
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File: gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier: iLLzMwGgjbnK11+hM1hKmUspr9sK9oWIxvr0WY5vWsA=
Subject key identifier: B4:5D:DF:9A:EF:72:C2:42:FA:CC:D9:4D:2A:0F:AD:FB:82:A3:99:B9
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer: /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial: 019A5789FCA6592AF7315325D2B70B43D770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number: 06BD
Signing time: Thu 06 Nov 2025 05:00:52 +0000
Manifest this update: Thu 06 Nov 2025 05:00:52 +0000
Manifest next update: Fri 07 Nov 2025 05:00:52 +0000
Files and hashes: 1: Ui37pni8yZO_R93Vyy6g6ty1CZs.roa (hash: KVFAYIQrtJyTceCsFbCiblO1P3leUs2Y5nLFzfChjkg=)
2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: pRFAQhoS8z/8ftEg44GvuB8FprAtuN0qvoPuguvHQEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:fc:a6:59:2a:f7:31:53:25:d2:b7:0b:43:d7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
Validity
Not Before: Nov 6 05:00:52 2025 GMT
Not After : Nov 7 05:00:52 2025 GMT
Subject: CN=b45ddf9aef72c242faccd94d2a0fadfb82a399b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:10:6e:59:b5:38:49:94:6c:ca:93:01:a8:
c1:e4:ea:fd:8b:b9:25:c0:fc:2a:23:7b:84:1c:02:
cc:4d:db:01:d7:43:c0:ac:5e:38:44:01:32:72:b2:
f7:5d:71:4c:d3:96:ee:c1:15:6e:50:d5:b2:ae:22:
63:b5:1e:ef:93:cc:30:f2:af:c9:04:be:58:36:ac:
4d:d9:8e:61:7e:15:c7:12:f0:ef:da:22:52:0b:db:
7f:a9:51:49:41:b3:b3:ec:8f:bc:1d:6d:1e:53:c6:
59:14:68:ed:77:49:30:d0:e0:fe:df:4a:93:6f:ca:
e0:eb:e8:f0:cd:1f:e1:54:ae:92:26:a5:68:8b:1c:
2a:8e:f9:4c:18:5f:1f:40:b2:02:5e:bc:eb:0d:9d:
5f:1e:59:66:6e:3d:bb:5f:66:56:07:f9:a3:8e:7d:
b8:ae:d0:b2:34:82:aa:d9:7d:32:23:fa:3d:e1:05:
11:3e:36:d8:3f:6f:94:4d:ce:5c:55:18:67:cc:c5:
c9:bc:21:bd:89:dd:78:78:77:80:bb:b3:c3:04:4f:
cc:d8:21:1f:15:4c:61:ec:23:4e:79:93:81:95:07:
24:9e:f0:b7:a4:49:ba:45:20:d8:7a:17:e4:b9:5b:
49:93:b1:8c:ae:37:0e:99:6a:dc:4a:7f:93:29:28:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5D:DF:9A:EF:72:C2:42:FA:CC:D9:4D:2A:0F:AD:FB:82:A3:99:B9
X509v3 Authority Key Identifier:
keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:46:02:55:be:69:82:9d:d6:e3:3c:97:e9:bc:2b:3c:f3:
bf:ee:91:bc:c6:3d:35:89:fb:d4:20:79:10:0d:78:6c:6d:af:
65:6a:cd:a1:83:9b:e3:5c:50:69:00:1e:d5:2a:12:f7:ff:8a:
74:a7:75:d6:38:87:09:4a:f3:09:aa:a5:b3:c2:d1:0e:bc:c2:
35:2a:64:c6:66:b7:af:fe:d2:c8:bb:c0:bb:13:c4:5a:42:e5:
f7:9e:c5:f0:e4:63:8f:18:21:0e:53:b6:05:ef:07:8c:46:44:
23:00:b7:db:f0:4a:b5:49:eb:f7:75:e5:8b:32:d0:b4:58:40:
09:7f:75:91:e6:e5:ad:c9:ae:7a:be:99:ec:1a:05:e3:ad:8b:
09:19:1b:47:28:51:f1:6c:e5:c1:94:47:52:a4:0a:ad:19:2f:
73:4f:7e:aa:60:a8:c4:c8:ec:50:89:16:58:d7:87:44:2c:b2:
6f:4a:9a:27:48:06:58:50:ee:fa:a9:6f:ec:5d:8a:28:84:67:
81:7d:db:6a:f5:f4:96:c7:b7:45:6c:43:af:0b:cc:a6:3b:a2:
1d:c1:18:e3:f5:1d:d4:48:69:50:4c:9d:48:13:df:1e:c4:58:
57:53:a1:ec:45:a2:a1:04:29:f0:7d:e5:39:0a:e5:0d:f6:b2:
a4:97:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:49:09 2025 by rpki-client