Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: yonbP0vljXPJgNXzZGJjOrylp+uLmVaJtUx+PvCu6Js=
Subject key identifier: 40:84:39:E0:91:23:D2:2B:DC:2B:72:54:C0:64:33:BE:1D:07:49:29
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 019A71EE963A4AC74580DFC669E460B023C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 13DF
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: qZoLDuUx2WifodFuA58MhQbxne1IPU2UJaG8i7NFUFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:96:3a:4a:c7:45:80:df:c6:69:e4:60:b0:23:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=408439e09123d22bdc2b7254c06433be1d074929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:0b:97:56:38:72:2c:b2:a8:31:ea:80:58:
67:61:16:66:5d:6e:ab:56:15:a5:ad:fc:b3:c2:76:
1e:f9:1a:7c:51:98:a6:79:68:b4:31:b2:a6:08:9d:
b9:50:00:40:e8:70:80:2c:56:c7:8c:08:ca:1d:6f:
79:96:da:f4:e0:7c:48:9b:e4:59:c5:18:e6:95:68:
89:4a:09:07:b0:83:bd:77:13:08:10:92:de:d9:d0:
45:c2:de:8a:52:c2:cd:82:e8:8d:cc:62:7c:1d:30:
e0:8b:1d:b8:c2:60:11:06:cb:09:83:e4:f2:07:44:
09:bc:02:46:2f:68:dd:93:93:05:61:2e:b5:72:1e:
0b:75:26:f7:ad:71:51:84:0d:f2:25:c6:80:65:f9:
45:50:82:eb:e3:64:99:be:89:5a:40:01:1a:ba:83:
a0:dd:9c:a1:eb:e3:4c:9d:2f:ea:4a:c8:00:04:47:
2b:57:91:ef:0e:f2:cb:6f:55:32:82:cb:4e:e7:2e:
0c:1e:40:4b:01:ae:50:64:87:d3:6f:26:0c:56:1f:
65:e8:15:c8:6b:13:6f:25:bd:c0:eb:d4:5c:03:60:
75:9a:28:40:c4:e5:5a:8b:6a:ab:72:6a:b0:a3:f5:
13:09:1f:ac:fc:71:94:f4:04:71:66:59:4b:59:98:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:39:E0:91:23:D2:2B:DC:2B:72:54:C0:64:33:BE:1D:07:49:29
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:f3:29:99:97:fc:98:c0:89:a1:81:eb:5d:a4:91:c5:00:
5c:a5:61:75:71:60:90:18:78:fd:85:43:0c:cb:9f:3a:b2:2a:
10:e1:c0:50:57:ed:a9:b6:7a:02:9e:10:8f:2a:50:0e:06:65:
9b:79:a6:d3:67:5e:47:41:bf:d6:fd:28:18:f3:bd:69:c5:57:
83:d6:96:b4:d2:50:af:99:79:f2:1b:14:a9:4a:0d:21:f9:1f:
5a:f8:25:63:43:1b:cc:25:bb:14:22:09:8c:79:d4:01:b7:a5:
2a:74:17:0a:e5:50:22:a7:03:38:96:62:4a:cb:a1:3a:bb:26:
01:89:f4:65:14:01:e3:64:22:b8:c4:90:f2:2b:ca:b8:a8:6c:
19:eb:84:db:0f:77:8a:f4:10:52:92:f0:d6:6a:62:54:3a:fb:
5f:ea:f3:6c:34:95:21:3c:43:53:4a:fc:23:1f:ee:e7:c4:a1:
3f:e9:c9:fc:29:2a:06:ea:fd:e6:d6:64:ab:25:f1:b8:bc:bf:
0d:bd:9f:4b:08:c4:c1:d5:44:c4:12:e0:04:79:35:2c:ab:a1:
58:27:18:dc:0e:c2:cb:dd:6e:c8:46:54:2b:12:fd:b7:62:86:
87:1b:46:f1:80:20:d8:e7:0c:84:c5:92:1e:5d:c7:f2:a0:32:
ca:11:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client