Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File: GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier: 2lfzbp/JEoYAeQQ8Jzwk5x46WY20MV1bvvSiRzhfI4U=
Subject key identifier: 5F:37:61:73:BF:47:9B:77:47:FF:AB:CF:5C:B1:DA:56:E7:F6:2D:2B
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial: 019A72CA9DBC785F160D6283F8AF72A0919E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number: 0DE3
Signing time: Tue 11 Nov 2025 12:01:12 +0000
Manifest this update: Tue 11 Nov 2025 12:01:12 +0000
Manifest next update: Wed 12 Nov 2025 12:01:12 +0000
Files and hashes: 1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: 7KC7k99LuO4mn+/RODwOv9ri3MScKjbP192XmGofPfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:9d:bc:78:5f:16:0d:62:83:f8:af:72:a0:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Validity
Not Before: Nov 11 12:01:12 2025 GMT
Not After : Nov 12 12:01:12 2025 GMT
Subject: CN=5f376173bf479b7747ffabcf5cb1da56e7f62d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:21:55:45:a3:af:52:63:40:3a:0b:26:41:
ca:ba:2b:9d:58:2f:b6:ae:92:5c:ea:24:25:d6:c4:
ed:31:99:4e:de:f5:37:95:42:85:f6:5b:ba:4b:9e:
bd:05:fd:f0:81:3b:a1:94:28:91:cd:a7:d0:00:35:
21:8a:df:46:69:30:7d:fe:28:ed:6a:c1:af:b7:d2:
3c:3f:fe:c6:3d:38:c4:25:d3:45:61:60:e8:b5:d5:
37:e9:83:92:d0:fe:40:b1:1c:f6:e5:1f:df:6e:bb:
fc:27:9c:a9:b8:f1:8d:e7:25:f0:c8:3f:d1:40:00:
46:99:47:ca:c1:d3:1a:9a:7c:b2:5e:21:c5:d8:57:
b7:a3:a3:9b:b8:4c:44:f2:3e:bf:1a:16:80:ab:e6:
f5:a2:58:79:b3:ad:31:ca:68:07:3a:41:c4:1d:ca:
52:7b:60:4b:3a:76:77:ab:33:c7:c7:d1:82:29:72:
4e:2a:67:e7:4f:b7:83:18:cb:38:2f:08:0c:4f:4d:
f1:3c:b1:63:37:0d:ab:46:aa:4b:1f:a6:3b:be:2d:
e1:66:d1:1c:0e:e3:56:3c:95:22:63:58:28:12:f8:
97:4d:9a:6b:84:51:e0:db:60:37:c3:ea:9a:54:c1:
c0:c8:65:09:10:21:2a:57:7c:bd:9d:a3:e6:f3:05:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:37:61:73:BF:47:9B:77:47:FF:AB:CF:5C:B1:DA:56:E7:F6:2D:2B
X509v3 Authority Key Identifier:
keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:49:b0:5f:31:5a:cf:5a:33:87:f7:4a:94:6e:d9:4e:95:e0:
57:57:6e:21:0a:ee:a6:6e:71:bd:98:70:fb:1d:05:5a:21:27:
2e:20:2b:4a:65:f2:7b:1e:67:2f:15:b9:1f:f9:9d:ba:00:c5:
94:71:97:4b:f0:9c:09:d5:31:cb:42:09:0f:c1:2b:88:2e:9b:
db:5a:a0:12:69:12:b6:c2:5b:82:3a:44:42:a3:8d:9b:65:0b:
30:02:86:1e:d3:dc:3a:63:9e:fe:e8:17:31:5c:58:b2:35:ba:
6f:5d:53:67:49:19:b8:67:0c:09:63:7e:1f:c2:18:e4:46:38:
a9:77:5f:59:25:6c:26:06:1d:2f:53:b3:b2:21:f2:f9:16:0f:
81:1b:08:12:c8:a7:41:1b:41:b4:9a:c3:74:ef:14:0a:38:9b:
f4:6b:69:69:f2:43:64:d4:71:ec:ad:0d:46:66:ca:79:f1:23:
3a:c9:ea:cb:cf:c6:b4:2d:a9:17:50:02:b5:59:b8:c8:b8:2f:
ef:69:ee:7a:41:ff:38:b0:ad:38:b6:cc:1d:72:48:68:0c:92:
68:a2:5d:f6:62:48:91:e4:ab:b1:9c:40:e7:e0:c8:f3:c3:62:
5a:93:26:62:e6:86:6c:c0:6e:1e:ed:09:10:fc:4b:ef:59:e8:
78:17:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:18 2025 by rpki-client