Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: 59QBAhUjyoBSPS3yzuOVL5+R13eJc9wCT0PmjVg95e0=
Subject key identifier: 48:37:47:29:19:48:D9:22:75:AA:82:D3:5F:6D:27:AE:08:68:27:C9
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 0199FFFE65C92288620CA8BDBB0108946BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 13A4
Signing time: Mon 20 Oct 2025 05:01:26 +0000
Manifest this update: Mon 20 Oct 2025 05:01:26 +0000
Manifest next update: Tue 21 Oct 2025 05:01:26 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: EQT9S8K4mfKDow3/mcr/SjNFPGuuWVspmK0raI46ZfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:65:c9:22:88:62:0c:a8:bd:bb:01:08:94:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Oct 20 05:01:26 2025 GMT
Not After : Oct 21 05:01:26 2025 GMT
Subject: CN=483747291948d92275aa82d35f6d27ae086827c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:26:82:f2:43:45:38:6f:da:b4:86:1a:3d:
c7:84:3a:29:8a:30:c7:a7:81:ba:d6:da:ab:46:18:
d8:d7:68:5f:66:3e:44:34:77:c2:e7:8b:c8:a6:5a:
26:a7:fa:0c:89:a8:92:92:ad:db:a9:1c:9b:04:9b:
4b:36:b4:60:fb:63:3a:27:5e:b2:74:c8:98:95:e5:
fb:00:a1:65:f4:99:c8:f2:d1:14:ca:56:1b:84:96:
9f:f1:42:f1:41:06:fa:2e:5b:79:f1:f8:3a:ae:4e:
45:38:2b:bd:9b:f0:c1:7f:c7:35:21:6d:39:4f:69:
f6:15:f3:63:19:b8:10:9b:17:5b:7a:2a:57:89:35:
63:6c:66:24:ab:a0:fe:a1:39:25:0e:6d:86:6f:91:
f6:94:6b:4a:17:bd:1f:50:9b:74:59:9e:33:f2:f2:
88:88:5e:68:14:a2:05:01:1d:24:a3:79:ff:a9:3b:
79:29:1e:d2:62:3f:5d:39:b9:3a:ec:5d:ea:7a:e5:
a2:6d:27:db:e3:ae:b8:16:6e:38:18:94:69:9e:02:
49:21:67:5a:99:06:ee:50:7c:8f:8c:39:5c:fd:e8:
46:94:f8:1b:ee:43:85:92:58:c3:b0:c5:42:b5:0f:
2f:1e:75:c8:4c:49:df:70:c8:64:7d:58:79:a5:ec:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:37:47:29:19:48:D9:22:75:AA:82:D3:5F:6D:27:AE:08:68:27:C9
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:49:d7:92:51:83:fa:20:18:e0:6a:2d:27:a8:c7:7b:1a:
db:aa:f6:f3:81:44:de:2f:45:04:e9:bb:03:68:2d:25:d1:56:
92:4d:37:50:36:5c:0f:4f:50:3c:92:5d:d4:50:5f:91:78:19:
fe:5d:95:b9:72:b2:0a:de:bd:2a:21:30:4f:f5:08:1e:3b:39:
1e:74:44:19:60:34:78:ee:d7:b0:5d:2f:35:a0:f7:b4:cc:13:
5b:99:71:91:df:1c:00:27:a1:69:31:d0:c9:88:63:e2:3d:17:
42:6f:b9:31:1a:b1:0b:ee:8e:7c:06:b0:43:8d:ea:a7:7d:03:
1d:41:c9:92:a5:fe:f0:57:b7:62:f2:c6:70:e7:41:c1:4d:d8:
44:5a:92:0f:07:33:1d:d9:79:b9:d3:8f:ab:31:79:5e:ca:46:
0f:96:5e:45:8f:77:fe:76:ac:b7:04:25:65:1f:0f:be:be:63:
27:99:0a:48:79:0a:0f:40:56:7a:47:b6:15:9d:55:e3:2c:7f:
e5:50:1f:11:c5:66:71:ad:02:aa:18:88:9d:9f:13:6b:f7:d9:
39:ad:7b:77:0a:39:3b:a0:38:77:05:b1:28:ad:92:de:8a:d6:
63:6d:2d:aa:0b:5a:8f:18:43:b2:fc:d5:2d:b3:8f:27:1a:0e:
a9:c5:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:51 2025 by rpki-client