Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: sRnFwLO1lOdokD1M8cGo92nIZtw8KQXKkW6F8/rHywM=
Subject key identifier: EF:01:B3:D0:D1:AA:57:12:BF:C1:0F:BA:65:32:74:58:49:85:9F:5E
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019A71EEE078861DD53111A85043CEE7DFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: 831SGoG2lpAPxpa1hrXcL8XZr1rP8ynvIjRinqQkBL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e0:78:86:1d:d5:31:11:a8:50:43:ce:e7:df:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=ef01b3d0d1aa5712bfc10fba6532745849859f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:2a:5b:bf:8e:1e:e7:95:00:97:44:a9:ec:
b4:40:f2:e4:99:ea:b9:c3:c7:21:43:cb:f4:23:7d:
bd:db:27:f3:3f:6b:30:20:2e:86:64:89:ef:9d:01:
7e:55:a6:57:5f:5a:a1:85:c6:fc:fa:bd:7f:50:97:
02:4f:7e:6a:34:f5:0a:77:6c:9d:46:83:ab:62:f1:
2c:53:ab:ab:84:c7:dc:5e:5e:d1:a9:ad:49:3b:ae:
4e:df:e5:49:76:0b:db:f4:cf:8c:e9:36:c9:f6:11:
54:98:c2:9a:f7:00:6f:8b:a1:61:06:37:56:51:3e:
9b:76:e4:51:f3:5b:bc:c5:59:26:1e:c8:c4:32:39:
eb:37:cc:4b:1a:b8:6a:c6:21:8f:d7:45:d3:e4:af:
8a:e5:28:e2:1f:4e:91:3b:ef:f6:22:8c:78:65:a0:
51:d5:64:bc:49:d0:4e:d4:19:07:d3:69:13:0d:0b:
9d:9c:6c:0a:db:ba:77:cc:72:c4:c8:2f:56:00:46:
e3:79:03:72:55:f4:84:51:9d:d6:3f:18:ca:c2:05:
c9:ef:a2:12:57:58:75:91:f7:ee:7f:ba:ae:ef:cb:
a2:cb:a8:f6:28:66:7e:3c:1d:58:e5:55:e6:f8:fe:
f4:87:22:50:cb:c9:8e:b0:6f:1f:ea:72:e9:af:2c:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:01:B3:D0:D1:AA:57:12:BF:C1:0F:BA:65:32:74:58:49:85:9F:5E
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:81:fa:3c:b5:ad:66:c1:98:62:94:8b:77:44:23:3c:37:b8:
00:f0:62:15:71:fc:3c:21:4b:83:29:fa:23:19:b4:76:2b:a6:
3d:19:0b:36:b9:05:39:6d:91:e4:de:f1:b3:c0:8f:f7:a5:b4:
d6:59:78:c6:a5:55:4f:eb:be:85:8e:68:b2:12:b9:ce:0d:5b:
b7:35:56:bb:56:a4:c4:f2:e9:67:46:30:f4:dd:69:59:5f:8f:
c4:78:2c:f4:4c:c9:9c:38:4a:82:0f:04:c8:e6:e0:5d:fa:f3:
de:cb:f8:8e:dd:4e:8c:9f:52:1f:d4:23:d7:e3:12:76:26:2c:
05:85:5a:3f:c0:55:ec:9e:d8:36:16:a4:33:b8:4b:76:ca:d5:
55:17:de:d5:2d:c5:06:2f:29:06:cd:66:3f:0b:9f:f8:c9:f6:
02:34:03:dd:fb:fa:7c:d2:c4:fa:28:2f:4a:11:ad:1a:27:c1:
31:83:8c:fb:3d:32:e8:0e:0e:3c:b6:44:48:bd:fc:8d:50:20:
e8:1c:71:c6:dd:03:87:fa:80:70:cd:f5:19:51:4f:ac:ee:1d:
4e:7d:30:e6:aa:94:c2:66:7a:f2:19:a1:4a:ad:8e:7d:a2:0f:
aa:c4:61:39:5e:9c:91:01:87:e3:47:98:93:0e:7b:6b:10:7e:
bb:6d:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:42 2025 by rpki-client