Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File: GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier: zXTLLCgWOPrmZSSejDZzRmNoGA5CZalf7Hq4btlXJIU=
Subject key identifier: 48:28:D6:E1:BF:F4:8D:DC:A2:9B:B8:F1:28:29:20:54:56:AE:B4:F0
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 019A7293B9E0B036A42F4FCB7E513D9D05F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number: 1022
Signing time: Tue 11 Nov 2025 11:01:15 +0000
Manifest this update: Tue 11 Nov 2025 11:01:15 +0000
Manifest next update: Wed 12 Nov 2025 11:01:15 +0000
Files and hashes: 1: GMiGJIQPkTJHbljDh9-Qbgs-ofQ.roa (hash: gehqPfu1dznuITregHu34HVG8SqD/GP87okupLZENG8=)
2: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: 4/2Lf+QcuAomgHz7kq6bIaVR8wgQdjkTjMNd9Fa9pAQ=)
3: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (hash: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b9:e0:b0:36:a4:2f:4f:cb:7e:51:3d:9d:05:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Nov 11 11:01:15 2025 GMT
Not After : Nov 12 11:01:15 2025 GMT
Subject: CN=4828d6e1bff48ddca29bb8f12829205456aeb4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:00:65:c7:e3:83:70:1e:c5:50:2d:30:fe:bb:
d0:c9:4f:c5:d4:93:a7:56:ff:ac:85:17:69:7d:98:
60:b3:f2:bb:03:da:1b:8f:90:68:71:c0:9f:e9:87:
b4:80:a6:0f:ca:3d:78:dd:b2:a9:cd:94:ab:73:10:
f3:21:3b:12:6a:45:4d:61:30:3a:fb:3b:8e:ec:29:
cd:0d:55:3e:b1:e3:e0:90:27:ee:9a:83:61:67:75:
6e:58:26:6a:f7:f7:1b:3c:48:9b:8a:c7:fa:79:3b:
06:c2:ee:e3:b2:0b:79:20:46:6e:35:5e:b5:db:bf:
9c:66:96:c1:ac:04:ee:8b:92:3f:92:91:7f:9f:42:
b7:ab:f9:b0:e7:58:6e:0a:ed:c3:96:f9:9c:9d:af:
e0:7c:79:4c:2f:bb:7a:cc:82:5a:de:bc:06:e9:cd:
a3:d7:2e:9b:ed:1b:82:c2:41:3b:72:f8:65:40:e7:
c8:7b:e3:4e:ba:e7:d3:67:94:87:ab:3d:38:46:3e:
ab:7a:bc:64:74:6d:97:4a:15:f3:3a:22:8a:2b:03:
2b:93:50:b8:17:3b:46:6e:eb:b0:ce:f8:43:a2:aa:
21:62:c4:7f:f7:99:ed:75:f9:5e:fd:72:7a:a0:38:
cd:a6:be:91:cd:b2:87:e1:f9:7d:14:a9:55:40:10:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:D6:E1:BF:F4:8D:DC:A2:9B:B8:F1:28:29:20:54:56:AE:B4:F0
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d2:75:b9:23:59:a8:70:72:f9:4d:d2:e5:f0:25:db:6f:11:
f8:bb:19:4d:91:56:0c:d8:5a:00:19:2c:ec:fd:b0:16:1b:7b:
64:b7:23:71:31:13:bf:2e:3c:85:83:d7:5e:66:c7:a7:ef:8c:
96:ad:cb:2f:63:90:18:a7:ec:a0:66:11:42:45:1e:85:d6:6e:
4b:ab:9d:7f:79:7e:e2:ac:63:f8:9b:ac:08:8c:f3:fa:0c:bd:
cf:24:04:28:47:bc:9b:cd:ff:7a:5c:e1:24:83:4a:68:6c:10:
b4:2d:93:46:20:eb:f2:53:f7:0d:4f:83:99:64:ab:c9:4e:70:
42:fd:d2:67:2c:d9:ba:80:9f:97:2f:47:65:b8:a1:49:6d:bc:
30:74:d9:fc:d0:68:85:b6:4d:11:20:d8:43:6c:f9:e9:56:71:
8e:2a:04:b9:12:62:0c:78:e4:70:ac:20:25:b8:25:06:be:8a:
d2:f5:5c:dc:f1:c0:27:3c:1a:e6:43:9e:3f:e8:58:30:59:15:
92:71:c3:9a:7f:ab:64:02:31:2d:a8:0d:ae:9d:95:bc:42:8a:
05:d4:54:6d:e7:a0:dd:56:fa:3b:c0:b6:83:19:c5:9e:4f:05:
e0:27:d3:53:2f:3f:84:51:be:31:5e:e9:4d:02:ba:4f:bd:de:
ba:80:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:38 2025 by rpki-client