Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: hqGcAHrEb7lY6qLbIwA5KtoEpZLCBchzTqEpz37yPQ8=
Subject key identifier: 97:23:0D:FB:C6:E0:95:3F:85:B7:0F:7B:42:E4:EF:02:E8:F7:47:97
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 0199FC8F473C68B98F7A6EF3670545939E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 0633
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: tZf2QiDSUfdoJs5QUd7kw49rHPJ4kJSeIDexdsqI+qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:47:3c:68:b9:8f:7a:6e:f3:67:05:45:93:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=97230dfbc6e0953f85b70f7b42e4ef02e8f74797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:b5:88:09:4a:ce:11:a9:2e:d8:1e:e9:6f:
c1:d9:80:20:21:d5:36:b1:cd:b9:6f:a8:84:f8:4c:
b0:7c:43:2d:ad:f7:64:61:1d:aa:e4:b1:3d:c9:9b:
e5:2a:4a:9e:91:0b:73:38:73:cc:76:31:9b:8e:8a:
8b:ed:30:6e:d3:76:21:c9:d3:4b:23:30:5f:b1:91:
9a:b3:94:96:fc:a1:5c:bd:75:bf:47:d0:f4:1f:b2:
de:67:9a:76:a8:3b:bf:07:54:bf:12:dc:4c:e7:50:
2f:95:e4:e2:13:0f:60:2f:c1:aa:3d:4e:76:83:d9:
86:c9:f4:27:3c:9a:26:67:f2:96:03:98:9c:f3:4d:
43:de:a6:01:4b:ab:27:d5:73:15:65:09:c0:13:a6:
4f:6e:85:6b:1b:6b:12:fa:71:cd:04:09:00:db:bc:
8c:f3:e1:f0:d1:22:fe:c1:5e:b7:c7:4b:46:a7:b7:
b0:c7:bd:d4:29:6d:02:88:aa:6b:f3:ab:40:ba:62:
6b:e2:95:48:c6:d4:54:1f:67:b5:a4:d5:ca:36:d2:
f3:03:e3:71:fc:96:ef:e3:d7:fb:74:c0:d5:7d:3b:
04:0b:c2:30:b5:73:04:aa:75:cc:88:70:68:6a:2d:
8e:c0:d5:ee:8d:77:74:a9:c0:28:0d:7e:1d:f9:4c:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:0D:FB:C6:E0:95:3F:85:B7:0F:7B:42:E4:EF:02:E8:F7:47:97
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:52:73:47:de:e5:6f:d6:02:96:01:43:a4:2e:c1:bf:3e:e0:
49:39:fe:6f:a7:51:be:c2:e8:f3:af:44:0d:81:42:1f:ac:6a:
64:c2:1b:20:97:8e:0a:de:f6:9c:97:12:74:6c:75:20:5d:cd:
ce:0f:4b:52:44:ff:68:d9:27:42:34:90:6a:96:15:45:30:7d:
f3:df:2b:4d:5b:95:b4:be:d1:4f:bd:0e:11:c7:52:46:bb:c3:
7b:74:a9:54:ba:81:e4:89:60:22:1e:f4:fb:df:80:ec:20:fe:
9c:05:f0:18:d3:ed:65:f6:f8:85:e3:d4:7b:58:b7:ec:2a:d5:
a7:2f:5e:a8:74:93:ac:f5:b8:90:3d:46:dd:72:fa:a4:1e:38:
47:21:0d:1c:ab:3c:18:dc:43:a0:48:71:3e:e5:2b:0d:33:15:
5d:00:13:a8:2b:35:e9:27:86:d5:28:b1:15:ef:a1:f2:d3:00:
4b:29:48:58:59:6a:39:49:df:00:d5:16:70:10:e1:34:c0:1f:
81:ea:bc:1e:f0:7f:b2:fe:b2:b5:1c:bc:75:3f:19:5e:3d:9c:
e0:8f:64:1e:85:49:97:5c:bd:67:50:ca:41:89:64:25:a9:ec:
06:23:bf:7f:6c:b0:72:84:6c:e5:df:c7:1d:6b:3b:76:c4:b6:
24:f9:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:20 2025 by rpki-client