Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: u/8uH9dnJIIDkXCbLs2wGK2rM4YvDJTk0dx4KJ3J+A8=
Subject key identifier: 85:FC:30:0B:ED:0C:2C:7D:12:41:14:CA:A7:2A:75:FB:DE:64:A8:2F
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 019921B0D1599CCD38C67C1E81F2B3CAA843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 0565
Signing time: Sun 07 Sep 2025 01:00:59 +0000
Manifest this update: Sun 07 Sep 2025 01:00:59 +0000
Manifest next update: Mon 08 Sep 2025 01:00:59 +0000
Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: cEhtlzpstDeATAuNhNIUAJAn+zeKifrSBOFW1NwHnr8=)
2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:d1:59:9c:cd:38:c6:7c:1e:81:f2:b3:ca:a8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Sep 7 01:00:59 2025 GMT
Not After : Sep 8 01:00:59 2025 GMT
Subject: CN=85fc300bed0c2c7d124114caa72a75fbde64a82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:00:5f:a8:db:cb:2a:d2:9c:82:49:4c:9e:
60:98:6a:ba:aa:b8:85:f8:ac:f1:09:4d:09:76:c0:
22:34:81:fa:ed:40:79:c4:2d:66:7d:8d:87:98:0b:
d8:16:39:94:6b:fa:d3:a4:32:8f:47:71:d9:74:03:
f3:47:49:d2:95:1d:0c:55:69:a6:be:a3:1e:e1:54:
1b:87:43:49:78:82:fe:f7:6c:72:34:fc:72:65:f1:
d6:f7:a8:3c:49:5e:49:fc:44:d0:2f:82:a8:7d:04:
a4:9b:bb:8d:6b:53:e7:b1:9d:c7:07:a4:a5:fa:2f:
27:46:35:59:ed:06:e3:12:4d:65:a4:f5:91:98:06:
e8:5c:0d:35:09:84:46:e3:19:f1:cb:2e:17:b4:11:
87:be:56:6b:04:65:76:97:a4:8e:87:b3:bc:51:37:
7e:70:31:3b:49:24:c2:02:83:af:e0:37:a1:79:fa:
b9:e7:86:ef:56:6b:e1:a1:f2:11:4e:49:9e:20:a8:
62:e1:88:93:5c:7d:2a:3b:36:fe:01:b8:8d:c9:fc:
8b:e0:9a:4f:9b:b2:91:75:7e:91:a3:cc:5d:df:02:
a6:39:e0:a0:e6:d0:01:c4:ba:0b:91:26:f3:62:22:
7d:aa:99:e7:65:6d:ba:f0:09:07:a3:e5:cf:2c:58:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FC:30:0B:ED:0C:2C:7D:12:41:14:CA:A7:2A:75:FB:DE:64:A8:2F
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:e6:e5:ea:c3:4d:c5:92:df:4f:0e:3c:3e:25:a5:00:21:
f4:3c:7d:68:83:8c:e4:db:54:33:ed:77:63:0c:90:75:0a:21:
e5:76:25:f1:93:b3:10:73:97:a4:b8:1a:e4:fb:65:09:02:fd:
98:85:a1:0f:66:54:f5:f1:90:25:2e:28:90:1d:78:04:55:d9:
47:30:54:1c:61:6a:a5:f5:35:7e:fd:d1:8f:41:6b:c3:7b:b5:
4c:bd:8f:6c:99:be:f2:42:a1:e3:c6:6c:ef:f3:06:78:f5:95:
01:18:f6:5c:57:ad:bc:36:a5:3b:12:ab:32:1a:b8:58:93:72:
95:0c:3e:d8:de:a2:74:2b:8c:71:56:1d:d3:32:1b:bc:02:be:
b1:d9:51:d3:7f:6c:45:a4:72:32:98:ef:da:9c:17:72:b1:ff:
b1:64:e1:d7:f6:d8:2a:57:a2:3f:da:6e:30:8c:20:a6:9d:92:
7c:b1:c5:8e:fa:25:d5:39:20:a9:8e:a3:2c:82:a2:23:68:87:
70:03:b8:8f:f3:a4:52:96:43:ec:27:28:2b:e0:03:04:2a:c1:
f1:5c:b9:c6:9a:c8:fe:95:2f:58:b5:8e:4b:ba:d0:43:36:83:
6c:7f:c3:4c:2e:e8:4e:99:c6:2c:c6:27:8e:30:cb:c1:ea:59:
90:6a:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:29 2025 by rpki-client