Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File: gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier: gkOBOQepKuKz8GB1K0KVb6avuMUxHe3JlMbsLGiPDVQ=
Subject key identifier: F9:ED:D8:60:FA:86:A5:86:3B:9A:27:23:59:1E:40:90:57:D6:53:7C
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 019A047F145C2D4327CD9118D61F1B5B4EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number: 09A3
Signing time: Tue 21 Oct 2025 02:00:28 +0000
Manifest this update: Tue 21 Oct 2025 02:00:28 +0000
Manifest next update: Wed 22 Oct 2025 02:00:28 +0000
Files and hashes: 1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: nAqIExINdg5dnFCVjPxqNKfDfz8pvToG2LrtQmL6jQ4=)
7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:14:5c:2d:43:27:cd:91:18:d6:1f:1b:5b:4e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Oct 21 02:00:28 2025 GMT
Not After : Oct 22 02:00:28 2025 GMT
Subject: CN=f9edd860fa86a5863b9a2723591e409057d6537c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:bb:2c:d0:b8:c8:ba:ce:c7:ec:4a:79:61:
88:ca:fa:14:e1:a6:e9:79:96:26:7f:a8:28:ef:e3:
5d:62:4f:af:9c:8d:7e:7f:15:ca:be:5a:e4:d2:00:
42:f4:1d:cd:1b:92:23:3c:ce:97:93:b5:1c:36:91:
7f:34:6f:92:33:9c:45:55:42:bf:a1:90:c5:7f:84:
19:f3:63:14:a0:d9:82:4f:fc:96:80:ab:f6:ad:83:
d8:6a:fc:e9:93:84:db:a5:45:ab:55:76:1b:91:cd:
0e:59:c9:40:5a:1b:d2:eb:87:2e:e5:45:44:ad:10:
ad:c7:80:06:c9:ef:ca:2c:14:06:70:b4:9b:f4:65:
ef:4f:c3:61:c7:5a:d0:88:10:3d:e7:a4:87:b7:f4:
69:47:38:63:b5:e4:2f:91:c1:0b:8d:e2:df:d6:cc:
12:2c:cf:65:31:9d:73:f3:9b:7f:bf:3d:62:c6:58:
cf:4d:1e:37:2d:c2:db:49:08:f8:7a:bf:7b:fa:99:
11:61:99:4e:43:2e:88:2e:da:ee:52:bb:f9:4e:4a:
27:fb:3e:c7:46:5a:50:4e:af:37:72:74:3a:06:5d:
1d:17:03:30:56:b9:b3:e8:4d:90:7f:de:79:0e:e7:
6b:e0:39:25:22:0a:e3:22:9b:70:2b:7f:1c:3d:4b:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:D8:60:FA:86:A5:86:3B:9A:27:23:59:1E:40:90:57:D6:53:7C
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:88:54:06:09:0f:60:f8:ea:52:42:a9:56:11:74:5d:c6:fc:
ec:29:29:f7:57:9b:5e:4b:58:9f:f6:64:21:63:ae:02:06:a5:
ee:91:f5:17:5b:fe:99:3b:57:c4:07:96:bb:ac:d1:6b:c4:f1:
16:a4:26:91:f7:88:82:08:a9:98:43:99:b6:81:fd:54:de:d6:
06:03:94:06:85:78:53:1d:64:31:75:3d:b2:95:4d:e8:a4:a7:
5f:ca:04:0d:d7:30:41:22:3a:8a:45:44:af:08:d5:07:3b:62:
25:4c:c2:e7:ca:45:51:ee:ba:a6:c6:db:f9:e1:73:be:49:70:
a3:b8:7b:1b:aa:87:4d:1a:b8:dd:47:b5:62:5d:46:05:40:84:
b1:73:2d:1a:36:60:8c:cf:8b:e4:28:4a:f0:f9:5b:9c:1a:31:
47:73:47:cb:ba:45:0c:e0:86:fb:d3:72:19:84:e1:fe:58:20:
a2:d5:c9:e4:63:8c:ef:0e:32:f1:61:f4:b6:c4:25:e6:38:a1:
36:0c:42:d7:74:74:3b:1e:7b:cb:54:5e:82:d2:46:3b:0d:18:
49:78:86:d0:db:b3:b0:ab:ad:30:fa:1e:c0:94:40:4d:f2:8e:
8e:13:b6:9d:89:8b:f2:a0:7b:c5:b4:b5:01:61:d8:71:cb:eb:
35:6b:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:20:25 2025 by rpki-client