Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: HV7z5fTdor4hPrOzrYRDnTB0clOXO48IgP77l3tAmXk=
Subject key identifier: C6:F6:3E:5C:C2:10:91:C8:97:12:F6:44:C4:0E:42:AA:97:A8:09:AD
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019A725D068BF1BCD78B03EDCDC11DDC8745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 0438
Signing time: Tue 11 Nov 2025 10:01:30 +0000
Manifest this update: Tue 11 Nov 2025 10:01:30 +0000
Manifest next update: Wed 12 Nov 2025 10:01:30 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: I5lgQoZ7nnfEeUJqsIU6aWIx0iiG2cuHNhVRQ6lPXWU=)
2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5d:06:8b:f1:bc:d7:8b:03:ed:cd:c1:1d:dc:87:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Nov 11 10:01:30 2025 GMT
Not After : Nov 12 10:01:30 2025 GMT
Subject: CN=c6f63e5cc21091c89712f644c40e42aa97a809ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:2b:3a:70:7d:3a:5d:69:00:a0:c3:b8:46:
d1:c3:5f:4d:c5:f6:65:9c:44:ae:bd:5d:b6:10:df:
51:6e:ef:2a:3f:9d:f8:7c:d3:f7:39:2c:a4:53:5a:
90:39:5d:19:f4:3c:87:01:a1:23:4c:f1:9d:a0:8c:
c4:dc:af:ba:3e:ac:1a:56:bb:ae:0b:2f:6e:f5:e0:
16:c2:7f:29:46:0b:8a:7c:e1:7a:9c:5b:bc:62:0a:
d2:3a:76:1f:01:7b:64:b8:33:f9:3f:0a:6a:1d:71:
1f:b3:6e:14:8b:13:9b:00:6c:b7:df:2f:1d:ea:5c:
5e:37:4c:b2:ea:7a:60:cb:24:9f:1d:9a:ed:0f:31:
d2:1a:8c:3b:9c:e3:cc:96:00:22:24:87:6a:e0:8f:
22:66:c4:44:6c:a4:62:79:4a:f6:ea:2f:de:ff:08:
7d:41:a6:79:0b:5a:e2:11:9d:d6:f3:c9:86:d5:3b:
5e:01:46:f8:80:3b:d2:cb:6b:55:a5:bd:73:1e:71:
7d:b5:3b:7a:06:df:95:24:06:0a:73:20:6f:31:ca:
b5:11:2b:9c:ba:91:38:12:2e:5d:b3:29:8c:a6:10:
6d:01:d5:68:22:19:7c:04:91:68:ce:49:b2:a8:6a:
fb:17:81:e1:ae:29:02:76:82:02:9c:67:c7:cf:82:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F6:3E:5C:C2:10:91:C8:97:12:F6:44:C4:0E:42:AA:97:A8:09:AD
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:16:e9:6e:87:26:e5:3f:c2:b6:98:1e:bb:6b:7b:c8:d4:
6a:1e:50:ae:15:95:42:50:4d:8f:05:de:d9:3c:8c:65:7a:8e:
28:bb:5c:12:f4:20:7b:b6:52:3c:d3:b9:dd:b5:75:75:62:a8:
25:8b:f9:c1:2c:56:80:2a:66:8b:91:5f:39:80:68:d9:5b:ad:
e7:73:15:07:c1:fb:38:ac:5a:68:f8:6c:9d:89:f6:03:b4:19:
14:e1:3b:37:e1:41:fc:49:6c:18:14:1c:ba:6a:ab:6d:74:12:
fd:45:8c:6c:7d:1c:a3:58:71:5c:92:37:fe:fa:6e:dd:74:32:
22:af:8d:8a:19:b2:15:98:be:4b:ef:0e:c6:c2:2f:ae:6d:2a:
d7:f4:0b:ce:89:1c:04:ad:87:8b:84:49:9d:61:ff:da:9e:7a:
b7:36:28:13:c5:cd:2c:39:ce:43:7b:17:5e:94:52:8c:85:ff:
d7:da:5c:df:8a:c9:33:ce:a6:e9:27:d3:ba:9e:d1:c9:bd:01:
95:f7:a0:dc:62:50:8b:36:da:29:19:87:85:7c:97:f7:e7:2f:
91:2c:51:fe:fb:14:ad:4b:80:4e:86:85:44:2a:a4:ea:ee:38:
da:bc:44:61:52:e8:f2:b8:91:26:40:c5:e0:56:43:3c:2e:2b:
2e:12:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client