:
90:5f:82:d7:20:1a:12:50:44:01:ff:eb:eb:ba:fb:34:26:fd:
78:40:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:38 2025 by rpki-client