Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File: GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier: neva+QgXfxvtnzVGjTLFxb1111oePfneZdC1GdxDAiE=
Subject key identifier: F4:A2:58:CC:38:64:49:ED:B4:94:1A:A6:49:E2:9D:F5:D5:CC:4C:B6
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial: 019A71B8978C2E52866436C8012B3C16B02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: 3f3DqwiOb4RIyKcsyfkAAqpnvFy7D1mIuE8drBNKK4Y=)
3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:97:8c:2e:52:86:64:36:c8:01:2b:3c:16:b0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=f4a258cc386449edb4941aa649e29df5d5cc4cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:29:e4:e7:56:17:c5:72:a5:90:35:8f:82:
e5:e5:e6:25:1e:f4:59:90:11:d8:24:e0:96:da:00:
b8:ea:81:ba:0c:b6:e2:ef:2a:46:a6:73:49:56:c8:
d2:88:e1:77:08:bb:2d:89:97:07:b9:64:a0:7a:bb:
36:d7:e1:ad:d8:c1:ad:2d:ef:6f:74:f3:1a:ca:ad:
c6:99:bc:94:62:1f:c9:5e:c8:e1:96:2d:ac:51:78:
59:de:46:6c:d6:59:f9:d8:96:24:07:bb:e9:ec:3b:
3b:b4:fb:6e:be:b2:6d:71:d8:f4:63:66:5c:12:dc:
cb:38:34:82:25:b5:e1:b6:22:c7:1e:e3:2b:70:5a:
6a:fe:d3:0b:07:4d:f9:ba:07:89:53:f2:c5:24:06:
c5:2c:6a:4d:59:8a:81:7b:43:1c:1c:53:fd:6f:d5:
0c:94:11:d8:fb:77:a0:07:c6:bc:86:40:cb:58:07:
d0:0b:67:83:d3:1b:19:68:8c:0e:20:d4:09:7f:52:
71:65:14:7a:d7:e1:64:4c:2b:ce:1c:2f:0c:e5:32:
3a:43:e3:b3:0b:e3:08:fb:b3:30:c8:a5:9c:ec:7d:
36:c1:ad:91:02:0c:db:c7:7c:70:1f:77:ee:f8:83:
12:7d:ae:15:bf:7f:29:25:c6:23:38:43:fc:50:c3:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:58:CC:38:64:49:ED:B4:94:1A:A6:49:E2:9D:F5:D5:CC:4C:B6
X509v3 Authority Key Identifier:
keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b6:7d:60:3c:86:98:80:0a:20:c7:32:dc:fc:6c:b5:49:d7:
7b:dc:e2:dd:88:ec:da:ea:f0:6a:ee:07:87:b9:9e:ce:9c:99:
2c:bf:37:80:cc:7b:3b:78:6f:83:7d:9b:80:47:f7:88:c3:3a:
24:ab:48:7e:c0:e9:9a:5c:c9:7f:aa:4d:d4:4b:10:67:17:f1:
02:91:24:51:7c:aa:86:15:c5:44:ff:4b:1a:a9:45:f6:dc:03:
bb:bb:b0:5d:c7:7c:29:59:d2:10:39:9a:54:bb:15:ec:46:f5:
a9:84:03:73:63:84:c7:47:64:db:9a:36:2c:57:02:26:43:59:
d5:db:9a:ed:74:eb:e7:fa:41:90:48:bc:b9:1d:fa:b4:0e:f8:
a3:7f:d8:3a:a9:9f:98:2f:dc:9e:7e:d8:a4:3c:33:c2:71:b0:
f1:58:8c:9d:4f:c0:dd:c3:16:4e:dd:40:a4:4d:88:68:74:97:
60:17:60:3b:c5:14:f5:8f:46:ff:3c:89:ad:81:0a:07:6b:8c:
db:11:cb:eb:13:7b:ce:61:1d:97:58:a4:d0:93:53:55:63:66:
ea:5a:ee:bb:15:41:10:5b:4c:eb:6c:39:86:d7:a2:a9:f7:af:
97:a1:fc:2d:73:79:72:13:f5:34:24:5b:37:d1:73:c3:de:db:
c9:43:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:44 2025 by rpki-client