Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: wqKCoxXe7AeCm3dZ881T7SlqFv1wDcq2Lr4OPkORgjI=
Subject key identifier: 71:0F:01:72:EC:2E:CC:7D:A8:B9:42:55:9A:F3:CB:72:45:97:82:C9
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 0199FC21709E3CA3180A57B975B0B17935F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0F79
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: DeC6Ycs4q+6qaPRzGz9BAEaEX0x5QgPuLhj3AdC/pUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:70:9e:3c:a3:18:0a:57:b9:75:b0:b1:79:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=710f0172ec2ecc7da8b942559af3cb72459782c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:61:4c:3e:df:20:a6:b5:76:5a:48:18:30:
08:f0:09:65:fe:b9:0d:42:23:cc:23:ef:05:3d:b1:
43:45:d2:a3:a7:2c:db:bd:86:06:72:2f:73:01:02:
f8:e8:3e:fd:33:84:00:5a:9b:70:c0:81:c5:3d:52:
17:6d:21:d4:8c:7f:5b:b3:0d:a3:45:7a:ff:6c:79:
70:16:4d:0b:73:c9:52:42:bd:92:0b:1c:09:c5:25:
38:9e:14:79:d6:b1:0c:7b:46:36:83:a9:aa:58:39:
2f:06:73:34:1e:dd:47:ab:14:c9:95:27:e0:0a:46:
71:28:bb:11:2f:71:e1:53:4a:31:74:ee:9b:c3:8b:
90:9b:18:61:4a:ab:ba:0a:37:a7:bb:c1:b8:fe:b7:
59:22:11:71:7b:2f:61:fe:da:b2:44:cd:41:98:55:
b0:f1:fa:83:e3:e8:7a:54:08:ce:80:55:38:91:c1:
e7:d5:69:2b:ee:bd:57:81:97:68:0b:30:57:f6:04:
54:3c:0f:9d:31:6b:ce:6e:34:79:b3:1e:c4:ce:e7:
33:72:90:33:62:e5:0c:69:e2:fb:fb:8d:fb:e3:e0:
04:f9:0c:41:91:91:33:0b:17:1e:6e:3d:af:58:51:
3f:0c:55:e0:a6:72:4d:60:11:d4:11:ba:82:93:24:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:01:72:EC:2E:CC:7D:A8:B9:42:55:9A:F3:CB:72:45:97:82:C9
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ed:1a:40:fc:e4:1f:e2:df:c7:db:1c:6d:8f:2f:b8:7e:ff:
d2:82:94:93:01:dd:c2:74:a9:83:a7:04:47:8f:8d:05:9d:7f:
5c:8a:9f:e2:3d:57:68:af:82:8c:42:26:75:37:66:e7:58:1b:
5b:18:5f:14:e4:24:bc:cd:1a:5d:af:13:23:ee:1d:84:c0:24:
ed:96:02:5f:b9:0b:a3:df:d2:ed:04:ab:30:20:18:1f:90:6d:
2b:b1:c6:64:aa:a0:ef:db:8f:de:0d:95:60:28:b5:fd:0c:bd:
1e:84:1f:e3:c4:be:7a:00:05:6a:66:83:4f:97:13:ab:5a:74:
99:d8:92:16:58:d4:48:4f:7a:d0:c4:48:a9:28:a6:c5:da:60:
62:09:22:1c:8c:f7:c9:8c:40:ff:0b:4f:62:2c:72:b8:c9:03:
ae:4e:3a:eb:62:b9:19:ea:aa:b7:a2:79:79:bd:12:e0:cb:05:
2c:3b:66:3a:1f:9a:61:d3:e2:bb:29:11:d8:a7:d8:d0:d4:6d:
dd:fa:80:e0:d1:88:37:cd:de:29:b2:00:53:bd:7b:eb:f7:49:
1b:34:af:37:34:ed:06:0d:da:c7:3a:10:0b:59:5e:1a:d5:a6:
01:d1:b5:21:af:6e:87:1e:73:a5:b2:63:55:10:81:25:28:fa:
48:95:1e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:44 2025 by rpki-client