Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: /eT+ERWdSSi4QD1xntUhuHqr99GHvpMSvR66j6QsfFE=
Subject key identifier: C5:38:99:0A:8C:EC:45:6B:FC:EF:B3:35:40:0E:83:87:27:1D:53:CF
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 019A2967759239E122CFC00FF20014A370DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 06:00:37 +0000
Manifest this update: Tue 28 Oct 2025 06:00:37 +0000
Manifest next update: Wed 29 Oct 2025 06:00:37 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: ynYN4WmCvmyCKuiuhnz9aADufGshvV5q86oHjtvRpog=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:75:92:39:e1:22:cf:c0:0f:f2:00:14:a3:70:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Oct 28 06:00:37 2025 GMT
Not After : Oct 29 06:00:37 2025 GMT
Subject: CN=c538990a8cec456bfcefb335400e8387271d53cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:a5:4d:12:34:52:13:da:62:51:37:2b:5e:
42:a9:6c:ad:95:c8:76:8c:7e:10:72:1b:9b:cc:27:
9a:08:7f:89:a0:4f:58:55:33:70:43:04:a1:29:e4:
66:ae:2c:2c:5a:b6:41:51:ae:64:22:e0:07:8d:02:
37:18:36:75:2f:72:d3:80:ab:ae:b0:6d:7d:7f:ac:
92:0c:f5:27:7e:e8:6b:d7:0d:fc:38:97:f0:75:46:
41:21:6c:3b:ea:22:c6:d2:ad:b1:a7:5f:e1:bd:b6:
c4:68:05:67:ec:66:33:9a:bf:77:10:0f:12:a3:4d:
38:24:12:76:c1:b6:28:67:a8:56:45:76:14:73:3a:
32:b1:c9:1d:12:7b:27:4a:32:e0:28:f1:2b:0d:d6:
d3:02:2b:0f:e4:0e:1a:31:16:31:53:ee:4f:c5:75:
3d:96:08:6f:b3:20:6e:63:61:47:98:ba:d5:84:1a:
c8:ce:60:9a:c2:1b:cc:98:2b:e7:c4:68:4b:e2:bb:
52:13:b2:0d:da:7a:47:5a:cd:2a:5e:75:66:98:74:
10:08:a0:88:c9:60:35:a3:dd:7a:f5:fd:64:73:9d:
7c:95:69:de:6a:4b:91:56:de:85:c6:ed:8a:d1:d1:
3d:f6:c0:54:c4:10:d3:64:53:45:34:8a:68:f3:f7:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:38:99:0A:8C:EC:45:6B:FC:EF:B3:35:40:0E:83:87:27:1D:53:CF
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d6:c6:c9:cd:f2:b4:bb:5b:8d:21:9a:4c:4b:72:72:16:3a:
3a:67:e9:df:e9:cb:26:fc:dc:8d:45:fb:bf:1d:cd:1b:da:bf:
78:96:4b:5b:c7:f2:f7:6b:3e:d1:1b:14:08:10:4c:3d:c3:0c:
8e:7e:26:b7:4d:02:94:33:50:36:71:95:f6:4f:41:9e:ee:54:
2b:5b:a3:16:01:e9:fb:fd:ff:d9:84:f0:a3:d0:03:e5:a3:8b:
eb:7c:52:71:1d:56:06:72:ad:6e:49:c2:32:38:a3:b5:fc:46:
cf:df:f5:85:03:da:04:79:78:4c:a0:e9:49:9a:1e:b2:3e:cd:
6c:7f:9f:91:ae:14:de:3a:c7:9e:7e:59:22:a5:bb:9b:41:78:
00:32:05:7c:23:f8:51:70:84:99:97:f4:49:d1:ac:17:7e:7e:
0a:f8:f6:c4:e3:41:46:54:77:56:32:a4:69:db:1c:c0:7b:5d:
d2:11:d9:23:bf:d4:24:e1:f7:ff:1e:36:c8:f9:43:d6:04:af:
16:de:40:79:24:f3:b5:bd:e2:29:2e:6a:5e:a7:5a:61:ac:49:
53:f8:fa:20:c9:3a:e4:9e:f3:a0:14:0e:2f:8a:cf:f5:ee:0a:
46:99:93:70:7c:06:28:65:8b:c8:8b:ea:0e:d2:7b:c1:81:99:
7a:a0:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:10:14 2025 by rpki-client