Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: F1r3KB3j7K+O7qDM2kwNkExYbws0jz1CPtz+2KHVGlY=
Subject key identifier: E7:9A:AF:B1:B6:A5:1F:FD:DD:25:10:58:A8:B7:91:74:F9:73:56:C2
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 019A428240542E0CE4CDDB3D4179F834F4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 10FE
Signing time: Sun 02 Nov 2025 03:00:23 +0000
Manifest this update: Sun 02 Nov 2025 03:00:23 +0000
Manifest next update: Mon 03 Nov 2025 03:00:23 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: 7GWZo13xIYjt/UXYNfu34q2sFmktjI8jh3TErG6JsMg=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:82:40:54:2e:0c:e4:cd:db:3d:41:79:f8:34:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Nov 2 03:00:23 2025 GMT
Not After : Nov 3 03:00:23 2025 GMT
Subject: CN=e79aafb1b6a51ffddd251058a8b79174f97356c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:c3:aa:05:47:d9:7d:e8:de:a6:7b:7b:d1:
af:82:65:4c:57:42:a6:4b:71:da:b2:53:20:da:56:
67:5c:96:72:ac:dd:3f:6c:8e:62:a2:bd:c2:c1:75:
ba:85:d1:57:a3:a9:a1:06:4d:d9:ed:2f:9c:66:f1:
1e:04:89:73:24:8a:07:fd:c0:6a:99:27:4b:ed:85:
44:53:6c:78:64:f4:d1:f7:dc:63:6a:17:49:a4:8c:
89:28:ef:3b:34:df:e8:fc:52:71:a9:37:ff:6f:44:
06:b9:d4:8e:5e:e0:85:13:e6:d3:c5:bb:4f:77:4f:
46:74:be:a6:4d:62:bd:3e:db:e7:d7:4b:37:b6:40:
5b:26:84:27:9a:99:c4:ba:8a:61:71:5a:44:f5:ed:
a0:76:bb:be:cd:66:ce:6e:2a:7f:15:ab:9b:d3:37:
07:ac:05:2c:c9:9c:34:41:03:66:db:ad:69:97:d2:
13:55:7d:ea:d6:9c:b0:97:e3:a8:46:f3:24:62:56:
2a:f1:07:f3:7b:87:e4:c6:00:78:91:05:6d:59:6c:
96:f9:0d:f7:19:2a:a6:46:40:8f:13:13:3c:71:b7:
98:7a:43:04:f1:fa:3d:73:88:13:5d:1c:5a:c7:d6:
f3:cc:11:c5:0f:f0:2a:b2:16:80:0b:31:6d:8a:c9:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:AF:B1:B6:A5:1F:FD:DD:25:10:58:A8:B7:91:74:F9:73:56:C2
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:49:08:4a:11:22:02:99:87:bb:2b:7f:0a:6b:f3:25:65:a6:
24:9c:c4:f6:3f:95:f2:8b:f1:a1:f1:dc:e6:76:5a:a8:7b:76:
1d:df:25:50:2e:59:6a:4e:56:52:8a:1c:47:1a:2a:1f:a8:7a:
49:7b:f4:b5:03:0d:12:33:e4:fc:b0:41:49:b2:6b:05:60:55:
27:b6:fe:4d:12:e1:38:35:d3:92:52:32:63:92:f3:d8:5f:7f:
47:e6:08:ea:e0:b0:0c:0b:de:99:9c:ca:84:b0:42:76:95:c3:
7e:ed:9d:6d:e6:af:8e:ab:30:6a:c1:44:7c:77:ca:e5:4f:b4:
ad:b5:c4:c5:ec:29:68:6e:fb:b0:00:95:f1:25:ae:12:dc:2e:
87:05:83:17:6c:3e:d6:87:91:aa:7b:f9:69:1f:ea:d4:47:9e:
cd:7b:cf:a9:37:c1:89:75:af:7c:63:fd:e8:43:1b:c8:c3:ab:
16:99:f6:e8:5b:38:db:ce:ee:d7:47:7b:c4:51:0d:06:97:66:
3c:0a:7b:36:05:63:59:2a:92:81:d5:ee:c8:a3:b5:fd:6a:f9:
df:3f:29:15:5f:a8:19:f2:c2:27:ee:2f:07:74:a9:52:5f:7d:
82:50:6d:b0:08:db:df:c4:e3:ac:52:ed:44:75:0e:f9:30:c9:
0d:73:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 06:18:12 2025 by rpki-client