Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: QExLxgzIep+pyoU+V2/8CoSFst27tUJHCkjt6usMmwI=
Subject key identifier: D4:13:AF:5B:33:18:C2:54:FF:EF:50:05:20:4E:AB:7F:B8:02:25:1C
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 019A71EEDE0D972F773FF454623A6B7D3697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (hash: Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: trHx6eRO/SWmnpl7291FIWRDLyHEPV/4NLAmHyTTOhY=)
3: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (hash: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:de:0d:97:2f:77:3f:f4:54:62:3a:6b:7d:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=d413af5b3318c254ffef5005204eab7fb802251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:4d:e9:70:f3:6c:0e:04:9e:b3:e5:f7:7b:
d4:0a:bb:95:6a:ac:fa:2e:f8:b3:2c:9d:34:cc:b4:
0a:e2:87:31:54:a2:b4:1d:19:ef:c8:69:36:aa:1c:
8e:64:8a:65:11:ea:f5:f1:6f:7b:92:3f:b5:48:a1:
8d:60:ad:d5:80:42:d9:1d:12:f4:c3:9f:a2:20:54:
b2:46:85:7f:83:18:85:72:c9:02:3c:11:1f:32:bf:
85:68:98:f1:03:20:29:c3:56:ce:26:4a:f1:15:bd:
6e:f7:25:c9:88:e5:15:37:72:6f:30:f1:89:77:37:
96:e9:69:b5:85:20:e1:72:0f:e2:95:2c:b5:7d:0d:
0f:b8:3c:f7:41:91:2b:c9:a4:ce:6d:e9:28:b4:0f:
b4:80:45:94:59:09:1c:ca:0a:38:5b:60:38:99:4b:
47:53:31:de:b3:00:47:65:af:c8:3b:b5:0b:f7:ba:
f3:e7:35:00:b7:a3:f2:ee:5d:f3:17:61:38:f4:c5:
4e:ef:78:8d:ff:e9:73:8e:b7:eb:be:9d:b3:83:f4:
0c:4e:1d:d3:6b:63:f1:c6:88:7b:8c:58:f6:ff:54:
43:11:b1:12:ef:f2:8f:4f:f2:9d:92:61:44:63:62:
c9:e7:cc:1f:87:7a:de:ed:ad:76:fb:0a:50:8f:de:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:AF:5B:33:18:C2:54:FF:EF:50:05:20:4E:AB:7F:B8:02:25:1C
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:25:f9:61:74:a8:84:14:8e:b0:ed:e9:30:aa:60:f9:f6:ae:
c5:53:f6:7f:b3:4c:2a:db:67:08:87:90:41:e1:d1:e0:d2:97:
6a:db:ee:31:5b:c0:b5:41:6e:5c:dd:af:1b:0d:7d:51:ea:2f:
15:85:60:39:90:08:8d:f7:c8:66:f2:db:80:a7:f4:ce:61:28:
00:7c:e0:e2:8d:36:b9:82:75:96:98:cb:74:cd:f0:9c:e0:de:
d9:5a:0c:a3:94:d3:15:ba:f2:0b:c4:4c:3d:df:54:a4:3a:c7:
a4:f7:91:63:97:82:e3:30:46:8b:69:18:25:b2:b3:0c:e1:31:
f6:e0:a2:2e:c9:db:4a:bc:0b:8e:1e:32:5b:e6:94:76:4d:d5:
61:aa:a0:3a:7f:ac:49:2e:6a:e9:58:22:52:09:d9:b0:cb:7a:
86:72:f6:fe:20:a9:5b:8e:28:34:a1:85:39:b4:ac:55:50:5c:
79:0a:56:1b:e5:07:ee:f9:3b:28:63:00:31:87:3d:66:14:9b:
55:5d:2a:fc:f8:35:64:49:71:64:3d:06:5e:fb:05:58:e2:88:
ff:71:31:86:24:bf:f1:2f:da:32:e3:da:3d:a7:8c:f9:22:a1:
c3:05:0a:b7:8b:7f:9b:3b:cf:ff:49:e5:25:92:c9:3c:b1:71:
e6:d5:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:23 2025 by rpki-client