Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: 8rPlhHcwr+wk6rV9svKzrHy9UuvWYedqKOWsnruQkVI=
Subject key identifier: 1D:D3:E6:14:50:29:E8:E7:D9:40:01:AF:34:A3:A5:F9:16:14:06:78
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 019A24AF33D8B46FD1893F8E721CD0550A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 1444
Signing time: Mon 27 Oct 2025 08:00:53 +0000
Manifest this update: Mon 27 Oct 2025 08:00:53 +0000
Manifest next update: Tue 28 Oct 2025 08:00:53 +0000
Files and hashes: 1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: 6wz03HBjbuLb3HXGDQz2M2AjOKo5lN5nmh1jsqVYKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:33:d8:b4:6f:d1:89:3f:8e:72:1c:d0:55:0a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Oct 27 08:00:53 2025 GMT
Not After : Oct 28 08:00:53 2025 GMT
Subject: CN=1dd3e6145029e8e7d94001af34a3a5f916140678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:73:9a:c1:98:30:36:3c:70:fa:9b:f5:e7:
b1:10:eb:aa:2b:61:d2:29:30:ed:4b:87:55:d9:33:
f9:d1:d4:0f:4f:d0:fc:b4:d0:58:ff:ac:80:60:a0:
02:4b:5e:3d:0c:95:11:a1:2a:8a:b7:d7:bd:f7:7e:
dd:5e:3b:98:58:d4:d9:4d:68:66:4b:57:ac:b0:a0:
81:92:2c:3b:e8:f6:e8:78:c9:c1:11:a0:21:3a:69:
61:74:3f:41:cf:27:df:22:b9:22:35:6d:eb:9c:99:
a8:d7:6e:f9:59:2a:3f:1b:d6:0e:83:ee:0f:d2:3f:
ba:29:01:b6:6c:7c:61:72:91:d5:8a:c4:7b:8e:c4:
0d:fb:8d:86:47:0c:48:b8:41:88:9e:07:fc:a8:06:
c0:9f:0c:83:ce:34:b8:41:59:e6:61:66:b1:7a:98:
c5:80:e5:41:ea:a0:db:10:6f:c4:47:52:de:a2:cb:
28:d2:fa:58:6d:cd:a8:9f:fc:5f:e7:5e:4f:a8:3e:
ca:89:ac:8d:08:65:b0:27:a8:1a:b3:9e:fe:e0:c6:
4a:6c:7a:b6:ec:21:73:61:3d:75:b2:b6:38:39:19:
79:98:af:ac:15:8c:0e:89:83:10:3e:f8:a1:b1:ff:
48:ec:cd:5f:fc:63:32:96:68:85:db:b0:4d:2a:b5:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D3:E6:14:50:29:E8:E7:D9:40:01:AF:34:A3:A5:F9:16:14:06:78
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:8e:2d:ca:f8:02:6d:02:43:e5:fb:d3:41:45:00:9c:d1:
f1:7d:b8:ef:45:6c:ab:57:57:62:a8:a5:26:12:50:66:a6:27:
59:52:a6:a8:df:81:d3:fd:64:47:f0:6e:6b:15:7c:fd:24:6c:
9a:db:ba:c1:b6:60:ec:b3:30:05:77:60:56:b0:df:30:82:09:
0e:c3:56:cc:86:9a:cd:ae:ba:e9:45:08:5d:f1:e0:f0:bd:29:
00:84:50:e1:b5:13:bf:4c:1b:e8:99:e0:1b:80:f2:67:83:cc:
a5:f2:cd:b5:de:bc:04:10:de:2c:5a:0d:9d:63:b7:69:bb:29:
dc:6e:9d:aa:bd:28:b2:2b:16:30:5c:2f:b5:72:3a:05:39:7c:
90:83:bb:c9:45:ea:2b:33:dc:07:0f:2c:2c:d0:29:16:ff:ce:
13:cf:18:60:07:3f:ad:06:2b:71:bc:bd:3c:4c:ef:0b:4c:79:
45:c7:c0:43:cc:42:c9:85:ab:b8:d7:fb:a9:f5:b6:69:17:8a:
13:df:38:a8:63:76:8c:1e:cd:fa:fd:f6:85:8f:d1:27:39:d6:
62:a2:5f:8e:04:21:f8:0b:fc:b8:d7:0c:2f:97:8d:0e:e6:8e:
de:95:2e:6d:5f:81:08:e2:c0:34:93:19:ba:4c:69:79:33:33:
65:3f:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:05 2025 by rpki-client