Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
File: GXCiYyB54Yue9nKBkqOTaqvisiQ.mft (raw, json)
Hash identifier: BI491O0HMgJdWYeDXfm01cEbTVWWr1tvxLDD5P5KaCw=
Subject key identifier: 3B:44:0A:7E:38:EC:9D:9E:BB:06:64:C8:93:C0:8C:14:9F:A1:FC:AF
Authority key identifier: 19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24
Certificate issuer: /CN=1970a2632079e18b9ef6728192a3936aabe2b224
Certificate serial: 019A7112F886F074ACA68809AC5BE6BF78F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
Manifest number: 87
Signing time: Tue 11 Nov 2025 04:00:59 +0000
Manifest this update: Tue 11 Nov 2025 04:00:59 +0000
Manifest next update: Wed 12 Nov 2025 04:00:59 +0000
Files and hashes: 1: GXCiYyB54Yue9nKBkqOTaqvisiQ.crl (hash: 3Gtrod99jDrh/UfKFBtErw3kBxPeH81nxIo2W0Bz2YY=)
2: JeJQO9s80gfCiYe1r0cc8EhoCxk.roa (hash: fgQotiiZ/kaXHnFm2dA5yCVTFpxgcGtAQyQ5Cm5SG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f8:86:f0:74:ac:a6:88:09:ac:5b:e6:bf:78:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1970a2632079e18b9ef6728192a3936aabe2b224
Validity
Not Before: Nov 11 04:00:59 2025 GMT
Not After : Nov 12 04:00:59 2025 GMT
Subject: CN=3b440a7e38ec9d9ebb0664c893c08c149fa1fcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:94:70:bb:01:d7:80:8a:71:e6:b7:13:83:
5a:6f:73:8c:4d:45:6f:40:e2:0e:61:fd:b2:57:0a:
c1:0d:c2:0d:ae:e7:e3:c6:e5:55:64:eb:b5:f1:5d:
4f:06:70:c0:b0:a7:be:9f:db:cd:30:14:b6:89:84:
59:a0:a5:68:85:75:32:c5:d5:e7:5d:a5:ee:a4:c5:
95:f7:f1:9f:0d:53:23:2e:4b:75:41:26:ac:b7:0d:
39:ff:18:2f:b0:e2:58:b0:24:a8:3a:e5:aa:49:5f:
96:ea:78:6f:e6:34:43:41:be:1d:15:9b:65:90:9f:
3c:92:1d:f8:5f:07:54:cb:da:1a:13:72:83:6f:1a:
9e:c0:ef:2b:31:7f:3b:04:bf:0c:36:dc:2c:b5:10:
15:2b:8e:8a:cd:61:0e:32:fe:6b:fa:be:ec:4a:ad:
87:15:56:f2:5f:fe:9f:a6:59:de:e7:8e:75:bd:e8:
a1:b4:c6:f2:29:8f:51:cd:26:4d:af:cb:7d:15:aa:
4b:8c:9d:9c:2a:fe:e1:dd:ee:c5:2d:3e:16:66:d4:
4c:4f:08:34:5f:2c:18:e6:03:df:8b:e7:00:cd:16:
9d:c2:c9:08:81:f4:fb:98:ac:31:5c:e5:b9:30:01:
ab:73:11:b5:08:7d:f5:07:27:99:97:89:10:fe:b3:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:44:0A:7E:38:EC:9D:9E:BB:06:64:C8:93:C0:8C:14:9F:A1:FC:AF
X509v3 Authority Key Identifier:
keyid:19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:9f:5e:1d:f0:0c:f0:d0:70:6f:21:7e:66:5b:58:ab:6e:
36:49:8c:ae:ef:64:80:50:c5:8b:b2:9c:75:6d:3b:58:ee:8d:
16:56:82:bb:15:c8:7e:18:a7:25:90:28:70:5f:51:17:29:77:
45:c5:f4:08:42:86:4d:23:2c:86:61:bc:81:dd:62:67:a0:2d:
17:1e:7f:0e:91:83:21:e9:db:fb:e9:b9:95:36:55:8d:0d:66:
e8:2a:3a:9b:a5:96:ca:7e:c3:63:bc:9d:84:d1:27:78:52:d7:
01:63:f9:15:32:dd:a0:5e:aa:0e:10:ab:0d:0a:c7:79:45:6e:
1b:de:5e:5d:a9:bb:65:80:a3:ff:48:76:aa:aa:ef:09:b1:1d:
59:9c:68:78:0c:46:e1:5e:a4:9c:8c:5b:8d:b8:c6:26:3a:57:
e9:b2:9a:9f:50:d3:92:a6:55:d2:73:0e:36:b9:0c:dc:32:f1:
8c:43:86:28:69:3f:ee:5e:7e:69:f8:04:86:fc:0f:a3:c3:15:
69:28:f5:6f:6e:a2:90:75:a8:76:38:08:f1:0f:33:b6:e8:d7:
45:90:be:b8:de:f8:58:38:db:3c:a7:70:30:96:d8:7b:dd:c5:
91:e2:6f:da:3c:f2:8a:3c:aa:28:de:52:7a:59:40:61:4e:38:
1f:59:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:45 2025 by rpki-client