Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: DOBH+JDt7IIEiBTDvEjPsCOjl5guya4rOekFAK+7+9Y=
Subject key identifier: AE:F9:DB:C4:FA:26:11:FA:E6:84:49:DF:F2:67:BE:35:E1:DB:32:8D
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019A228A7E82E8D38BA57E30F0A890ABC180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 131A
Signing time: Sun 26 Oct 2025 22:01:32 +0000
Manifest this update: Sun 26 Oct 2025 22:01:32 +0000
Manifest next update: Mon 27 Oct 2025 22:01:32 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: 8gqhIivkNYa+Cp63s+Hc0tgsTnlulOTPz54AgAjqXPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:7e:82:e8:d3:8b:a5:7e:30:f0:a8:90:ab:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Oct 26 22:01:32 2025 GMT
Not After : Oct 27 22:01:32 2025 GMT
Subject: CN=aef9dbc4fa2611fae68449dff267be35e1db328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:7b:9d:98:72:56:d1:54:29:8c:c8:e0:5e:
38:3f:07:01:99:1c:9c:5c:7d:bd:81:9a:a2:82:05:
45:5a:b7:8b:a1:0d:4d:25:fb:9d:cc:35:34:a6:78:
9a:3a:d1:33:01:27:66:c8:0f:e9:18:a0:49:52:19:
91:08:2e:08:62:cb:84:a1:b1:05:75:a2:47:9f:69:
5b:d6:4a:e4:bc:e8:55:c8:ea:c1:71:ba:e0:03:28:
9d:a6:26:86:8a:0d:1e:58:f1:24:4d:36:13:b3:39:
f1:6a:f4:c4:f9:d7:df:ae:e9:44:69:1b:39:65:80:
e5:fe:f5:20:95:68:7a:17:97:8f:46:4e:3c:df:81:
9f:17:66:1c:50:61:1a:70:67:72:cf:70:d8:16:5f:
e5:67:89:56:1f:95:8f:6e:e0:ce:4c:29:18:30:91:
86:2b:b4:16:17:be:c8:b7:fc:2d:14:b9:5b:48:15:
a2:77:88:88:e5:b0:41:18:cc:3d:f3:7a:11:9d:8c:
c5:18:1d:a4:f8:34:61:8c:29:88:b1:b9:9a:34:14:
c8:52:c0:b9:33:b5:a5:c4:34:3d:ac:d1:91:86:fe:
ba:66:ca:c9:41:a3:49:84:34:af:3a:3d:ab:a9:bf:
14:2c:d6:f1:68:78:29:53:d4:fa:22:38:b4:ad:d1:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:DB:C4:FA:26:11:FA:E6:84:49:DF:F2:67:BE:35:E1:DB:32:8D
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:50:8d:ce:c9:ef:d6:32:a4:3e:1d:dd:9a:23:44:b6:c6:
49:6c:90:f8:39:1c:eb:0b:b0:4e:12:9b:6b:c1:a5:b8:97:57:
b5:82:ff:f2:b4:3c:7a:34:7b:37:21:75:fe:aa:84:01:8b:8e:
7a:2a:50:1b:f8:a2:6d:40:98:6e:e0:40:26:6d:0b:79:7f:24:
e8:f3:4c:bb:2e:d5:32:f4:a5:8c:f8:05:5f:46:c0:c1:b3:05:
d9:dd:14:79:ed:d0:17:59:aa:7f:bf:11:91:15:6f:9f:f3:a5:
33:c9:13:d2:4e:a8:d7:bc:40:6d:fe:1b:b0:70:87:85:57:7f:
9e:d3:cf:32:82:0d:d3:ec:72:6d:07:d1:76:80:cf:ac:1a:a8:
7c:b4:9c:61:33:69:72:e0:16:0e:9d:04:ab:43:e1:b5:47:49:
9f:cb:98:03:db:b9:8b:fd:ac:2d:bd:80:e9:1c:bf:66:d3:40:
99:d0:24:af:38:02:73:07:72:05:7e:37:f1:ed:ff:85:80:3c:
a8:b7:07:d0:f9:ca:49:bf:78:13:fe:2c:fa:bf:33:80:d9:8c:
26:f9:ba:7f:f0:ab:6f:b2:2f:e2:b6:15:8d:b2:12:2f:c2:17:
a5:7d:f2:69:cc:22:ef:8b:fc:36:d0:e9:7c:8f:44:75:65:6a:
bc:32:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:28 2025 by rpki-client