Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: 0Z9SsdPKDyIFXZxyoN+9YfjJQSJbKSbGOSdtpsDF6D4=
Subject key identifier: 27:9C:77:B8:CD:7D:C6:42:DC:2B:DE:AF:A1:F6:AE:6A:2E:72:F7:C9
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019A73016C7058694F597B4C77C1B8B29AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 1392
Signing time: Tue 11 Nov 2025 13:01:04 +0000
Manifest this update: Tue 11 Nov 2025 13:01:04 +0000
Manifest next update: Wed 12 Nov 2025 13:01:04 +0000
Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=)
2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: lCMgEIYnmVY02oxsLo7jjZjpY7XnZwkdGz9rAX4J0Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:6c:70:58:69:4f:59:7b:4c:77:c1:b8:b2:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Nov 11 13:01:04 2025 GMT
Not After : Nov 12 13:01:04 2025 GMT
Subject: CN=279c77b8cd7dc642dc2bdeafa1f6ae6a2e72f7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:f5:5d:6e:ad:f9:eb:2a:a0:48:a5:53:4a:
b2:9a:51:1c:9d:bb:7c:f2:b0:f4:b1:1d:d8:0b:10:
5a:30:27:63:2c:70:db:dc:0f:3f:e1:63:ba:4c:fe:
15:3d:2d:30:37:6b:eb:73:b5:d3:5d:ff:da:05:9b:
4e:86:27:a6:c1:54:21:de:f7:b5:48:b0:6b:d2:43:
0a:c0:ce:6b:47:bd:5b:c1:74:11:dd:97:c6:08:9f:
28:02:90:c2:1b:50:60:d8:18:35:5d:28:b5:a3:eb:
64:a7:09:d5:4b:e7:bc:4d:19:87:72:cd:66:cf:6b:
dd:ea:97:2e:0b:67:72:f0:1b:6f:cd:6f:4e:ec:60:
26:e1:d7:d2:ea:41:3e:8b:87:17:79:3d:d7:91:ca:
ce:ac:98:cc:be:dc:65:36:0a:2b:f8:ba:8e:cb:d6:
d8:a6:36:45:1f:d6:93:ae:f7:b5:dd:3d:2d:fb:d4:
b3:f6:7c:9a:c0:14:e7:e0:f3:70:f8:08:1b:ec:8c:
a4:26:14:3e:df:f7:1c:72:da:7f:21:e8:ad:29:13:
d9:b9:1b:cf:16:67:71:91:b6:ba:9c:df:1a:c6:91:
55:66:e7:43:5b:f7:10:7a:c0:59:36:d0:d6:69:cf:
c5:08:ca:bd:26:25:84:68:89:15:a7:bb:3f:bf:37:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:77:B8:CD:7D:C6:42:DC:2B:DE:AF:A1:F6:AE:6A:2E:72:F7:C9
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:be:4a:d6:b0:31:83:1e:8d:ef:2e:fd:57:7f:16:1d:bd:cd:
92:ea:a6:b0:fd:fa:ce:9c:40:9a:bd:df:74:c0:1f:76:f0:2e:
6d:ea:94:9e:de:18:7e:3c:37:9e:ea:e9:ba:a1:ab:2a:6d:75:
f6:08:73:1a:36:19:c5:70:84:0e:79:68:21:5e:38:5c:e7:6e:
f0:56:a4:a9:23:c5:85:f6:95:16:3f:4b:cd:17:a6:4b:ad:ae:
0c:07:92:7b:35:20:e0:6d:32:60:cf:a3:99:80:d2:98:be:58:
05:02:de:3a:ea:d8:e7:2a:cc:72:a3:01:9f:33:6c:2b:d6:87:
0a:8a:32:95:16:ac:88:48:18:5b:af:fb:30:b7:2e:14:9c:93:
b9:26:38:f7:0f:b7:87:b8:ec:3a:62:92:95:75:7f:87:c7:da:
28:e2:5b:bd:ad:30:b7:bb:0b:a0:a6:66:07:b3:19:43:a5:2c:
ec:e7:2f:15:a7:05:cc:2a:2d:d0:93:ed:1f:39:ae:a3:38:4e:
99:e9:b2:5c:76:d2:25:0b:1b:70:ae:4f:7a:ac:13:08:22:98:
c4:d9:0d:5c:e1:6a:79:bf:e9:66:20:81:ed:f8:5e:73:d2:31:
0f:5d:00:e7:5d:64:a4:a1:05:7b:cd:7f:4a:0e:17:33:58:7a:
77:a7:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:59:44 2025 by rpki-client