Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: kR1+jPxrSSp/wIvcyN0tHshcEt9sVDPVdY9cQbIC1hg=
Subject key identifier: 93:BE:1B:B1:30:68:4F:B4:C6:F1:7E:48:7C:DD:83:B6:68:64:2A:55
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019A228A86B4921115D3A3DE0BE6D886F9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0919
Signing time: Sun 26 Oct 2025 22:01:35 +0000
Manifest this update: Sun 26 Oct 2025 22:01:35 +0000
Manifest next update: Mon 27 Oct 2025 22:01:35 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: TxvlSEqKmm/psZndmWK3kaMZfAu34jicA0A9yeC8uVU=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:86:b4:92:11:15:d3:a3:de:0b:e6:d8:86:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Oct 26 22:01:35 2025 GMT
Not After : Oct 27 22:01:35 2025 GMT
Subject: CN=93be1bb130684fb4c6f17e487cdd83b668642a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:b6:15:9a:41:a2:c1:e9:a4:a6:13:40:97:
c8:e4:a5:63:7c:74:e0:03:df:6a:15:59:cd:2a:2e:
3a:58:a9:89:ff:7b:31:25:01:1e:75:7a:8e:5b:19:
86:32:a2:c0:49:19:b5:13:b2:d4:0e:ed:39:ec:73:
dd:c5:01:3c:b1:8f:ab:0c:79:84:31:b8:90:c9:4d:
64:32:99:41:33:17:6a:45:97:11:ba:3b:29:ed:f4:
01:c1:af:fb:73:5b:1e:14:e5:0d:90:3d:cf:6f:b7:
4b:0f:c2:9c:69:e3:5a:62:1f:64:da:5d:86:40:63:
f5:27:8a:1e:59:52:78:51:94:3a:d5:6c:09:87:55:
07:18:0f:d7:ea:55:8c:11:76:6e:6b:94:0d:37:ba:
27:de:73:d8:ed:35:3d:14:76:b8:10:7c:98:b3:d6:
6d:d5:84:e0:88:41:df:34:24:b6:b6:6e:b0:cb:80:
8e:b9:8d:aa:4f:54:dd:dc:9c:84:82:c2:28:87:bf:
b7:17:3f:a1:7f:8c:e8:6b:6e:4d:bc:1b:2d:11:64:
45:c7:cb:96:85:65:a4:8b:c0:7d:37:dc:ed:a1:e3:
05:e3:7b:6f:ae:8f:a0:5b:ef:d1:a6:bb:65:f2:92:
75:c3:81:98:62:96:d9:4c:22:12:c2:5e:0d:16:fa:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:1B:B1:30:68:4F:B4:C6:F1:7E:48:7C:DD:83:B6:68:64:2A:55
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d9:e8:36:0a:ff:68:10:ba:aa:b0:2d:41:bb:4b:2f:ba:1c:
d9:3f:6b:b5:b2:fd:9c:b0:61:b0:81:90:a8:92:58:e6:78:fb:
1f:db:69:9b:a0:2b:f4:55:92:2f:8e:08:5e:eb:d5:d6:64:c8:
1f:aa:5b:f3:fe:51:33:39:c8:86:aa:29:29:3f:e7:4e:3d:74:
c9:8e:b0:3a:d4:af:3e:ba:9a:03:ec:fb:a2:93:f9:cd:dd:9d:
1a:22:07:33:57:cc:59:55:d1:87:ab:ba:e6:30:2f:e9:c0:2c:
a9:84:37:a1:32:10:2a:9d:56:3e:25:f2:ff:3f:4c:e9:8b:7a:
61:8c:14:c3:7b:cc:66:b4:7f:ba:6a:74:3c:09:d9:0f:bb:c1:
c9:a2:dd:54:b7:ee:f2:15:b6:6a:56:c8:87:d3:4d:67:59:4b:
ab:62:da:c8:a4:29:28:eb:ed:43:ac:28:38:43:c0:b1:73:b6:
8d:f5:46:bf:95:a4:48:9e:6c:29:db:65:2d:0f:51:1f:7f:a6:
31:b6:a2:06:07:56:4d:dc:a0:c3:e7:e8:5a:e4:77:ac:df:c2:
aa:3b:2f:89:d9:44:10:64:7c:32:f0:e2:59:b4:3b:d4:1f:28:
ef:18:8a:d8:3c:7b:4d:a8:e5:71:fd:b2:a2:57:c3:72:20:60:
96:6f:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:02:09 2025 by rpki-client