Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: 4TT5sf9CoLJH/Kso7ojCx4AONHhO11RscCCANnVE9SQ=
Subject key identifier: E4:77:13:8F:C9:BA:8B:36:B5:4D:98:6F:D1:2B:C2:F8:AC:43:24:65
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 019A221B440FBD4C1A6AAD09F7D288FD85FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 102F
Signing time: Sun 26 Oct 2025 20:00:03 +0000
Manifest this update: Sun 26 Oct 2025 20:00:03 +0000
Manifest next update: Mon 27 Oct 2025 20:00:03 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: W1ZUiUDE378+LSAeLPf9wAP2fzCEcPtftPoQr4eqLQo=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:44:0f:bd:4c:1a:6a:ad:09:f7:d2:88:fd:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Oct 26 20:00:03 2025 GMT
Not After : Oct 27 20:00:03 2025 GMT
Subject: CN=e477138fc9ba8b36b54d986fd12bc2f8ac432465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:4a:9a:33:6b:ee:61:39:e6:e2:e2:ac:90:
fd:54:38:77:2b:4e:bf:2b:2b:85:57:0c:0b:c5:e4:
c9:2a:f5:de:d1:12:25:74:71:9f:ec:3c:4e:ca:e8:
23:1e:55:34:08:dc:da:7e:ba:b5:1f:e1:8d:e4:80:
35:a3:25:e3:3f:10:33:e2:dc:f4:f5:9e:e4:1e:d4:
f9:8a:b4:59:0a:d2:ec:c1:53:80:19:38:7d:89:de:
ad:00:54:b5:c8:39:6e:af:34:81:ba:3a:6d:66:64:
d6:6a:be:5b:90:da:56:b7:57:ed:27:c1:22:e0:d6:
44:3c:fd:e9:85:d1:43:56:9d:aa:e1:64:8f:e2:5b:
62:af:bb:73:fb:e8:cb:9b:b1:b4:27:95:d3:54:b6:
24:05:cf:a7:3d:29:20:f1:e3:2e:02:b1:a0:e1:a4:
47:0b:48:ac:f8:91:07:82:44:69:8d:73:48:75:8c:
4f:fd:85:a3:20:2c:98:04:c7:fd:42:f3:b8:84:97:
be:f5:1e:e4:1b:77:6b:85:ea:a8:ba:ef:76:1d:3c:
ac:a7:2e:a4:db:cb:6b:89:58:4b:cd:84:36:cd:a5:
2b:92:68:38:70:44:01:60:e5:3d:c3:91:4f:7e:fc:
1f:ba:39:2b:d9:b6:9a:30:1d:e2:17:ed:1f:64:a6:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:77:13:8F:C9:BA:8B:36:B5:4D:98:6F:D1:2B:C2:F8:AC:43:24:65
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ab:9c:60:57:b2:48:36:fe:c6:e1:0a:0a:2f:f0:fb:2e:0e:
1f:9b:0e:c4:d8:59:fe:38:9e:c6:c7:3f:82:ba:f3:aa:80:00:
e1:71:e5:6b:6f:36:e6:3c:5a:5d:e2:bb:f6:f1:73:6a:7c:50:
bf:53:1f:2b:cd:a7:20:b5:57:ed:c3:61:5d:78:52:54:f2:e1:
99:48:48:bf:f5:0f:a3:e8:7f:19:da:10:dc:92:68:67:ea:34:
e2:b3:8b:77:4b:29:d3:92:69:65:c2:90:e1:06:51:b9:4e:7e:
ae:6c:7f:be:5a:64:69:b0:44:32:82:68:a8:5f:fe:17:87:db:
6e:de:1e:d9:48:3d:8a:9d:d7:f2:23:a3:64:f1:ba:50:4b:7f:
cd:a1:80:45:38:d8:97:31:26:37:06:32:b5:32:93:ac:d4:ab:
2d:45:b7:b4:25:1d:15:17:78:1d:9f:71:34:00:3c:ed:21:96:
b2:6c:a2:13:65:59:f6:b5:52:2b:2a:2e:ae:af:9c:66:69:7a:
f0:e1:2d:8c:e1:0e:46:c3:64:2b:95:74:7d:b8:dd:c3:1a:53:
5f:a1:9b:ef:57:95:ca:26:e2:2f:7d:1a:59:5d:9a:e4:4a:1f:
a5:17:4b:c8:0b:1e:44:67:d9:67:2e:b2:0e:eb:aa:c1:b9:da:
14:13:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:53:31 2025 by rpki-client