Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: 2uM7MgtD9HpoqdjagqkMtBhSnregFZkZ/B4I89RsGWw=
Subject key identifier: 94:B4:68:BB:75:E7:2E:57:79:4C:3A:A9:A6:92:42:BE:C7:D7:4D:E4
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019A7293871B73CE34B5722C2E195246296A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 107D
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: 5ypx+kAizcVT/3jFN3xVa45XTJFrMdC339auifKfE4g=)
2: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (hash: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=)
3: q6mDakXCczwOucfjGR_MCayBN00.roa (hash: WHAyxlbQLqyJ/G0nYhz0U1oY3c2QkU4OXH4il3FpXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:87:1b:73:ce:34:b5:72:2c:2e:19:52:46:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=94b468bb75e72e57794c3aa9a69242bec7d74de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:a3:f0:fc:06:9a:21:98:9b:b4:5d:27:c0:
03:5f:18:1f:8f:7a:7e:96:fe:0c:a2:3f:99:6b:cc:
80:a2:bd:5c:86:a7:7a:38:aa:06:24:76:76:9d:9a:
a1:1a:57:3a:31:7c:5b:13:97:c3:21:cc:fe:57:4a:
c3:2d:c4:9b:3b:2f:9d:13:2f:c5:1f:2c:e1:ff:14:
f4:2d:64:56:62:53:71:d2:8c:2d:90:9a:bb:2f:a1:
c3:a6:9a:26:be:2b:a2:c9:58:4c:a0:eb:9c:33:6c:
da:c3:13:20:bc:66:a9:09:23:3a:26:a8:36:e2:fc:
20:11:f7:61:df:e0:4f:d0:db:62:7d:9d:4d:15:15:
f3:65:28:89:61:f9:09:8e:6c:5a:3e:24:65:25:93:
08:b8:fd:a5:f1:9a:84:08:cd:56:72:e7:79:a3:19:
82:4e:5f:f9:26:0e:75:a1:d0:4c:79:2a:1b:dd:08:
0c:9e:0c:57:87:62:cc:62:9f:17:5b:30:20:54:7a:
bd:e3:77:73:b0:cd:14:a0:6a:10:b1:a2:b8:5c:28:
c3:24:ad:82:5b:fa:86:2f:96:7a:ec:fc:21:4d:fa:
f2:a4:3f:d8:d0:20:49:6d:62:9f:69:67:ab:a4:f7:
13:af:52:af:74:6d:bd:cc:67:44:01:e4:56:a8:fd:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:68:BB:75:E7:2E:57:79:4C:3A:A9:A6:92:42:BE:C7:D7:4D:E4
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1c:0b:48:88:2d:69:89:ee:c4:cf:5e:72:76:f3:18:93:bf:
cc:8b:0c:ed:03:44:0d:21:a5:cd:b4:5e:90:cd:99:38:7b:a7:
a9:5a:a8:25:6e:e9:3d:94:68:cb:7e:6f:a2:e6:f5:8e:3f:55:
14:41:ee:01:d7:10:ba:db:fa:33:32:6d:03:e3:b7:df:0c:2f:
5a:f1:16:fe:e1:49:8f:a6:0c:e6:d0:f0:f0:27:db:bf:2e:5f:
80:09:3c:35:f1:cc:cc:5c:65:0c:33:70:82:18:9b:d3:9c:36:
7c:13:3d:13:33:2f:3c:d8:5a:c9:16:d8:72:e9:4b:58:09:81:
56:66:08:ac:a6:da:fd:a7:98:f8:4f:5f:d1:f2:7a:53:fd:9b:
e1:6d:cf:d6:d0:e0:52:94:b1:7e:64:9c:4d:73:79:39:55:00:
8f:64:f1:e1:c8:36:f2:e2:b5:55:3a:de:38:0f:83:e6:e2:de:
7f:80:45:e9:93:2d:cd:64:5f:68:0d:c5:ec:a6:6c:26:06:42:
2d:b1:c0:f3:b1:42:e2:7e:df:5b:05:b1:26:0d:04:b9:5d:03:
63:97:99:1a:a7:19:d7:a8:f3:36:89:c0:93:38:be:49:fa:6b:
1f:86:bf:03:0d:b2:cb:51:5e:25:21:42:f9:5b:16:05:08:ba:
4d:24:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:20 2025 by rpki-client