Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: l/8EjGQDbCfRDwZtDujc6IGjzVUoXnzBFmX1x7kDTGo=
Subject key identifier: 4E:10:5F:B1:76:A5:6B:6D:7B:F7:27:1D:D7:88:C3:82:C8:13:1D:D0
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019A2E8DA3CBEB5759A1A256A9D51E02F304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 06:00:25 +0000
Manifest this update: Wed 29 Oct 2025 06:00:25 +0000
Manifest next update: Thu 30 Oct 2025 06:00:25 +0000
Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=)
2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: tWG6O2I1PqGYNfN4+0hgN9uu5YOCNNmijrZOmyF85GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:8d:a3:cb:eb:57:59:a1:a2:56:a9:d5:1e:02:f3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Oct 29 06:00:25 2025 GMT
Not After : Oct 30 06:00:25 2025 GMT
Subject: CN=4e105fb176a56b6d7bf7271dd788c382c8131dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:f8:01:dd:36:a0:35:d2:61:18:ab:dc:ef:
f1:0a:5a:a9:f4:95:4c:70:a8:4c:f4:32:5c:ad:d7:
88:50:0d:64:4d:f1:cd:8d:4d:c8:7e:28:2a:58:74:
dc:77:cb:6c:77:f4:0f:87:4b:12:c3:d8:c8:3b:b8:
d6:3f:1c:a4:9b:6a:ef:3b:8f:56:24:19:2d:0b:55:
6d:f4:a4:54:ca:fd:06:39:cb:73:e3:24:7e:d9:e8:
87:e7:13:02:65:b2:02:df:cd:d8:34:8d:aa:d5:b6:
12:6d:91:16:37:22:81:57:91:80:32:b9:87:dd:2f:
3b:e7:3d:e7:31:9e:9a:49:a0:40:7e:ca:9b:59:df:
91:02:8a:59:c7:78:c0:5a:73:6c:5e:b9:58:c1:01:
c9:03:53:31:a0:c8:04:a1:46:5e:a7:7d:c1:44:ed:
95:70:93:f6:3b:55:40:21:01:68:8c:c5:e7:f9:20:
5c:44:18:23:96:e4:11:b3:ec:fa:57:1e:b3:23:e1:
fd:34:87:97:3b:e6:9f:85:de:39:e0:f5:59:c7:0a:
a0:ee:f6:3e:ca:54:4f:56:d5:67:2b:d0:86:c7:4c:
ad:56:17:b8:4a:8e:ce:bf:c2:7a:ae:6e:9b:32:71:
03:ad:7b:d3:cc:94:e8:08:10:11:4d:79:24:26:8f:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:5F:B1:76:A5:6B:6D:7B:F7:27:1D:D7:88:C3:82:C8:13:1D:D0
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:86:78:68:f1:ff:80:bf:9c:77:b3:b9:1e:57:b5:01:96:
0b:2f:30:8e:45:07:6b:3e:fa:f0:24:1e:5e:74:01:36:88:ea:
9a:7e:e7:a1:84:ce:5c:6a:3a:97:f6:66:96:6b:99:3d:61:e5:
56:6e:ec:cc:d5:d0:ca:64:29:78:5f:8d:64:c1:c5:cc:a0:85:
bf:f1:bd:50:8f:a0:a6:0e:d4:79:48:4f:3e:6c:ec:9a:0b:b7:
48:63:8a:24:93:a0:5b:c7:60:14:eb:4f:be:e5:88:52:65:ac:
a3:e3:ff:bc:7a:39:b0:7f:2b:b7:9f:03:d4:12:70:01:0d:51:
17:38:73:72:22:a4:f4:b7:13:46:be:aa:48:f3:d1:7d:2c:44:
bf:f0:da:2d:6b:12:c9:33:ab:cc:d6:4b:2f:d0:e1:a4:c8:74:
a4:41:35:35:89:cf:3a:35:21:0a:0a:8f:2d:80:b2:cb:54:5a:
2b:54:79:08:3c:0e:b8:e6:0e:87:b2:53:a6:37:72:ff:c6:eb:
1e:2c:8c:3b:59:d6:cb:f6:40:fa:eb:dd:81:ea:dc:17:95:22:
76:c6:31:f4:07:96:b9:56:1f:95:ba:12:02:83:a5:b7:95:8c:
97:17:c1:5c:21:ee:29:fc:32:3e:0c:41:e9:14:c4:85:91:f8:
50:79:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:13:21 2025 by rpki-client