
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: CsqCUTj7OZoO5KJnE9L8Ed80oTCTufNmsSMvY/Sz0Lc=
Subject key identifier: 46:E3:56:96:C3:EF:7F:14:F7:57:69:94:B1:D5:ED:68:6E:75:44:00
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 019A7301359E7504C0CA5E09D88DF24F8B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 101C
Signing time: Tue 11 Nov 2025 13:00:50 +0000
Manifest this update: Tue 11 Nov 2025 13:00:50 +0000
Manifest next update: Wed 12 Nov 2025 13:00:50 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: STy/HvuuJNx/tyMWWPPwrvU/w7/JzFXqV3wjT0I9Y9k=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:35:9e:75:04:c0:ca:5e:09:d8:8d:f2:4f:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Nov 11 13:00:50 2025 GMT
Not After : Nov 12 13:00:50 2025 GMT
Subject: CN=46e35696c3ef7f14f7576994b1d5ed686e754400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:8b:5b:8d:5e:f0:e0:05:4b:19:04:46:64:
6e:5e:a9:ef:eb:2d:9d:52:6b:37:1e:bf:7c:ec:3a:
b0:25:f9:83:ec:d9:ce:fb:f9:05:fb:c9:59:91:49:
f6:bd:e2:a8:6d:6e:3e:3e:bb:1b:aa:ae:a0:19:32:
b6:51:5f:2e:59:23:8d:0b:21:2b:4b:83:b7:33:ba:
e5:65:7d:14:79:bc:c8:e2:67:6b:ee:c0:6c:8f:bd:
20:1c:fd:60:a7:ec:99:72:65:db:47:3e:d9:c7:b8:
ea:bd:62:07:d9:aa:e2:bd:19:d7:8c:95:69:50:db:
00:f6:8b:f6:71:77:94:cb:03:a5:85:e8:8c:a1:a3:
64:43:70:c1:75:60:66:1e:2c:31:54:2d:3f:f0:71:
e7:c7:db:99:04:1b:76:86:6b:cf:46:d6:be:ea:39:
5e:f7:83:6a:d3:4d:bb:6b:15:41:97:dc:1c:30:cb:
f9:37:e3:dd:52:bd:b4:f6:2a:6c:aa:97:c4:fc:40:
87:3e:80:0b:8b:95:c4:a2:ac:8d:45:b5:82:69:66:
5d:33:4e:e9:4f:b5:e7:ba:7b:15:67:15:2d:8b:e9:
74:6d:f8:07:56:80:1a:b9:eb:ab:ee:88:a0:25:fa:
97:84:19:be:b0:fa:94:4d:cd:c5:03:60:cc:2b:bb:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:56:96:C3:EF:7F:14:F7:57:69:94:B1:D5:ED:68:6E:75:44:00
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:14:3d:21:6b:86:c9:88:08:78:c4:22:52:5c:ab:48:42:5b:
7e:9f:d5:f2:39:01:87:a7:3f:7d:57:95:da:3e:8f:09:c3:ce:
ec:bc:27:67:83:c1:4b:5d:a5:22:32:e1:02:f7:d7:76:b6:55:
15:4d:33:de:7c:ba:df:8d:1b:36:cc:9d:9c:ed:18:10:15:54:
a3:75:e6:50:02:53:dd:19:54:6c:8c:ab:b6:c1:e4:d6:e3:01:
fb:9b:2f:b5:3e:a6:a2:5f:a1:fc:06:01:08:0c:5f:cc:16:44:
29:fe:32:7f:a4:83:78:9a:d2:c7:e0:e5:c3:1e:4e:0b:c0:00:
ef:fc:53:be:05:f0:2e:75:a7:fc:8d:6b:b4:c7:d8:be:99:b8:
ec:83:78:2b:bc:36:95:14:f1:66:2f:b9:5c:fd:5e:63:b7:16:
91:02:95:ee:52:d0:c7:0d:7c:88:7d:76:14:60:09:8d:5c:9d:
eb:ae:c0:a1:8d:6e:9c:fc:9d:f3:f4:7f:d7:b3:ed:1e:96:08:
4f:09:30:dc:0e:1c:93:c5:f3:3c:b4:e6:db:74:e2:c5:15:ce:
4d:74:b2:68:48:b6:d3:c9:9e:6a:b7:32:6b:9f:58:8e:1f:a5:
f4:bd:59:62:8f:c0:29:74:61:cf:50:04:59:64:bb:0e:d4:1f:
30:39:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:18 2025 by rpki-client