Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: I3lxzAGLK/SlbNy9kZEgmaF4GlCrIxeX8KTqER47E7g=
Subject key identifier: 0B:BB:11:5C:2D:34:88:B3:AE:46:D7:0B:67:95:AE:6B:FC:00:BE:CB
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 0199FDDA2967067F1F389AE6E0C644F8D838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 16B0
Signing time: Sun 19 Oct 2025 19:02:37 +0000
Manifest this update: Sun 19 Oct 2025 19:02:37 +0000
Manifest next update: Mon 20 Oct 2025 19:02:37 +0000
Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: 1q0kymLXYYdfUOFNHyvgRbTJ0HWS5RHqstGP491/uzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:29:67:06:7f:1f:38:9a:e6:e0:c6:44:f8:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Oct 19 19:02:37 2025 GMT
Not After : Oct 20 19:02:37 2025 GMT
Subject: CN=0bbb115c2d3488b3ae46d70b6795ae6bfc00becb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:b9:bf:b8:76:2b:75:9c:c8:05:f4:bf:2a:
44:52:11:e7:10:46:b6:83:03:e6:f4:15:33:8d:15:
68:e2:96:ad:45:41:9e:9b:8d:9e:6f:fa:b3:c2:cd:
1f:28:06:11:b7:e7:ae:dc:0b:ba:2f:c0:a1:22:cd:
fd:c5:6e:45:65:cf:02:7c:3d:9c:7a:d3:1c:75:4c:
fe:a3:fd:bc:9d:38:a8:33:c2:80:9c:6d:35:20:02:
cb:30:e3:0c:0d:e5:da:0c:f3:1d:30:3e:ff:12:9d:
8c:32:43:d1:37:7c:5b:a6:ba:0c:af:3a:70:a6:06:
71:62:c6:84:a3:2e:0a:86:3e:4d:e6:4d:59:2a:67:
c7:b6:db:db:d6:0f:36:3c:b7:30:06:32:ad:b2:60:
50:6b:8e:13:ff:bc:48:e0:da:c3:d4:6f:e9:83:92:
1a:e3:ce:b7:ce:bf:7a:04:8c:d7:a5:05:ba:50:0e:
cb:a7:da:88:23:58:3e:98:d2:74:f0:41:58:ef:e1:
b1:46:74:ff:fe:98:c5:51:74:d2:4d:1b:54:b8:3c:
b5:23:f7:19:0a:88:b3:21:6b:b9:3d:1f:40:7d:f4:
c1:07:ab:73:ac:da:12:be:5e:6f:24:2e:55:14:94:
7b:65:34:4f:ab:db:13:e9:5c:a1:b1:92:89:c5:88:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:11:5C:2D:34:88:B3:AE:46:D7:0B:67:95:AE:6B:FC:00:BE:CB
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2d:ad:83:90:fa:06:ed:3f:fc:6e:f9:d3:f8:a1:b1:51:c0:
08:36:e2:6e:7c:ee:a2:77:f0:2d:d2:30:1e:eb:29:8f:49:93:
27:d2:e8:07:38:7e:cb:0b:92:40:6c:e5:c7:74:d5:5e:0b:d1:
f8:38:ad:05:be:51:aa:4a:2b:45:16:c7:75:89:25:79:e6:55:
49:4d:62:01:22:0e:54:78:48:8c:fb:a1:ef:f6:83:72:cc:fe:
9f:7e:27:d7:83:fb:9b:bb:50:14:c2:4e:0a:f1:3a:97:74:1b:
b3:56:0f:40:90:64:08:e5:56:d9:53:bd:7d:9a:eb:c5:ae:65:
4e:7e:f2:7f:cf:f2:8a:7b:02:b4:7e:4e:25:00:fc:49:74:4b:
93:df:0e:e5:ea:5d:87:53:9c:93:2d:ec:a3:4f:47:18:d9:8a:
03:24:8d:c1:a3:98:c0:3e:c6:bd:c4:cf:87:2b:ad:e3:26:d8:
0c:a9:57:47:bd:93:62:e5:58:e7:95:13:a0:09:65:13:5a:ba:
64:74:83:7b:e8:c2:4e:06:b9:05:00:d4:06:43:db:da:42:be:
4c:a5:20:e2:5f:25:89:b8:25:82:0f:02:e4:dd:0b:d6:af:e9:
44:0f:9f:28:00:84:5b:43:30:a9:31:5d:0e:bf:12:16:6e:66:
46:83:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:06 2025 by rpki-client