Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: ilJv7HDXmGspvMRNevLJxNSd0oEu61Nx+AJSR97fR8Q=
Subject key identifier: 45:B8:FB:F9:45:4B:A2:B2:6F:85:CC:74:BE:49:3A:90:06:F7:38:74
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019A71B85F20B3258B58B309602834CC0F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: i8syrgY/6j4deG0wStpKzuLjkapJHf3/Ad109/tWV1E=)
2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5f:20:b3:25:8b:58:b3:09:60:28:34:cc:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=45b8fbf9454ba2b26f85cc74be493a9006f73874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:88:de:15:47:ac:7b:8a:38:bd:e5:eb:a1:
bb:f6:b9:36:71:e4:ad:69:b8:8b:1f:5f:d4:a1:77:
29:d2:4d:0f:81:7b:d2:25:73:00:cb:6d:a4:50:2d:
74:ce:bb:c2:8f:bc:f2:49:cc:e1:1d:fd:1e:42:43:
04:93:53:1c:42:4f:89:28:07:04:4c:e3:a0:bc:29:
29:1e:af:0e:1f:ad:d2:0b:92:6c:6a:da:82:41:1d:
5b:c8:87:c5:fa:68:e1:0f:54:9a:95:a3:ba:44:41:
f0:ff:3e:4c:60:84:a1:d5:53:02:d4:74:9d:25:64:
92:34:d6:37:60:85:d6:f6:a5:8f:c2:ab:1d:91:f6:
df:b1:05:c1:e0:27:17:e0:0e:ae:0d:66:b7:87:ee:
77:cd:04:72:3f:db:ce:61:6a:49:cc:36:fc:4f:4c:
a3:39:d1:8e:91:fb:c4:43:4f:ac:dd:4e:65:b7:06:
bb:5b:02:ad:75:6d:ac:58:62:e7:94:bc:e4:5f:ca:
8e:7c:84:d8:36:03:b5:43:9d:69:c0:7e:6f:fe:dc:
e1:6b:c6:c6:25:c4:13:86:fe:38:0d:8d:fb:2f:ae:
3b:54:04:54:67:6f:ae:49:84:29:99:71:b3:61:36:
97:52:11:aa:65:55:d4:f5:cd:94:f2:27:1a:c1:c5:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B8:FB:F9:45:4B:A2:B2:6F:85:CC:74:BE:49:3A:90:06:F7:38:74
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8c:cd:a6:82:96:3e:01:5d:65:bc:10:73:fb:82:75:8b:7a:
4d:da:46:2d:67:b3:d7:24:fa:91:03:a1:75:cb:7f:72:d2:28:
2a:e3:b7:0f:eb:da:22:b0:22:e8:58:64:5d:88:e3:ae:5b:30:
21:e0:fb:5c:0f:0f:26:dc:0e:e7:97:09:74:05:33:e4:e0:f2:
65:55:c3:be:e9:0a:33:d0:5f:c3:21:1a:b9:4d:c8:da:70:2b:
53:bd:6d:16:4c:8c:86:e8:c1:1e:37:20:ba:f6:fb:b6:0c:f4:
13:56:72:ab:55:fa:83:b3:09:19:17:6c:a9:f2:45:59:96:4f:
5d:ff:8e:07:33:a9:79:08:8b:0c:65:b2:77:ee:67:64:31:7d:
83:bf:ac:b1:7d:3c:64:b8:09:72:ae:2d:ea:d7:86:28:58:c6:
08:36:aa:6e:89:46:bf:5f:d3:1f:ba:36:a4:c3:67:71:3d:99:
f6:e0:63:95:fe:5e:a9:7b:06:82:c8:cd:60:df:88:17:bf:96:
8e:f5:16:87:a3:34:dc:93:26:71:1a:d8:dd:24:e8:03:d4:5f:
8d:f2:e9:32:55:c3:81:be:03:33:bc:6f:93:3e:fd:2b:bf:cf:
f4:3a:5a:b5:3f:1e:1d:8e:d4:80:d3:af:1b:9d:43:df:a5:be:
84:b9:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:02 2025 by rpki-client