Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
File: gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft (raw, json)
Hash identifier: b/9iFnAMjRZr4XC5co39UmSxTxqQqqK+LTjUQ6+spog=
Subject key identifier: 1C:87:54:7B:38:1A:89:40:62:FB:5B:63:72:CA:69:FE:05:DE:5C:CB
Authority key identifier: 81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
Certificate issuer: /CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461
Certificate serial: 019A7113405BA9E7493CF317B04974A676AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
Manifest number: 36
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: Eb00jkzb6g4ZMpdOhid2d0kR1Qc.roa (hash: yYD1Pok0ZBwSUHbDh7+4RcuRq1KH/OotEFozRHKBwdQ=)
2: gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl (hash: k5Nq4ljmLRM2gTu4h7V5LGSvAAOwlKTFpy2Vn9SVMFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:40:5b:a9:e7:49:3c:f3:17:b0:49:74:a6:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=1c87547b381a894062fb5b6372ca69fe05de5ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:54:91:a1:57:ac:e7:38:dd:10:16:1d:e0:
0e:7f:e5:02:fd:f1:4b:a8:fc:9d:aa:10:41:66:83:
7f:9c:19:a4:a9:ff:0d:f7:f3:da:fe:db:35:12:4f:
25:50:60:55:46:11:c4:fd:46:cf:4c:ac:f7:8b:1b:
c1:0a:f1:11:21:96:b3:6c:ee:03:a8:8a:dd:37:0d:
72:03:c0:b3:a1:de:d2:69:c1:8c:7c:84:a8:b8:0a:
e4:9c:6d:a5:06:57:95:65:45:a4:f8:b2:11:dc:82:
7c:e3:29:03:64:5c:55:fb:82:96:d2:72:51:68:86:
3d:57:27:d1:7f:cc:df:84:2b:52:60:c8:dd:4c:07:
6e:5f:e9:37:60:7a:98:9f:0d:25:5e:c8:94:14:b8:
d7:36:45:f8:f2:99:c4:dd:b7:39:0c:f0:10:1a:8e:
4c:7f:fd:a2:ed:3c:5a:17:93:46:24:9d:10:50:a8:
b2:a2:c3:78:8c:15:24:5b:63:98:41:d1:83:25:c4:
4d:5f:81:9a:9a:ea:a5:3f:f6:da:73:b7:98:d6:13:
e0:3d:31:fb:88:4a:57:0d:05:e3:e8:3a:a1:85:1e:
4d:df:06:0a:be:62:ea:46:45:e2:aa:a6:02:50:67:
2e:cc:96:44:66:e0:58:8f:92:50:d9:7b:b0:19:00:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:54:7B:38:1A:89:40:62:FB:5B:63:72:CA:69:FE:05:DE:5C:CB
X509v3 Authority Key Identifier:
keyid:81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:04:a7:db:e9:4b:e9:8d:5e:8a:3e:bf:51:dd:d0:51:b9:79:
7b:b8:c5:9d:95:8f:13:5b:d3:c0:21:f4:1b:df:76:3b:b7:9d:
12:57:55:b8:1c:07:1f:e0:6c:99:b7:20:c7:5b:e8:7c:eb:ed:
ca:8e:d7:b1:a8:91:17:59:0d:a7:f6:f3:cc:ff:06:1e:e0:c0:
84:d0:eb:71:44:2f:11:f6:b4:77:44:cb:03:67:af:89:5a:bb:
a6:a7:d8:d7:98:64:3c:1b:04:6b:a9:90:9f:6c:60:93:f1:af:
6d:13:b0:ca:e4:0c:6d:8a:92:6e:7f:7b:e3:39:af:5b:65:14:
74:ef:df:f6:50:1a:de:05:89:cf:83:40:2f:c1:c5:54:75:63:
b8:fd:09:c1:02:9c:c6:1f:fd:3f:9b:75:af:54:87:d1:49:d4:
a0:97:a8:9f:14:72:d8:a0:2a:80:aa:92:7e:d0:e9:a6:de:38:
d3:a5:33:f6:8e:c1:ac:d9:64:57:d5:1b:5c:cd:9e:19:e7:8e:
8a:57:53:d7:96:b9:e0:b0:95:27:96:9e:42:05:5d:bc:2c:e9:
46:8f:4e:b6:e1:16:c9:e5:7f:f1:3e:a6:71:ba:5a:11:c6:8b:
c0:a5:55:8e:e5:89:f6:0d:4b:9b:9a:b3:54:36:f3:74:88:d0:
c8:3a:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client