Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: 7IAkZpbDm7SRllLA5ebsy2W1GkdgGoXAZ0AKyTMA3UY=
Subject key identifier: 6B:24:46:1D:DA:5E:78:8C:1F:CC:45:F3:23:18:14:81:BD:61:7D:33
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019A71B76E8CC58B556362AF5CDE8EF1808D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 08C5
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: rGwO9gXv06XzuDLVqHWNePgaHGCGjOFo3EJ/19Qrm7A=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6e:8c:c5:8b:55:63:62:af:5c:de:8e:f1:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=6b24461dda5e788c1fcc45f323181481bd617d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:14:46:38:46:28:7c:63:af:ab:5a:12:b0:
aa:cb:55:d7:27:93:17:f4:a9:7e:b3:25:77:67:47:
62:92:f3:d6:00:03:bf:84:72:f8:90:1f:cc:3e:7e:
49:2b:78:9f:02:bd:9a:21:e0:bb:ae:9a:2b:75:54:
f1:6b:fc:62:1c:64:9b:6a:fb:be:0a:dd:34:04:44:
ed:10:60:0c:33:e0:50:33:16:b9:d8:49:63:48:2f:
e6:a3:48:6f:93:27:c6:4a:38:54:55:bd:2a:c6:3e:
4c:76:a2:df:28:16:f8:9f:f6:01:a0:93:27:34:be:
3b:2e:04:a3:3a:e6:56:42:42:69:97:a1:4e:8d:d3:
22:93:b4:59:6c:7b:8b:bb:70:78:03:d4:80:50:27:
36:73:1f:a4:3c:df:06:d7:07:36:86:46:9b:ee:37:
b3:f7:da:64:0a:2f:28:65:a4:fb:47:73:79:e8:8f:
d7:90:25:21:43:c4:70:91:ae:75:47:b1:5f:20:03:
1d:10:0e:b4:4e:ac:76:b0:a2:be:ab:0b:ac:04:b7:
b7:59:d5:4d:d4:dc:39:40:df:ad:c9:16:73:80:1c:
8a:ac:bf:66:ec:e2:15:bf:b6:8d:b3:50:5f:ae:00:
97:3e:1f:ae:ec:e6:8c:86:e4:89:e3:09:08:81:d1:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:24:46:1D:DA:5E:78:8C:1F:CC:45:F3:23:18:14:81:BD:61:7D:33
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:04:21:a7:62:a5:15:29:63:2e:40:df:e8:4f:04:18:78:eb:
d8:df:54:e5:a4:15:2a:fc:ad:f4:7b:70:c2:6e:aa:71:a7:6e:
14:82:a3:b8:b5:12:f4:f9:0b:00:b2:a3:5f:47:31:fa:55:cf:
cf:5f:78:2f:fb:fd:79:53:7b:2a:4d:9e:82:19:c3:75:72:d1:
79:3c:74:1c:59:2e:18:4f:ae:0d:cd:da:3e:a7:ce:35:e4:d0:
33:2b:a8:9a:e4:2f:4c:02:57:c2:94:89:92:01:27:c4:c8:49:
ec:34:a6:51:e3:86:e8:01:10:09:be:9f:64:2d:75:3f:bd:b7:
5c:36:81:71:1e:a5:32:07:ba:82:a4:17:c5:5b:6a:79:4c:8a:
fc:7f:a0:1f:98:8f:54:da:a9:72:0c:54:e7:3a:86:a2:24:62:
dc:30:8b:c3:7b:78:68:55:bb:16:77:c2:87:52:bf:47:19:fb:
74:de:2f:af:e3:a6:27:bd:ba:63:e7:ac:d2:51:92:3e:33:35:
48:b1:e2:34:56:5f:36:d8:75:41:67:ae:2e:ed:8e:63:db:fe:
5c:e4:ca:f0:55:cb:1b:0b:f1:d2:eb:e3:d4:88:c1:40:4b:58:
e3:36:05:fb:bc:bc:fc:bc:d1:9a:d6:14:3c:ac:81:6b:d5:eb:
60:da:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:52 2025 by rpki-client