Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: rScKybSWnmkqaCkdH6Z2eD/pW1a+ci0D7fwCcgbmdOI=
Subject key identifier: 5E:4F:8E:52:68:3C:10:FD:2C:6E:9E:20:BC:2C:D0:36:FF:43:09:AF
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 0199FC5878FD5644B138DF32D2ADF239E7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 0270
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: 1/HdU1SiopOAPwiCUdVALrhMpHAJiHXy8PAF0J5yTU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:78:fd:56:44:b1:38:df:32:d2:ad:f2:39:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=5e4f8e52683c10fd2c6e9e20bc2cd036ff4309af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:3a:ba:9f:c4:e8:9b:40:d6:bf:bb:e4:8f:
c6:0e:8f:a3:50:cd:fa:50:a9:a6:f5:20:6a:92:a9:
cd:9a:33:82:08:9c:b5:b2:25:36:52:ba:3b:ce:1c:
ac:ea:32:14:f2:b2:82:6a:7a:40:fe:01:d1:e0:5e:
63:b6:5d:8e:6c:19:82:73:2c:9c:50:3d:05:cb:c3:
d3:1f:74:96:f6:7c:c9:68:77:7b:7c:ed:db:17:d2:
6c:64:5b:3b:a7:15:e8:4e:5d:2d:ca:04:46:cf:f5:
b9:e1:ae:50:9c:a4:e0:d4:dd:5f:57:6f:7d:11:23:
36:b0:a6:ab:79:2f:7e:6e:4f:35:bf:b0:3f:d1:1d:
2e:78:53:71:5e:4f:41:5c:72:20:c9:f8:49:34:da:
b6:9b:15:9b:9c:3f:f4:3d:ac:64:a5:ac:a9:3f:35:
a8:ce:d3:3b:30:01:3b:28:64:b6:5d:e3:b6:b9:c2:
21:25:e1:6f:a6:7e:3f:18:7d:ca:55:be:9b:e0:d7:
2f:c0:0b:1b:57:0d:ec:5a:08:5f:b6:0c:43:ec:c6:
90:38:5f:fb:f5:eb:ec:5f:b8:28:af:33:84:68:fd:
26:01:7a:41:4f:29:0f:31:53:33:d1:a8:7b:11:ad:
93:3e:95:36:8c:dd:94:e3:2d:7f:8e:07:de:3f:f3:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4F:8E:52:68:3C:10:FD:2C:6E:9E:20:BC:2C:D0:36:FF:43:09:AF
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f1:ae:ec:ad:f1:8a:51:08:cd:ae:41:43:f4:12:64:d8:26:
71:16:45:6b:69:dc:61:60:6f:08:6c:8b:23:3d:06:59:23:1f:
b4:0c:f5:7d:ef:6f:d3:c1:2f:99:28:bf:4c:00:2a:ce:8d:15:
0b:86:20:f2:4d:49:29:ba:dd:16:b5:49:59:c2:0f:ad:bb:d1:
8f:ab:96:55:fd:e6:29:3c:31:e0:fc:42:64:85:f1:74:74:92:
50:e7:a7:9b:d6:42:ef:65:16:3b:f7:f3:83:cb:ee:d5:2d:a2:
6f:00:e2:02:76:13:52:67:23:c7:8f:94:56:06:ae:eb:cd:c1:
88:47:05:cf:ef:38:79:eb:da:5e:09:bb:38:ad:ce:ef:a0:1e:
48:6c:d2:8c:54:45:0a:00:e6:5a:f1:ab:4f:60:da:39:c9:b6:
fa:3d:cb:7b:ae:c1:53:87:5c:79:37:d5:59:59:d0:57:51:77:
d5:04:ab:3a:25:7a:c3:ef:10:11:fb:6b:3f:15:c2:86:de:d5:
8c:3c:e9:30:9a:de:cd:62:41:fb:62:43:f9:8c:f2:a9:40:3c:
98:e6:63:98:b9:69:4e:4a:80:65:9b:b4:d5:36:9c:16:f2:60:
44:7e:aa:d5:05:8e:3f:d8:fd:b3:92:bb:6c:b2:71:cd:d0:52:
2b:54:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:56 2025 by rpki-client