Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: LDcgDrm9tBeB7BGHOy8Yhl1MDQDudO2xC1b6H4N3cNs=
Subject key identifier: 4F:AF:45:F3:AE:58:BA:CA:40:07:2B:34:6E:23:4A:91:02:B4:99:91
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 0199FC584AAA4673A49097E111E6A3A23261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 03E8
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: vkNqajb+KhSV+KVvSbmAoCAQT91LFOMInnWPZPGIQi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4a:aa:46:73:a4:90:97:e1:11:e6:a3:a2:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=4faf45f3ae58baca40072b346e234a9102b49991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:dc:ed:0c:14:90:f3:6f:8e:fc:34:bf:21:
7d:20:a5:70:03:bc:1d:50:94:30:f9:5b:03:c4:7f:
46:ca:be:7f:82:dd:91:91:fb:a6:f1:ec:cb:8c:9e:
c4:b5:d8:6c:bf:b7:35:90:11:80:ff:84:4d:bd:18:
71:76:72:28:d8:29:5c:bf:06:9c:8f:cc:97:3f:67:
59:c0:13:69:50:e8:b2:1e:97:a0:c7:83:8b:a7:69:
02:32:c2:c0:57:f6:71:8b:b3:9d:cb:bb:e1:d3:c9:
95:0e:d4:1a:e9:03:d5:e7:61:7e:99:a7:44:df:4d:
35:20:e2:2e:d0:0f:1d:2a:4e:ee:2b:6b:61:19:17:
2d:5c:fe:d1:46:58:0b:9e:fc:ba:ad:46:43:56:f5:
ba:31:f8:db:0c:45:f1:6c:f3:85:70:96:61:ec:a4:
f9:47:5e:65:d7:df:4e:b4:d3:32:0e:f4:79:9d:43:
9d:ca:b3:af:d2:85:f1:e5:6c:7f:b4:06:db:0d:39:
e7:11:f4:1a:d5:39:a0:fc:2f:5d:fc:db:5f:be:65:
40:56:0f:c4:0c:b0:3e:5b:98:09:e6:80:ee:31:83:
1c:08:f2:d0:55:2c:50:6a:d3:f7:98:ea:82:03:19:
a4:5c:22:59:5c:7b:c4:1d:ab:1f:f1:ed:3d:7f:6b:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:45:F3:AE:58:BA:CA:40:07:2B:34:6E:23:4A:91:02:B4:99:91
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:de:ad:0a:38:94:fe:2a:fe:26:df:65:f7:4f:54:53:6a:18:
de:6d:f3:9c:01:9e:2a:56:cc:26:c4:7d:4b:a0:ec:d9:67:02:
b5:f3:8c:9b:73:7a:b5:f8:c2:24:2c:96:30:d0:2f:05:a6:f1:
aa:73:73:c3:c3:f3:ee:f6:3a:53:5a:7e:9a:40:97:5d:c4:f5:
cd:58:e1:35:d9:8d:69:3d:41:e3:75:9e:50:55:1b:ce:f3:08:
1f:ee:14:ac:4b:c5:73:7f:b7:0c:14:57:63:2f:2e:fa:9d:75:
eb:0d:c6:2c:53:f4:47:bb:b6:fb:69:64:63:c4:1f:a6:2b:65:
14:b4:d4:a5:e4:b3:8a:4b:5f:3f:68:ba:1d:66:2b:d1:81:81:
ac:09:a7:eb:08:93:95:ef:a9:5e:fb:0f:24:56:be:41:11:48:
56:1b:00:79:5c:df:dd:52:5b:d6:8f:0c:f6:5b:d2:a4:18:a5:
bf:12:07:63:6f:b3:77:8b:45:83:8c:3d:96:25:04:a0:e0:93:
45:d4:1e:f6:fb:56:9c:3a:45:f5:3d:4c:dd:bd:e4:10:2a:73:
d6:d2:d9:4a:de:73:be:5f:c1:84:13:15:a6:f0:45:7f:50:f0:
2c:92:33:f8:a7:8a:ba:d2:28:79:f7:42:79:d6:1e:8d:eb:c9:
d4:41:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:25 2025 by rpki-client