Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: 2fZ6vRTj/kPzaSJCvWFNd/fhQDdLuGFxb5pTYv2UwEE=
Subject key identifier: BC:C3:CA:A0:CE:81:4D:A0:2F:76:7A:D2:AA:B0:7C:5C:BC:D3:0B:F1
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 019A72265271C94377A0B59702BDE0814AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 16F4
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: MA9t4kZTrxjsdAVMXAJWBABe8KdcoQfp+fqtKh9Oiqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:52:71:c9:43:77:a0:b5:97:02:bd:e0:81:4a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=bcc3caa0ce814da02f767ad2aab07c5cbcd30bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:c5:0a:39:c3:d2:a3:04:4d:26:53:bd:ef:
c0:c6:59:eb:9b:d9:38:59:7b:3a:52:d7:d1:ea:db:
d4:02:83:29:89:78:53:51:f1:a9:3d:82:02:1a:ff:
e8:9f:3b:e3:ca:7a:cb:d2:95:4c:92:08:61:d8:66:
fd:c8:73:51:38:f8:02:13:a8:b4:59:01:f2:ec:08:
dc:7e:c0:90:b2:01:82:af:77:a7:fb:c5:a2:93:97:
de:5a:fb:0c:e6:bc:c7:3d:9a:73:c6:5f:d2:93:35:
54:83:31:a4:e2:1c:c3:00:12:3e:68:ef:66:a5:c6:
fa:6c:80:95:0c:11:9d:d6:33:b1:d4:70:a9:7d:86:
de:a5:38:87:b2:f5:46:35:4a:c8:81:61:2b:99:64:
40:e1:03:94:86:32:55:4e:03:00:e0:21:f9:27:07:
da:08:26:08:ad:25:94:58:f2:c2:19:ca:36:ce:cb:
97:3b:29:24:f7:b8:e9:6e:d0:26:97:12:e7:b8:83:
8a:aa:db:a0:32:db:1b:70:4b:42:db:66:8a:78:49:
d1:61:25:58:db:5c:a0:31:ae:e1:e9:59:22:a1:bd:
c2:5b:66:fe:8a:32:43:68:f9:66:24:f6:0b:3f:ed:
67:e6:d3:3e:7a:f4:98:0a:6e:2a:6f:53:4d:3d:43:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:CA:A0:CE:81:4D:A0:2F:76:7A:D2:AA:B0:7C:5C:BC:D3:0B:F1
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ec:67:9a:79:66:f7:62:28:27:ac:06:54:74:df:68:b3:7d:
c9:c7:66:60:80:4b:b1:d8:31:c3:6a:e0:af:aa:f6:e5:50:44:
92:77:aa:47:9a:48:11:8a:96:0e:f5:db:60:d6:ab:80:f4:09:
bd:c6:2f:f6:c4:d3:cf:15:3c:49:b1:0c:c5:11:81:27:ef:11:
1f:02:1a:aa:ad:f9:c5:29:c7:42:92:cf:79:0a:75:da:fc:86:
d3:0a:c6:9b:55:d2:df:14:18:2f:56:46:22:9c:3e:6b:1e:f1:
e7:02:a8:ab:ef:14:50:da:5b:73:d2:d1:e9:4a:01:33:77:c0:
9e:5b:02:68:85:c5:21:98:52:1a:df:50:4d:9b:42:75:eb:e8:
4a:d3:68:10:1d:c6:a3:a8:25:0c:85:61:68:57:57:df:96:65:
80:ad:11:1e:fc:4b:c7:84:f1:21:c9:c9:ee:3a:98:ba:c2:41:
36:86:21:2f:d4:2d:5f:1d:eb:c9:2b:f6:84:fa:73:9d:9b:00:
b6:e4:4c:f2:74:5b:4b:be:dc:22:30:07:f5:52:32:fd:f7:d8:
63:26:4d:61:f7:38:05:e2:f6:31:b3:ab:d2:47:65:99:01:11:
3e:ba:c1:90:c5:d5:92:b5:3a:48:d0:ec:1b:0c:4e:8a:da:9f:
ad:31:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:56 2025 by rpki-client