Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: IYkgsWS7ECXDaa6RENzuGkHM0MmEhFdYOdcz1TK2fxs=
Subject key identifier: AE:FE:1D:A1:C7:11:AF:0C:89:63:8B:B8:0D:AE:FE:F7:5A:26:23:85
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 0199FD3440F80DC7FE187F29D971DE981ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: CMOmXpPfIfoV9Wki50pEgFp9Aiv+arOV1lormzS8/ls=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:40:f8:0d:c7:fe:18:7f:29:d9:71:de:98:1a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=aefe1da1c711af0c89638bb80daefef75a262385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:8b:f1:25:0c:38:9d:e5:ee:c4:55:c2:03:
ae:5e:43:b2:7f:02:7c:84:28:47:6a:8f:89:58:aa:
8f:af:63:e1:b5:2e:4a:b5:49:77:59:1c:73:11:45:
f9:c7:2e:2f:b6:52:03:16:9d:66:19:c5:c1:58:fc:
bd:57:6c:d3:85:68:d1:82:10:b1:22:54:19:f1:16:
49:0d:e5:05:b9:8a:05:06:a1:95:5a:03:4b:f9:ca:
b1:ad:77:04:bb:be:4e:24:53:89:af:d2:1c:31:e2:
c1:64:3c:8f:f7:ee:7c:05:c7:5b:d2:ae:15:1a:2e:
f4:6c:9a:f6:2c:b9:1e:d5:58:1b:9a:21:9a:fa:37:
f0:f6:04:b2:90:72:f1:fb:70:99:2f:54:2a:15:6f:
8c:8e:7b:93:27:0e:10:51:b9:a8:58:88:75:76:67:
1f:c2:b8:4f:e9:1f:a5:59:a4:28:fe:73:cf:b4:89:
1e:1c:6b:b5:62:74:6f:65:2a:06:2f:ea:7a:ba:78:
05:5b:3b:81:0e:1d:a3:79:8a:d1:f6:84:2f:79:a0:
1a:a5:43:1e:ed:62:ed:77:2e:d8:34:d3:b7:4e:5c:
a9:e1:43:05:d4:04:f0:60:75:d8:05:f9:80:31:83:
5a:25:f1:d6:55:a3:85:49:45:21:ef:93:f5:03:8d:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FE:1D:A1:C7:11:AF:0C:89:63:8B:B8:0D:AE:FE:F7:5A:26:23:85
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a1:e2:e4:d3:fa:b0:26:6c:2e:93:50:3c:4d:3e:c1:a6:1b:
f0:09:43:17:17:e6:d5:a2:6e:88:77:64:89:5c:d3:3c:b0:41:
74:e4:37:2b:4c:3b:e8:80:78:99:d6:63:22:91:50:01:2b:ed:
d4:43:34:49:73:8c:82:37:60:a0:f6:bc:a0:d1:2f:ba:fe:57:
ce:ef:a3:ae:d9:14:c2:58:06:70:81:5c:c7:e2:be:fb:1d:2b:
14:df:9d:a1:17:c4:66:c1:fc:ba:14:7a:90:0c:c1:4c:b9:68:
4c:47:76:e3:34:96:c9:24:fe:81:bb:68:54:9e:5f:08:5c:8c:
aa:f8:d3:6b:e9:a0:65:75:fc:8e:48:c7:21:9f:ac:27:aa:45:
a3:18:c0:ac:2b:c4:2b:4d:f8:55:64:ac:20:f5:f7:4b:51:7e:
fe:ee:20:86:32:ed:50:6c:3b:ba:7e:8b:98:d9:01:d1:a1:17:
20:f0:ae:53:f0:09:83:dc:ed:a4:22:3a:9e:83:37:95:1e:de:
37:45:4f:c8:4c:cf:26:52:4c:19:20:7b:7c:29:de:b6:ab:f1:
9a:f2:09:20:77:70:8e:50:99:86:21:44:0c:a0:d7:e0:d6:17:
ec:16:9f:0e:f9:3f:9b:c2:90:99:0e:d3:11:7f:a1:f5:64:5c:
0e:e9:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:20 2025 by rpki-client