Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
File: ghhRSqrfoDhGuh9tOfH55DfGPEE.mft (raw, json)
Hash identifier: 3eteuyu4IaLKuCwQD2ViVbmv8JsNjGKt6Yl1eM6jwFU=
Subject key identifier: 9A:AB:77:48:52:4A:8F:37:9C:83:2D:3C:1A:34:AD:00:DA:D1:1C:95
Authority key identifier: 82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
Certificate issuer: /CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Certificate serial: 019A71B7E2B749CBD16CA446109D2537CE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: ghhRSqrfoDhGuh9tOfH55DfGPEE.crl (hash: 8BLUxh3gmrLTe9xwOb/TfbIz4Zyfe+7nRq2l4Y41iXU=)
2: i_8OV4hfwWGXwF9V2zc6PphYPKE.roa (hash: C7CIFHPDYn+G4rh2qeYAbZYKxEJSwAPGvW6pQ9glEwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e2:b7:49:cb:d1:6c:a4:46:10:9d:25:37:ce:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=9aab7748524a8f379c832d3c1a34ad00dad11c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:7c:e3:04:c8:8e:57:29:73:78:0f:66:3a:
24:a1:22:ed:e4:bc:da:3f:62:14:ba:97:57:59:b5:
b9:06:7c:9a:04:63:9f:2d:88:fa:e5:df:ab:dd:65:
bf:9a:3e:71:a7:f5:ca:3a:4a:2a:13:1a:a7:63:0a:
d1:29:1f:41:f3:14:9e:b2:d2:1b:e9:51:9c:36:78:
b8:90:89:98:29:4e:f5:b6:e6:36:aa:db:6e:d6:7a:
be:a7:25:65:ff:7e:64:3c:ca:f5:13:72:ea:d2:fe:
24:a8:12:42:23:e5:16:b9:d7:8c:f4:ad:60:7e:af:
df:f6:62:04:8c:78:94:8c:76:80:93:29:52:08:ef:
bc:9d:3f:d6:e7:8a:8d:c9:20:9b:fb:91:43:ec:4d:
60:c6:93:cf:fe:57:5d:84:71:60:1a:53:a3:09:fd:
e4:4e:df:f2:86:9a:db:16:18:a9:b5:3d:22:e4:c2:
d1:9b:bd:ac:87:c9:84:2b:9e:de:e9:65:56:60:6e:
17:4b:82:74:c7:c6:63:36:85:62:6f:2c:2d:0d:0d:
06:28:7a:37:0e:32:e3:90:7e:6b:d5:ca:e7:6b:1e:
36:37:83:6d:0c:34:89:2d:fe:ec:36:ae:45:5e:39:
40:a7:18:67:59:2e:9b:06:e4:fd:02:3b:1d:69:b4:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:77:48:52:4A:8F:37:9C:83:2D:3C:1A:34:AD:00:DA:D1:1C:95
X509v3 Authority Key Identifier:
keyid:82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:78:ea:e0:ab:41:b5:15:a8:78:93:2f:78:8b:28:de:d1:
63:aa:3d:96:8c:22:35:a6:aa:df:d4:28:17:e8:d1:67:a5:0b:
b1:1a:1f:12:9c:9a:aa:85:88:ee:72:7d:0a:f7:6d:49:9d:b8:
e4:99:e3:a6:18:a4:35:b2:71:74:ad:60:8b:47:31:b4:ac:ea:
74:2a:d1:27:de:68:8d:56:16:28:e3:03:3d:e3:18:42:86:b9:
b2:75:f6:e5:9e:c8:f0:78:73:d7:82:92:be:1b:fc:e5:bc:d7:
45:3f:74:1a:0b:b2:69:81:39:fa:69:36:a0:eb:db:29:4f:46:
a0:10:12:96:d7:98:34:56:c9:e3:57:9d:19:5b:9f:cc:06:65:
21:ad:90:bb:96:84:12:83:00:ac:4e:82:94:b3:68:c4:54:f8:
a2:5e:77:55:90:8a:9b:cc:40:6f:ba:11:46:2b:53:49:36:ce:
3c:22:34:8b:09:b8:f5:87:1f:46:10:eb:af:42:6c:d4:6f:5d:
c3:22:72:74:64:a1:09:c1:83:98:bc:d8:46:74:a7:57:ef:9d:
b9:16:49:c7:3e:54:5c:c3:00:25:c1:9b:3e:4b:10:4f:75:5b:
de:55:5e:01:99:80:db:2a:b1:33:8f:53:7b:69:39:64:a8:9d:
f7:ba:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client