Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: mdseqHetzbCYO2imSCDrnm3KgSn3KD0/loL6INjL+j4=
Subject key identifier: 0A:E0:11:E3:F9:97:67:29:44:08:9D:46:E3:C1:A2:E8:E6:8A:E8:17
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 019A01EBE8EABED4329F0B6C2EC5D2EB3552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 087E
Signing time: Mon 20 Oct 2025 14:00:28 +0000
Manifest this update: Mon 20 Oct 2025 14:00:28 +0000
Manifest next update: Tue 21 Oct 2025 14:00:28 +0000
Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: ZZ8RD/RPn9ev8EGEjxf59nTV/6OIdODT0P2eAk9fVuc=)
2: h1XtrgQS4y6F2QyLyCE8H5yVgX0.roa (hash: nBro9lqJpw++Y/bB5Bh7ukI6Oz6bg0ejSLEPfy18Wfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:e8:ea:be:d4:32:9f:0b:6c:2e:c5:d2:eb:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Oct 20 14:00:28 2025 GMT
Not After : Oct 21 14:00:28 2025 GMT
Subject: CN=0ae011e3f997672944089d46e3c1a2e8e68ae817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:68:d9:2c:f8:a6:36:23:25:eb:73:e0:b2:c6:
90:73:33:c2:37:0e:8c:12:43:34:19:b2:95:b0:7a:
2e:0e:83:79:fa:f0:be:98:0d:0f:41:c8:9e:cc:5e:
0b:07:e4:15:30:23:72:b0:74:a6:96:b4:25:e9:3d:
94:4d:24:cc:ac:e4:cc:87:42:2e:be:32:3f:96:24:
19:e6:2e:ad:f2:dd:e6:c0:5a:d9:57:c8:0f:0b:5e:
80:47:17:5c:35:bd:40:64:2c:7e:7c:26:33:9c:e4:
94:a4:5d:3a:6e:21:2a:05:57:11:16:bd:53:80:4b:
7f:56:22:2a:7c:8d:57:c4:8e:fd:9a:52:25:0c:a0:
48:0c:35:56:aa:e4:09:74:34:b2:79:d1:3d:fb:a8:
f2:fd:59:95:a4:ca:08:f9:18:ff:f6:ee:16:5b:5c:
25:7a:35:f3:46:8b:67:76:07:70:a5:d2:08:e8:0e:
80:a5:34:26:d9:a6:79:6f:af:32:a0:b4:34:fa:8b:
e8:00:dc:6c:40:37:4a:61:57:f6:9c:8a:bf:50:10:
b3:54:30:40:16:c3:ee:b2:a6:e3:c2:9f:0a:59:bc:
23:3b:41:ed:19:5f:8d:5e:6d:2c:d5:64:f7:58:07:
81:c2:ab:38:14:aa:a4:7e:db:08:5e:69:89:b4:9f:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E0:11:E3:F9:97:67:29:44:08:9D:46:E3:C1:A2:E8:E6:8A:E8:17
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:df:b2:21:7c:c7:a1:f4:21:ce:77:8d:ee:3a:78:35:c4:
63:ff:b4:97:1d:23:32:18:5c:e8:09:63:cc:42:e3:f7:8b:ca:
18:bf:24:e1:cf:d2:4a:2a:70:f2:2a:58:20:1d:84:ef:b8:a3:
48:45:ba:e0:b9:ce:a2:9f:e8:34:6e:e0:19:64:d7:b6:a7:c8:
3c:16:f6:5d:74:1a:3a:3d:db:d6:f2:af:2c:80:30:73:27:aa:
f0:b2:7f:6a:4d:78:5b:44:7a:bd:e8:8f:54:31:a5:e6:cb:78:
6c:3b:a6:8c:79:f6:47:09:96:81:b5:2b:12:e9:db:80:7b:03:
fe:c6:ac:94:1d:d3:0a:75:89:55:78:12:a1:2b:f6:0b:a5:fd:
9e:81:5e:4b:7a:03:50:ef:7a:9a:20:ff:a4:72:eb:ad:18:ab:
5a:ab:66:62:a4:5c:03:d1:c0:24:65:aa:07:09:b7:d0:a1:98:
78:51:e2:8a:05:5e:35:21:2e:07:3f:32:44:d4:79:32:f4:f1:
64:2c:12:e7:98:21:67:da:92:c1:4a:ca:b4:e2:73:c3:0d:b0:
87:22:3a:d1:91:6f:7b:f6:ea:70:a3:62:d5:4a:b3:4d:76:6a:
98:c4:6f:35:cf:b6:30:76:2c:ff:d6:c8:78:a3:8b:37:84:34:
7d:a0:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:33:15 2025 by rpki-client