Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: no1iMEYwFFyAbyZxKpMAtAPlE/uRkpiU/rgVVU5uijw=
Subject key identifier: C2:4A:97:C1:28:F5:C1:E7:76:71:E8:F0:E0:14:2F:83:B6:6A:69:7B
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019A71B7956EA39D6354100AAF0677274143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 0447
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: luAExEOPWxMAbqdUGB3YHVqj4/aMdXxKcTaVM5PEjxM=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:6e:a3:9d:63:54:10:0a:af:06:77:27:41:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=c24a97c128f5c1e77671e8f0e0142f83b66a697b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:f8:77:32:ae:c6:6c:e6:f6:49:a1:e3:37:
40:52:b0:cb:ed:cc:20:4b:cb:36:f8:9c:72:f7:4b:
73:f9:67:73:75:5a:b6:12:58:f8:e7:e7:f2:28:d2:
26:fc:c0:57:29:14:d6:33:7a:f9:2a:6b:d9:2b:cd:
c9:e2:76:df:b6:e2:e8:df:c9:1c:89:70:b2:98:a0:
1f:2e:ce:0b:ca:48:69:d3:38:29:af:01:53:f6:dd:
b3:09:9b:56:04:af:69:01:bf:68:d6:aa:ea:b2:85:
5b:ae:66:d0:97:80:28:43:5c:04:e7:d9:b4:1b:70:
c7:dc:c0:3b:ad:ba:09:91:1f:b9:b8:ca:3e:61:de:
c7:f7:84:dc:17:5c:2a:fd:c9:a2:dd:b7:bb:4b:75:
31:91:b4:52:f8:ac:e8:04:32:de:3b:a3:77:4d:10:
02:76:e4:d1:bf:85:1e:3c:22:3a:94:09:35:52:a0:
73:3a:8b:02:aa:df:a9:e9:77:ab:89:19:1b:f3:de:
00:0c:d4:10:a3:ae:b0:47:8d:db:5c:76:7a:17:a0:
9e:d7:82:51:f0:dd:2b:93:52:7f:28:06:c0:e5:24:
79:cb:95:07:0c:d3:7c:0c:8c:1b:36:1e:e4:64:ae:
c3:8f:a9:ba:d0:1c:7a:bc:95:34:42:9b:38:e7:2e:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:97:C1:28:F5:C1:E7:76:71:E8:F0:E0:14:2F:83:B6:6A:69:7B
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:f6:43:d1:5c:f1:60:60:16:cd:ee:74:3c:7a:e9:e3:52:
78:ad:87:05:07:37:b8:31:56:7c:e0:5b:77:a7:73:51:4f:23:
31:56:b8:01:6a:45:6a:6f:e0:9a:a1:42:ee:38:6f:c7:c7:05:
34:f0:37:19:06:8a:ba:f7:d5:34:c2:13:db:ec:81:68:a8:7b:
fe:af:7c:70:0d:55:54:c5:a6:7e:49:a6:05:9e:88:59:c7:8c:
5b:e1:9c:0e:54:a6:b0:fb:bd:4c:c8:bb:5a:35:d3:24:d6:9c:
86:28:29:ff:48:11:4a:89:d9:52:72:9a:c8:2a:28:b2:12:94:
12:8a:bc:30:24:c1:f4:af:b7:f8:dc:25:54:b1:1e:a1:60:a4:
69:26:60:c2:19:65:6e:6a:fa:40:7a:16:61:3e:92:32:26:6e:
b0:cf:35:e8:d6:55:91:61:1d:8a:c7:25:fa:87:8a:02:1c:5a:
e9:d7:1d:d1:28:38:18:04:ff:48:3f:e6:47:9a:01:e7:c9:5e:
8e:6f:cb:f8:34:69:4b:a1:e1:e9:2c:15:96:77:cb:24:fe:c9:
35:ce:81:18:ed:f9:03:dd:ca:ee:3a:75:bf:9e:64:ee:4a:84:
46:4b:ab:c6:3a:b2:d8:d8:94:07:fc:17:80:5a:9e:c1:a4:d0:
16:4f:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client