Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
File: GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft (raw, json)
Hash identifier: sEa0NlvMMKYtYjWvwKniW3Dw+MCok6cHRSC8BGRv2OY=
Subject key identifier: 18:92:81:E7:29:16:3D:52:ED:84:39:35:48:2B:7A:D9:9E:68:1F:01
Authority key identifier: 1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
Certificate issuer: /CN=1af1487e4d0e26c53d593ece6e14712221e24010
Certificate serial: 019A71EE8EB25E74401A7A626100CCE9536A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
Manifest number: 2E
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: 4jPpa2yrHFokJLczcdkZDLR9h98.roa (hash: EAFCvLqIzBJHhjSQ4BlNHua0JxEcTXMXgVltdpts9XM=)
2: GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl (hash: g/+UyNc5MiKEcw9wpxpvajw8nYYegCMoMdoQHphbWQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8e:b2:5e:74:40:1a:7a:62:61:00:cc:e9:53:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1487e4d0e26c53d593ece6e14712221e24010
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=189281e729163d52ed843935482b7ad99e681f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:75:86:42:d0:2e:09:97:c6:3c:d2:bb:0c:
73:06:bc:3a:05:1b:09:5a:a1:6e:57:24:79:8a:dc:
ff:e8:a2:d3:6f:8f:b7:6f:09:7f:03:7b:58:91:79:
ab:3f:09:4f:50:bf:08:b0:32:2e:3b:a9:d5:e2:d9:
bc:7a:0c:e0:e6:68:a2:9d:14:2f:81:08:5d:d9:e4:
27:14:a7:ec:9e:6e:90:4c:85:ca:d5:16:2c:92:b6:
d2:88:c2:dc:a3:e7:dd:58:b8:ea:f0:c0:27:49:d5:
bf:7a:9d:f4:e9:17:e8:b1:30:d4:ad:76:4b:5b:f6:
91:5f:f6:76:8f:1c:50:b4:87:58:d2:fb:b4:bf:71:
ce:3d:31:fe:0f:77:71:f5:73:5d:0d:73:3a:53:67:
37:92:02:1d:e8:ad:41:b0:ba:d1:9e:92:19:fa:31:
a3:d2:54:35:2a:84:2e:7c:dc:fc:f4:f5:54:14:49:
ee:9f:d2:92:00:71:72:50:d8:b8:46:cc:e1:dc:43:
1e:00:48:c5:60:e5:51:89:6d:9e:a4:a9:15:3f:0f:
95:26:5c:5f:eb:89:ce:24:79:97:22:c2:41:c1:54:
b8:97:71:e2:81:2a:dd:c8:95:5a:45:75:62:a7:ea:
f1:94:1c:7e:5f:81:cb:b0:02:15:31:4b:87:f3:5a:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:81:E7:29:16:3D:52:ED:84:39:35:48:2B:7A:D9:9E:68:1F:01
X509v3 Authority Key Identifier:
keyid:1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:d1:f8:51:2a:30:fc:7e:c4:b2:5c:15:10:5f:b1:c6:3c:
48:01:3c:70:db:da:c1:e1:88:85:85:53:b4:5c:99:12:6a:a2:
61:57:4a:1e:fa:d1:cf:32:f9:d7:97:2c:7b:82:bb:6b:cc:1e:
86:3e:be:88:0b:07:5f:b3:25:7a:84:21:5e:9c:8d:6a:91:17:
8e:8e:31:f3:b0:1d:42:1b:26:b2:84:57:4c:d6:d1:91:77:cb:
8c:88:bd:f1:24:84:46:fe:90:86:61:1f:b8:16:11:aa:91:6e:
02:ce:41:6a:90:6b:ca:43:5f:e3:28:3c:39:91:1d:02:3f:64:
ba:ff:aa:ee:18:5c:9d:56:45:53:4c:b3:de:8c:3a:12:63:a3:
59:2c:5f:91:ee:66:88:20:9f:f8:0e:77:12:7c:a1:e8:2f:13:
7d:b7:f8:92:ad:a0:5d:16:31:55:5f:02:80:21:7c:8c:2e:43:
42:69:43:fe:98:d5:e7:ac:64:da:4c:1e:b3:55:4d:cd:f8:ae:
b7:a1:51:1e:ab:1b:2a:88:20:82:19:9a:8a:27:57:4a:fb:69:
a4:77:71:df:06:35:83:3a:d7:c7:8a:c7:f0:e6:ff:6a:dc:45:
57:68:2e:ec:f4:10:a2:c9:6a:97:fc:19:16:70:62:2f:0f:2a:
e8:ed:2a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:32 2025 by rpki-client