Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: pnMBkbYYU9GUnOCIsSrjhJM+EaM36JD+tqCTtR2aOWo=
Subject key identifier: D1:FC:96:DE:A6:D0:7F:B3:7B:3E:46:FD:CC:84:2C:BB:7A:D3:C8:6A
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 019A73A69CE6EBB6A498F67835CCC1026EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 0FB5
Signing time: Tue 11 Nov 2025 16:01:30 +0000
Manifest this update: Tue 11 Nov 2025 16:01:30 +0000
Manifest next update: Wed 12 Nov 2025 16:01:30 +0000
Files and hashes: 1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: 6ZBwHbEWFd/jvJ8Ad91BqrrXYPw56yKQZ2YJzoOMUUA=)
2: ZdLIbn9HJxp8pdvNeDczvn0TQ4Q.roa (hash: rg+IefpKLZ6BZTDP0ZlvyqCjjEypkuxTFlnDiZulEgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:9c:e6:eb:b6:a4:98:f6:78:35:cc:c1:02:6e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Nov 11 16:01:30 2025 GMT
Not After : Nov 12 16:01:30 2025 GMT
Subject: CN=d1fc96dea6d07fb37b3e46fdcc842cbb7ad3c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:e6:28:a8:13:d0:fa:41:ce:c1:c9:8f:a5:
26:f3:ea:52:63:1a:67:4e:66:fc:12:3a:83:ac:32:
d5:68:57:6e:99:86:a3:e4:7b:6a:8e:8c:d5:4b:5a:
08:58:b7:f7:56:75:c0:1c:f6:1e:40:43:00:e2:6a:
b3:e6:40:d3:47:43:a9:38:56:0d:23:56:71:1a:96:
5c:2a:e5:12:e7:5e:86:34:d1:38:2d:48:9b:22:19:
28:9d:26:5c:58:c5:5a:98:65:e1:22:b5:70:11:95:
a0:16:e8:dc:0a:26:50:2b:d5:a4:5d:15:57:69:7d:
46:d8:94:16:1a:82:95:c4:6f:c1:3a:6d:67:f4:0f:
ff:e4:d3:a4:b6:a9:dd:b8:86:29:a3:e3:d7:34:33:
98:7f:b0:43:b7:55:8c:29:a4:5d:67:14:2f:d8:04:
8a:53:fc:52:1b:ee:78:9b:b7:1a:d3:41:e0:a6:cc:
d0:a7:3d:6a:5f:28:f6:7b:36:98:87:d4:f1:f3:2b:
13:ef:47:0c:b3:ea:89:bf:63:6c:56:f3:6a:50:d8:
ab:83:9b:37:99:a0:75:9d:a2:44:23:11:5d:af:79:
9d:c5:e2:c0:d6:dc:69:8e:c4:8a:9d:82:18:7e:19:
99:68:63:39:28:e1:ac:dd:d7:6e:b5:7f:27:3e:22:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:96:DE:A6:D0:7F:B3:7B:3E:46:FD:CC:84:2C:BB:7A:D3:C8:6A
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:54:a8:01:e9:70:16:71:1d:2a:ee:63:82:51:ea:2c:ff:b2:
e3:d2:b9:32:78:a1:72:c6:88:28:21:75:3e:62:4b:f7:e2:a4:
be:8d:b2:3b:48:03:fc:ec:16:c7:6f:62:28:fe:5c:cc:c7:1e:
61:60:8d:47:db:a7:10:74:94:0d:a9:b3:18:14:de:e1:53:e6:
7d:0a:d8:fc:86:f5:aa:1d:5a:f0:d9:13:25:c7:1b:90:96:b4:
4e:cb:b5:80:76:da:5a:ac:98:ae:b1:98:e7:0e:29:ba:dc:db:
41:e5:be:ea:3e:70:73:b0:86:20:de:49:29:13:69:43:2c:dd:
e1:42:93:02:a7:c9:f3:30:e4:0b:00:3c:ca:a8:b0:eb:0c:87:
e8:6d:42:61:0c:2a:d8:a3:bd:35:4a:b8:30:ed:a5:88:6f:28:
c2:e9:c9:73:bb:da:b7:29:00:62:89:d7:f7:66:55:0b:75:3e:
56:3d:ca:ec:cf:84:25:a0:9c:64:25:00:9c:66:3a:a4:b6:b0:
ce:49:0c:3a:33:0c:cb:30:9c:ab:3b:4c:9d:e6:90:3f:18:da:
99:69:cf:9a:62:12:4a:03:1f:3f:30:3a:c3:1e:a4:43:dc:ed:
b5:b3:70:af:9b:f3:24:89:38:ce:fb:7a:f9:b0:fc:a3:66:0e:
70:4a:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:02 2025 by rpki-client