Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: ULlwXTbk/KVpu590/Ws7t3N6KkkxRpYSr83IwxSQ6T4=
Subject key identifier: 7A:06:24:57:64:9B:00:DD:7C:8B:4D:BE:BC:99:6D:D6:4F:55:B8:F3
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 0199FD346DE8F6EDC1C1C343B3DD3AC49B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0C47
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: 6ZW6087bak8DohymJ+8Wy6555oe0ZsRQrHwHsLo9XnY=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6d:e8:f6:ed:c1:c1:c3:43:b3:dd:3a:c4:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=7a062457649b00dd7c8b4dbebc996dd64f55b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:b4:07:e1:9d:df:81:d0:74:d6:e9:12:e3:
aa:d1:4f:4d:e6:41:d7:ae:60:1e:52:3f:7d:f9:a4:
fa:e9:19:8d:ef:47:31:65:e4:c3:fa:ed:76:98:e8:
74:18:05:90:52:38:3c:67:8c:ef:d3:4c:fb:5e:87:
4f:a2:57:f9:0c:aa:ee:5f:57:8f:52:84:a7:ee:55:
be:b8:80:b5:3f:26:a2:a2:c6:e9:58:f7:d3:6a:f7:
07:eb:5c:ee:e0:54:3d:02:02:ac:fd:c5:11:02:fd:
68:63:65:76:11:43:e3:f9:08:6f:bb:9c:eb:8c:8b:
75:53:12:d7:6a:b9:ae:57:f8:5b:6f:82:28:b0:44:
75:f5:0a:81:a9:e4:f7:72:0b:80:2e:27:55:b5:b7:
cc:80:41:82:79:13:d8:83:14:cd:f1:2f:98:8f:7f:
ed:8d:0b:6b:76:a9:dc:05:57:a6:72:86:1b:a6:8e:
7d:db:5f:45:66:35:7d:cd:a1:ef:d1:09:4b:ea:c6:
e7:9c:1f:1d:c4:87:bb:53:f5:f5:07:00:bb:fc:3e:
6e:21:3b:81:48:e0:f8:c4:8c:68:5c:64:24:01:7c:
7d:de:78:5f:14:52:ce:a5:15:47:a9:ba:24:d6:38:
6c:b8:1e:dd:8d:cf:20:22:56:64:16:a1:c7:77:da:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:24:57:64:9B:00:DD:7C:8B:4D:BE:BC:99:6D:D6:4F:55:B8:F3
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:03:6b:4d:bc:74:85:a7:b6:45:74:cc:45:df:68:50:1f:08:
3b:9a:e6:c9:7a:8f:bc:f3:09:bb:11:68:98:3b:f7:8d:c9:c3:
8d:b6:bb:92:96:e5:06:1f:82:04:b1:92:8c:a8:17:b4:49:d5:
4b:db:b0:a8:cb:1f:73:cd:fa:2b:50:4b:8c:3e:5b:74:d5:5b:
79:df:d7:3c:59:5f:75:c3:a7:f4:19:d6:19:8b:2c:be:36:7e:
e5:4c:55:6c:65:2c:9e:6e:a8:8f:9c:71:9b:32:76:92:9d:71:
34:fc:66:75:d1:54:60:bb:d3:fc:96:a7:66:6f:92:b5:75:1d:
81:e6:5e:2c:09:22:7b:28:46:38:94:a6:1c:3d:df:25:e2:99:
a8:ee:0a:e6:45:e7:85:af:9b:51:27:c5:40:74:4b:71:4a:df:
b0:ab:3d:1e:04:2f:3c:e3:9a:72:6e:42:e0:72:4b:e0:9e:3b:
f8:85:70:f6:5e:17:67:f6:2d:c2:e9:e0:cd:c6:d3:d0:77:0e:
fc:c1:5b:3e:d3:ff:aa:11:01:f1:59:0a:cb:d4:e8:16:da:83:
54:24:d6:ff:66:68:22:3f:59:1e:5b:99:54:9d:19:b6:99:da:
12:a3:57:ec:1a:a8:da:22:6f:61:60:ed:0e:d4:b0:2d:8d:f5:
d0:78:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:11 2025 by rpki-client