Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: 4kiTPPovTznzcjcjsObDM2FR6tNRJYChG6nSMD3njmQ=
Subject key identifier: 4F:47:FD:33:E9:8A:B6:95:38:2C:A8:A5:58:98:45:4C:64:07:58:4A
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 0199FD33FB84EAB0555F3A07063E4D425F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 10DA
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: IN/AK5jzMxR+kRcmGpLk/c617tnnAXB2qOJPvOrZTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fb:84:ea:b0:55:5f:3a:07:06:3e:4d:42:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=4f47fd33e98ab695382ca8a55898454c6407584a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f9:8f:cc:15:1f:6e:78:bc:ca:31:c4:a9:a0:
5c:92:5e:bb:f8:44:2c:13:a7:37:7f:85:95:f1:86:
88:47:bb:41:93:0f:26:2a:f8:b6:e9:c3:29:09:0a:
d7:0c:fc:80:87:64:ed:73:4a:de:80:28:25:bf:e7:
9f:cb:73:9b:d4:c9:65:d5:cc:c4:ed:c7:08:27:e7:
59:b0:27:8e:10:fc:57:9d:c7:8d:a4:2f:7a:89:15:
67:0c:74:3f:94:15:43:83:91:51:d1:e2:29:2b:30:
bb:d2:e3:5b:5b:ee:2b:3f:b0:75:25:c1:6b:b9:0b:
cd:78:98:e8:d1:84:ff:c7:71:57:02:c4:12:a2:eb:
83:65:7c:b0:f0:8f:60:cd:94:50:04:94:38:2e:59:
5b:09:72:82:33:88:f9:a6:9b:2b:6d:88:4a:8b:51:
d5:23:d2:d6:0d:4c:5e:58:9c:90:2b:b8:49:f7:c5:
7b:91:c7:9e:0f:35:83:3a:40:40:93:40:9e:bd:a6:
18:9b:f0:a6:45:73:43:b1:58:2e:2b:8d:3f:47:d7:
9a:7c:7d:7a:8b:ef:e9:26:61:8f:d3:ab:2f:43:a0:
93:89:05:b5:0b:ef:47:4d:ae:8e:0a:de:55:60:24:
c8:a8:45:35:39:94:b7:b5:4d:7e:b2:40:3a:f0:5d:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:FD:33:E9:8A:B6:95:38:2C:A8:A5:58:98:45:4C:64:07:58:4A
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f9:72:7a:ae:22:05:bb:b9:74:13:af:23:1d:53:7a:a5:78:
b4:ad:36:6d:ae:7c:93:08:03:4a:c8:5e:c2:ee:e4:7d:85:e9:
58:3f:de:1d:4d:c9:ff:59:8d:6c:15:6e:70:c4:48:95:5e:72:
78:d5:8b:9f:fa:bd:31:4c:7f:4a:f4:99:fd:67:86:26:85:4d:
2d:9d:f4:08:ca:2a:b2:ea:89:b7:56:0b:c3:65:a8:af:a2:cb:
ec:a2:da:ed:c7:77:a8:c8:ff:90:c5:85:fe:d4:5b:d3:a6:13:
2b:82:66:4b:ab:2d:5a:c0:21:ae:82:4b:07:a7:46:cd:a0:b9:
9d:ae:8b:ed:93:83:d5:f0:5c:7b:5b:03:05:4a:64:60:25:ce:
31:a2:35:3a:9f:6b:f3:e1:48:c6:6c:38:f0:82:98:54:22:25:
3f:08:4e:b1:0b:22:ee:d4:9a:56:50:7d:3c:cc:88:c8:1f:78:
4c:28:5d:12:6f:72:8d:86:f4:48:84:76:82:48:28:4a:b9:5f:
81:82:ae:98:3b:35:a3:4c:03:eb:38:99:7e:d3:32:33:3b:95:
6f:6c:9b:f2:38:28:91:15:6a:05:5f:03:f9:ef:4e:4c:bd:28:
79:d8:7b:b2:02:63:8b:62:e9:05:1e:b5:8b:cc:b5:87:21:9e:
3c:e0:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:42 2025 by rpki-client