Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier: oPkD9I4PPmaqq03L/eGXxjGZ4EI2ekOERTqDwqg4fqs=
Subject key identifier: 7A:1D:42:2F:47:56:91:C0:6B:9F:83:E1:BF:EC:33:16:1C:4C:E3:09
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 019A71B8B624239DB8BA510533FE53732386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number: 0861
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: X2gmnLrpx1UrEIc+oH0bipVv/OXxG326i9LPn0m3BnU=)
2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b6:24:23:9d:b8:ba:51:05:33:fe:53:73:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=7a1d422f475691c06b9f83e1bfec33161c4ce309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:1e:3f:b6:f3:19:10:a0:e2:b5:00:71:cf:
6c:08:56:50:66:9b:44:9d:ee:fa:c5:1a:13:4b:96:
21:c1:ae:4b:72:98:98:89:d4:2e:d9:9e:f7:93:aa:
f8:ec:bb:fa:4c:e3:fc:82:d4:f9:b2:1e:85:a1:d5:
5d:c4:66:b7:a0:a3:e9:92:00:51:fc:ea:99:ff:65:
6b:f8:5f:c6:8d:cc:2f:e9:35:13:96:71:9b:40:06:
98:92:2e:e1:77:8d:f7:86:aa:14:c0:d3:80:ef:1f:
4a:26:38:97:27:88:c1:8b:d3:de:63:a8:42:96:65:
40:f9:4e:fa:78:76:d7:54:99:f4:4c:ec:8b:52:08:
f1:df:0b:e8:08:0c:15:ae:1a:60:95:2e:df:63:61:
f7:05:b6:25:e8:74:0a:11:e9:80:bf:5d:e2:1d:02:
af:54:71:3f:16:01:27:8e:4a:c4:90:05:34:6d:33:
fa:c4:0c:4a:1f:2d:cb:52:98:62:93:84:58:66:49:
4a:e9:d7:9a:c1:d0:ca:25:6a:f9:04:d3:33:8a:3c:
cd:85:2d:6d:9e:da:5c:01:c9:b1:7d:42:e1:e5:5e:
de:48:34:c8:17:78:b2:5c:88:a3:00:f3:3b:80:cf:
88:b0:22:01:9e:51:62:a4:d3:a2:c3:9d:86:93:c2:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1D:42:2F:47:56:91:C0:6B:9F:83:E1:BF:EC:33:16:1C:4C:E3:09
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0a:30:4b:c3:49:57:31:d9:ca:94:17:8f:b0:52:dc:51:97:
b7:72:af:81:31:08:fc:14:89:54:1e:ed:5a:82:6b:d6:bc:27:
24:69:5f:98:ae:fb:c9:87:d9:ae:df:3c:12:7e:a2:65:c6:27:
01:fc:df:dc:97:d8:51:df:22:55:0d:8b:3e:03:37:5d:f1:3b:
7c:16:d5:4f:2c:a6:57:4f:b8:89:07:8f:98:43:8d:7a:33:44:
69:2a:c5:d0:ef:e4:b1:56:cb:df:56:e2:fd:ce:d0:f3:24:86:
af:b9:03:9d:e1:1c:f1:32:bf:b4:7a:44:0e:25:f6:f9:86:be:
fb:ee:9c:9f:96:58:e0:84:59:cb:e4:d7:5d:1f:8a:cc:3b:c3:
7e:07:03:dc:2e:34:37:63:1f:68:9a:37:cf:f0:15:e2:64:57:
c5:51:d5:3e:c1:dc:ee:5b:3f:26:65:02:af:bb:b7:a3:c7:3a:
d7:54:76:a7:9a:2d:dd:3a:25:af:35:48:b9:26:07:44:e1:db:
a3:09:a4:11:d3:cc:bd:ea:9d:75:28:27:c2:eb:68:fc:c7:07:
ab:d4:1c:68:a7:85:ff:92:f5:a0:8b:69:09:ea:0a:d2:9d:24:
bd:01:86:e1:33:80:04:45:e3:ba:cc:de:1e:ff:a0:29:34:9c:
79:61:51:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client