Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier: I/ICVI5RiLCANuYPiTU0VW4dTwVcYhMGpCx665h97nk=
Subject key identifier: 2F:5D:F3:A1:7D:26:35:A6:8F:3A:AF:08:96:F8:96:D9:E4:48:4A:4E
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 0199FBEB0A094DBE675C87D53CE4AA41529F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: 1m4qL9zInwdPAIv7B0pJhVYDCoHcvYFbbmW5xbCWbC4=)
4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0a:09:4d:be:67:5c:87:d5:3c:e4:aa:41:52:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=2f5df3a17d2635a68f3aaf0896f896d9e4484a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:13:ce:2d:49:86:c6:2b:5e:17:f3:74:73:
2c:10:07:0a:d4:36:0a:95:ac:de:43:e1:0a:c4:57:
d9:9e:8f:7c:d1:8c:cb:62:b1:12:48:1c:cf:9c:91:
51:aa:89:67:86:0f:79:e7:b9:9b:68:a4:c2:d3:5c:
49:00:a8:f1:2b:95:dc:55:c0:49:02:24:68:c3:57:
c3:0b:e5:db:65:65:e8:6a:88:5d:0f:68:fb:1b:0b:
73:da:fc:1d:5d:16:4e:90:68:af:4c:4e:b4:a2:94:
ee:09:9f:3e:92:b2:dc:b4:cc:3d:74:ed:3f:07:da:
fd:5f:21:e8:a2:6a:0e:e4:02:f4:0e:f9:1d:2e:fd:
61:73:5e:dd:50:84:25:af:5d:64:0a:a4:52:fa:68:
ee:dc:aa:37:5f:c3:87:55:7b:6f:5c:54:f5:c4:3f:
3b:9e:84:02:60:93:a9:b0:74:4f:5c:20:bb:82:5a:
31:79:1b:7d:95:0e:cc:72:c7:92:86:13:9f:8c:e1:
e6:78:10:e1:76:c6:7b:ef:ed:b9:6a:f5:b1:e0:f5:
53:41:c6:1e:6f:a5:cb:07:8f:d9:46:0d:2d:f2:90:
31:46:25:de:73:dc:3c:89:c5:a1:8f:89:5f:d6:50:
9f:91:73:94:ea:c9:57:b9:9f:d0:db:c2:f5:00:3b:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:F3:A1:7D:26:35:A6:8F:3A:AF:08:96:F8:96:D9:E4:48:4A:4E
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a2:cc:68:e1:1a:20:53:9c:18:47:cb:61:30:89:ea:f9:9b:
35:22:12:9c:44:e5:34:86:b8:f9:21:9a:40:02:b6:ef:be:ee:
31:f9:6c:f7:4e:ad:c0:81:18:92:66:45:29:5c:3f:1e:65:18:
ef:57:ac:90:a5:b3:6f:89:92:8f:53:8c:1a:13:b4:ee:5b:0a:
4f:d1:8c:9d:70:a6:08:de:63:a3:1a:67:1d:f0:6e:25:a4:06:
17:38:3d:a6:29:5a:ac:4f:9e:66:d8:07:82:d7:45:52:44:5b:
19:e7:73:57:c9:f4:0c:34:37:9c:96:ef:cc:0e:f9:f0:fa:e8:
06:58:70:ab:f3:3d:df:34:cf:36:2f:fc:82:5e:69:19:de:7d:
f5:fd:60:83:8b:fa:9b:0c:8c:7c:97:9d:03:df:2d:ac:c0:08:
c5:5f:eb:95:df:39:10:68:33:e0:72:d1:5f:0c:db:ad:13:ca:
65:8f:77:62:43:13:d8:f6:d4:47:86:58:38:d1:c9:59:ed:94:
c1:e9:db:3e:39:6a:66:2e:91:92:21:33:61:7a:66:0d:c2:76:
31:63:a5:83:64:93:9f:8a:90:c9:56:3d:85:5b:97:9f:4c:99:
88:9b:5a:f8:53:41:9a:1f:1f:b2:1c:da:1a:36:1f:76:31:09:
96:6a:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:12 2025 by rpki-client