Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier: 28lgFzjW8gv9chgeazafJewOWHJEgKdQhm9+bjmfXlM=
Subject key identifier: F6:5F:90:8F:BF:1D:77:F5:FD:C8:80:EC:42:8C:BF:E6:92:C7:21:7A
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial: 019A71B91707ADEAEEA670D841085F67BFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number: 0A7F
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: XQYmt56xz7MfKNyIEdvPVwxgZt1Yzd0J+qG4wWL5OQ0=)
2: sQzNar_4JseiL9UNqmWgBSd_A68.roa (hash: 6EjRuBumMEH87fOFnzWurdMoQt/hXzQEoZOF6qbEThc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:17:07:ad:ea:ee:a6:70:d8:41:08:5f:67:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=f65f908fbf1d77f5fdc880ec428cbfe692c7217a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:cd:47:f0:5a:13:c2:3c:e6:8b:53:7b:9a:
fe:8b:2d:5f:98:be:94:8f:4b:7a:fa:f8:4b:15:59:
0e:a9:cb:b3:4a:37:24:28:f1:12:a4:59:c5:e1:aa:
45:e0:c4:8e:32:93:e2:56:ca:2c:cb:fd:07:90:36:
14:43:d3:42:26:eb:c3:f7:f6:5d:dc:07:65:13:03:
b4:05:e6:48:56:b3:da:08:2f:36:e4:af:8c:ae:e5:
91:5c:9b:ac:c6:e4:e2:bf:73:b0:62:85:ab:55:75:
3b:a6:53:75:21:25:35:44:19:8d:fe:14:ae:50:02:
cc:27:9a:8a:a2:15:3b:fe:4d:db:df:e2:93:ea:a2:
96:e0:e9:23:47:f0:51:22:c0:4e:33:1e:fa:12:ae:
55:7a:cf:33:23:16:90:be:77:69:b2:ac:a4:e3:8b:
82:1f:e4:9c:53:89:46:ec:27:07:79:37:09:fa:7d:
67:ae:69:74:f0:dc:9e:c3:8b:59:e3:c4:d9:d0:cc:
be:7b:b3:9e:c3:68:cd:7a:23:39:28:b6:17:0e:48:
c6:14:77:d3:ab:bf:46:b2:3c:95:0d:a0:a7:b7:4f:
c4:1c:20:6e:0b:7e:91:4a:ce:07:da:0a:60:b7:06:
0e:32:96:51:02:29:ae:e3:06:fa:8b:e0:1f:5b:8f:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:90:8F:BF:1D:77:F5:FD:C8:80:EC:42:8C:BF:E6:92:C7:21:7A
X509v3 Authority Key Identifier:
keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:01:2e:f2:39:6f:b3:3b:f7:9e:f4:7d:64:82:5e:78:8f:
93:06:e8:bb:5c:c3:d4:67:e7:2b:9b:cd:a3:ec:ab:b5:68:8e:
cc:48:4c:8c:c5:38:9e:fe:d3:6c:41:c1:1b:46:c3:95:44:b1:
9b:76:9b:31:df:2b:76:60:c8:e4:41:0c:81:39:0f:9e:36:56:
19:f7:16:ac:09:0f:65:62:c0:46:6f:17:93:0e:d3:b0:ab:10:
3b:ad:e2:8f:00:21:36:68:02:f8:55:09:0b:d2:12:18:42:af:
92:76:ff:88:ca:43:16:8f:57:72:b9:c9:24:e2:6e:28:cc:ee:
93:ad:6c:7a:e2:bd:61:8e:94:19:0f:5e:db:29:24:aa:ac:db:
52:83:54:4f:3a:02:c4:84:5b:d6:cb:8b:a7:68:c5:32:59:3f:
d0:2e:bb:21:db:17:82:f0:73:28:b2:61:60:c9:5b:21:1b:5b:
57:fd:cd:5e:55:3a:30:60:a3:1c:12:36:27:16:d4:2f:5a:8c:
3e:88:2f:8c:22:04:10:5e:e0:83:95:80:40:4d:4a:81:8a:10:
6f:9f:0e:6d:77:3f:64:97:82:ac:f6:b8:98:71:c1:22:ae:41:
c6:6c:c0:af:d3:42:f9:50:de:74:10:4e:55:e1:64:bc:50:83:
56:9a:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:20 2025 by rpki-client