Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier: 5yQU3om9TwS/Qy7o5azluBOqM42LV2ZVMLD6/z5myAQ=
Subject key identifier: D4:80:47:D1:E7:5D:21:CA:3D:E3:4F:59:3A:9F:1E:83:39:C0:95:19
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 019A239BEDEE5488A60CE17947793D472C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number: 120D
Signing time: Mon 27 Oct 2025 03:00:12 +0000
Manifest this update: Mon 27 Oct 2025 03:00:12 +0000
Manifest next update: Tue 28 Oct 2025 03:00:12 +0000
Files and hashes: 1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=)
2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: 0umqJ0bEXaDKvd0Jm2zDF5/vOPhQworB4fsVmaerZvM=)
3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=)
4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9b:ed:ee:54:88:a6:0c:e1:79:47:79:3d:47:2c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Oct 27 03:00:12 2025 GMT
Not After : Oct 28 03:00:12 2025 GMT
Subject: CN=d48047d1e75d21ca3de34f593a9f1e8339c09519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:95:62:b3:ad:d9:28:c4:b9:f5:d8:0c:2a:
38:07:0a:13:a7:3d:09:03:f1:41:ce:df:48:93:ab:
bc:78:6a:15:58:3b:87:9f:74:4a:c4:18:ca:ee:b8:
29:95:0b:84:a7:bd:c3:07:8b:3b:9d:29:28:4f:b6:
9b:f4:7f:19:bb:28:2f:20:38:62:cf:f6:d7:bb:51:
09:36:0e:da:0c:dc:39:ab:35:af:e2:a1:86:86:d2:
0c:52:b4:6f:92:3f:77:62:aa:43:c5:b6:2d:dd:f7:
08:c4:00:9e:52:a0:98:74:bd:81:3a:e7:9f:03:f4:
2a:ec:71:2d:15:f0:6f:57:e7:6f:42:aa:a3:1f:1f:
bd:33:7e:4c:3c:dc:a9:02:30:3f:9d:97:a9:ac:a9:
33:bc:1f:d2:1f:05:99:ce:fc:19:c7:70:22:a0:e3:
ab:17:9f:69:e8:d4:0c:04:25:f0:62:66:49:b3:22:
7e:f7:27:04:26:ac:f6:f4:f1:79:e3:7b:5e:9f:e6:
87:84:8c:e6:ca:41:b4:79:49:00:d4:20:89:c1:c3:
57:1d:33:d9:ab:5f:4b:07:2f:bb:81:d6:71:9c:23:
d1:34:99:a7:9b:cd:dc:f7:91:97:28:a2:2e:a6:1f:
a3:15:1f:f1:f8:7c:34:20:a6:b2:2f:f6:d9:f9:e6:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:47:D1:E7:5D:21:CA:3D:E3:4F:59:3A:9F:1E:83:39:C0:95:19
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cc:dd:66:b0:6c:8a:35:2e:b8:6e:d4:7b:23:6c:48:bb:8d:
1d:5f:8f:7a:ac:e4:be:7a:5e:3a:b1:ec:c1:34:36:33:ab:2a:
df:28:54:b3:bf:05:75:7b:87:59:6d:0a:79:ff:af:e7:f9:5e:
01:de:a7:84:ab:79:96:22:ab:e5:05:27:fe:b6:89:be:41:23:
2c:6e:30:33:cd:69:61:26:4b:b3:fb:7f:8e:9a:cc:93:0d:8b:
04:e1:ee:e0:f7:8a:18:db:88:ed:41:14:c8:42:c9:40:8d:8f:
16:dc:9f:e6:da:b6:c7:9b:c9:ea:46:0c:d4:66:ce:a8:7b:57:
dd:59:e1:b7:5f:9d:d8:e9:06:fd:25:a8:0d:25:73:76:50:ea:
f0:39:d5:b6:a8:04:15:e7:d0:d0:b5:bb:24:c3:7d:8f:0d:f8:
2d:18:f0:08:8c:4d:53:11:6f:6a:94:ff:df:d7:00:e1:47:31:
4d:3c:d4:74:42:cf:87:19:8f:ea:df:ce:e1:25:ab:cb:76:6e:
5d:5c:be:a3:ae:13:dc:b3:e2:b5:07:74:34:16:7a:b9:4b:6e:
a5:21:07:b7:76:03:5a:c5:e0:7e:aa:1f:f2:f9:61:13:d9:76:
d3:2c:b1:95:80:42:c1:f0:82:ec:d4:88:80:c3:b5:30:76:d4:
72:d2:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:32 2025 by rpki-client