Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: 3LXEaQcsyNeks/0nRBv9v+f4nzcAS4RkLVCrb4f3A4Q=
Subject key identifier: 5C:94:10:F2:9A:8D:53:FA:DE:CC:9C:BB:D1:45:4C:22:AF:48:7B:41
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 0199FC58815FB0EE5739824CDDE59393832B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0DD5
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: IW20zThzpCQm7IYyBGmVmK0WnplmGsy+DT7g/nBY9Ok=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:81:5f:b0:ee:57:39:82:4c:dd:e5:93:93:83:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=5c9410f29a8d53fadecc9cbbd1454c22af487b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:09:c4:22:50:dd:62:f2:5d:8c:c0:f8:22:
58:59:29:c2:67:1f:db:e3:00:ad:19:03:72:51:0f:
ed:b6:83:6e:d7:89:19:e8:c3:56:7b:4e:74:bc:4c:
35:e8:47:96:a1:99:32:ff:59:55:0c:7f:fd:e7:59:
2d:a6:26:83:33:35:55:8e:8e:b9:12:f8:7f:3e:5d:
50:2f:d9:21:2a:42:b9:34:e5:b0:e0:e9:62:60:fa:
54:22:c5:68:32:3a:47:24:1e:b6:5a:ab:67:ce:8f:
b1:a9:96:83:b8:8e:c8:0c:87:94:5c:df:1a:c7:60:
75:38:39:7a:d2:07:b3:f5:a9:eb:af:2e:01:8c:90:
7e:d0:29:d9:35:3c:77:b2:69:91:be:4c:cb:dc:07:
c6:8a:57:1a:a8:25:c8:fa:76:c6:ef:04:fa:59:e1:
90:f8:bd:25:33:d6:4e:84:ab:33:e3:7e:df:a3:7d:
09:3d:58:69:62:14:05:14:01:a4:52:86:1a:bb:0a:
a8:ae:ce:fd:fa:b7:2c:5e:9c:51:43:d0:29:c4:8e:
a3:6e:b0:33:e1:f6:70:d8:d2:8e:cc:7c:8c:35:48:
82:ce:43:78:c0:35:db:f1:d3:36:2e:58:6c:dd:2e:
15:1f:4d:69:e7:e6:aa:24:61:9e:8f:7b:30:3f:11:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:10:F2:9A:8D:53:FA:DE:CC:9C:BB:D1:45:4C:22:AF:48:7B:41
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:24:45:09:07:73:ff:6e:fc:90:48:ae:c1:60:9f:0c:52:e3:
79:02:69:0a:1a:c3:b6:00:c6:ef:b3:21:fa:23:fb:47:70:0c:
db:56:82:4d:31:1d:79:8d:ab:60:f0:02:6d:3e:1c:80:07:a7:
5b:44:a5:90:71:b4:21:2d:37:d7:67:db:4e:f7:8c:19:6f:af:
55:7c:5c:eb:8d:a3:47:fd:af:7d:44:dd:6a:b8:1f:86:c6:57:
1c:f4:25:0a:6f:6a:f9:25:b9:52:14:12:0d:67:df:eb:01:63:
e9:68:ec:ec:56:3e:6c:aa:c3:cf:32:c4:11:b7:13:74:57:7b:
32:bd:55:21:b2:5c:80:2a:b6:44:17:8f:5d:fe:af:df:81:41:
04:e5:07:c2:b4:ab:85:c9:8c:91:fe:b7:fd:cc:f9:ab:77:32:
f0:2f:c7:f1:77:1b:8b:86:88:d3:e1:1f:13:d3:9d:39:dc:35:
0f:4f:08:99:cb:8f:a7:fb:96:71:5f:97:dc:63:f7:2d:d0:35:
6a:b6:1f:a8:d3:47:d7:11:3d:9c:b5:ab:ed:e8:44:c6:15:0c:
32:fc:92:e1:91:8f:01:e0:5e:16:b8:8e:da:61:81:4c:73:ad:
cb:d7:f2:13:aa:15:03:b5:d9:38:f5:8a:fc:95:5e:19:a2:85:
74:ad:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:53 2025 by rpki-client