Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json)
Hash identifier: HTLEf63ZS07PntmYkULOYUKt0SBOHdtvQzjAo1Msjt0=
Subject key identifier: 6C:7D:49:83:EE:DE:A4:F8:F7:61:A6:4B:EB:08:8F:19:79:18:E4:7D
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial: 019A7293EDEB21089B49F9BD36717BB0F84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
Manifest number: 04E5
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: vPNPMA1SuaRxhGW7DzxaH3AA4KHUrkrkXCMWnRqwq64=)
2: z6gRZQL9dktzDQCQibZshxDiKi4.roa (hash: 4kSTaNBCK4SMDmYd2plLBmE2hYKvGg7VL6yg3cqclD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ed:eb:21:08:9b:49:f9:bd:36:71:7b:b0:f8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=6c7d4983eedea4f8f761a64beb088f197918e47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:d3:63:69:6c:ed:2f:b7:31:25:17:50:58:
a1:18:ed:67:fe:4e:16:33:ee:4d:83:5f:ab:ac:87:
32:4a:96:ef:a7:dc:3e:ed:0e:6a:cf:22:f8:58:7d:
18:a5:27:a7:75:80:f4:5f:fd:9f:5e:85:55:02:d2:
c2:c9:a5:07:98:51:9b:81:be:df:06:ce:82:cf:b7:
18:eb:ba:1d:24:74:59:be:45:ad:cb:5f:48:d8:c2:
7a:1c:86:cc:1e:09:97:0c:df:75:d0:1b:42:7d:a3:
89:40:e5:08:1e:46:cc:c3:d4:9d:fc:d6:d3:1c:c1:
41:5a:f4:6e:f5:76:e3:0e:aa:c6:c5:f2:68:09:c9:
41:67:6d:af:fe:fc:3c:ba:d0:83:c6:31:b8:c8:f9:
4b:72:f9:39:6d:e2:0b:7e:4c:ac:0f:ae:40:dd:4a:
84:82:a6:06:6b:a7:23:0e:e3:82:50:37:22:a0:8d:
8b:8d:79:af:ee:7d:17:41:46:15:4f:e3:1a:83:7b:
88:f0:53:4a:e6:39:7e:20:5e:71:c8:4d:9c:5f:79:
13:04:13:ae:06:91:87:c7:17:72:29:43:7a:1e:8e:
7b:8b:b8:b0:43:69:ff:c0:e0:46:88:c2:4d:34:b7:
e4:61:82:6c:ce:c5:49:b4:19:06:e3:b7:25:02:b3:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7D:49:83:EE:DE:A4:F8:F7:61:A6:4B:EB:08:8F:19:79:18:E4:7D
X509v3 Authority Key Identifier:
keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2e:49:36:8d:d3:cf:30:97:30:65:81:0c:37:30:21:39:ec:
a3:c8:a0:0e:25:ab:f8:23:95:8d:89:5e:92:a9:38:e2:a9:bf:
e9:e4:ee:b5:9d:e9:f5:8f:ff:97:db:7b:d4:88:7c:40:6c:35:
87:34:8d:1e:91:b0:b9:84:a9:5b:e2:af:00:6e:ab:cb:c7:c3:
57:4b:14:e9:3c:f2:75:0f:1c:87:23:2a:51:6a:73:6d:3c:c2:
8c:66:43:f6:55:81:0c:18:fc:73:26:f3:6b:84:f5:cb:7b:4d:
9c:be:9e:26:1b:cf:4d:fe:12:7b:64:71:0e:72:6f:94:7f:cd:
24:06:a0:e3:d7:85:bc:cb:94:aa:b5:4a:4a:21:79:7f:f4:be:
b7:35:d7:81:5b:9d:23:0a:58:6f:16:e2:59:4d:7b:ca:8b:a7:
84:29:d3:54:f4:13:67:22:12:59:17:fd:72:3e:74:93:d4:00:
50:3d:8a:66:b7:ca:dc:17:77:c4:c6:28:c3:d7:d4:b0:05:31:
b4:db:01:80:5d:b3:a7:26:13:76:ce:b4:22:a0:98:07:0b:c1:
31:c2:4f:f9:8b:fb:1c:71:79:ba:70:23:9b:7b:36:c5:18:8f:
3b:a3:9b:8e:cd:49:ea:93:ab:7f:a6:56:26:9b:9b:b2:0c:af:
88:49:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client