Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File: gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier: 8DtU8e1Y8Hr8ifsmMP0ZmSt48WshhvAtHHHFpHkEpBw=
Subject key identifier: 12:3D:12:8F:DD:12:D8:8B:68:C0:3A:CE:42:61:7E:6A:1B:30:F8:E5
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer: /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial: 019A71B9245BFE59EBF94CC3FF8E0D6AE4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number: 0D10
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: 9KyF73rehYPV02tjofB2AZLrL40.roa (hash: puNKsT3QO3F9HAC3FWFKHMpsh3lk62Ax5BDntOG9N0s=)
2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: EYWUbsvKXCkFuXDsFB/p7u4siTaTo+Tp4KDAsBD4TXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:24:5b:fe:59:eb:f9:4c:c3:ff:8e:0d:6a:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=123d128fdd12d88b68c03ace42617e6a1b30f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:ea:8e:4e:3a:d1:23:af:39:51:5e:96:63:
59:6d:a6:d0:36:4c:2e:8c:82:ac:e1:14:cb:a8:ad:
c7:3b:b3:af:aa:08:03:26:84:bc:ce:7a:c1:96:41:
05:9d:e1:5d:6d:16:0c:30:17:ce:39:c4:0e:60:d7:
fb:4c:55:89:a2:06:ef:2c:2d:1c:99:53:15:84:f2:
b7:23:a9:53:26:5c:43:6c:7f:49:b7:3c:72:3e:6f:
d3:f1:46:ed:78:d6:83:c6:c5:ce:dc:77:26:35:c7:
ed:e7:71:b7:f8:9a:45:e7:94:09:ea:97:5b:22:5b:
8a:30:4b:09:f9:a1:9c:78:f0:41:52:c6:39:c2:31:
28:5f:e1:17:b8:27:f9:e4:ca:7d:ef:09:eb:92:1f:
03:d9:b8:09:52:bf:7b:66:61:26:23:6a:ee:9d:61:
4f:66:b3:b9:67:6a:9e:b3:fb:ee:fa:06:54:a5:63:
55:9f:cc:43:e9:36:1d:60:58:56:79:cc:dd:16:2f:
b9:b4:26:00:30:c7:1e:ed:26:b9:0b:13:d3:31:57:
e4:df:c0:8d:f8:d2:66:2b:dc:7b:c6:24:97:fa:1c:
4f:3a:8c:75:fa:44:63:a7:99:c2:fc:a7:39:6f:94:
a1:cd:a0:e6:3e:6c:60:ba:1b:78:cb:de:6d:fd:5b:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:12:8F:DD:12:D8:8B:68:C0:3A:CE:42:61:7E:6A:1B:30:F8:E5
X509v3 Authority Key Identifier:
keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:01:4e:b1:b6:bc:4a:29:70:51:18:a7:8b:05:02:3c:67:
9b:11:32:f4:42:3f:96:80:33:54:00:33:3d:58:10:cd:a0:22:
67:8b:4e:11:99:a0:78:65:83:81:02:02:70:26:0d:bb:e7:da:
c3:ca:e8:01:c4:89:55:b5:9c:35:e3:8d:17:00:ca:ab:7a:10:
5a:88:65:81:5a:cf:1b:0a:da:47:83:bb:bb:03:87:b7:59:af:
18:9c:a2:12:af:c3:72:01:06:05:53:bb:96:a0:c0:c2:3d:e0:
a9:e0:7b:dd:c4:de:32:ea:aa:85:df:f0:b3:1a:6f:ec:6d:2a:
51:80:c3:d3:5f:a9:81:04:6f:61:30:51:8d:f6:7d:b7:8a:f5:
48:7c:88:db:06:cc:5f:d1:d0:cb:87:88:39:4c:5d:58:59:a3:
5c:f9:9f:a6:d8:b6:e9:fb:16:b1:5c:6b:d2:55:eb:99:85:96:
89:4f:01:8b:fc:34:c6:bc:33:9a:bc:6b:fc:9e:7c:c4:ce:ab:
10:9f:d9:da:c2:fe:b9:ca:1b:53:8c:5a:8f:ad:9a:ca:32:61:
63:79:17:b7:85:15:df:19:70:46:ec:2a:dc:b4:97:c9:99:12:
73:3a:19:e6:ed:da:21:f6:ca:62:4f:7c:e7:4e:5e:ed:33:4f:
8b:c6:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:32 2025 by rpki-client