Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: MtHkMAz/2RJOTdZ1J/gzI83T88tyAmBb1/8sIRj9CmQ=
Subject key identifier: E6:1E:79:E0:DB:D4:1A:CF:73:71:A7:57:E4:F1:FE:A5:D9:48:E8:D3
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019A7293EB500AC75DFFD0E456A0E94B502C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 1733
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: nOys4YwYu3N11qOSUSmIN4tWzlCgpBq4Rl/ynnsomo0=)
2: bDbEU-n8q6DljyAoCb2HG5IpwAM.roa (hash: eRAv8rRBi2xmtRMeoh59gG1sQ1a+pnNx2m0jnwKDhWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:eb:50:0a:c7:5d:ff:d0:e4:56:a0:e9:4b:50:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=e61e79e0dbd41acf7371a757e4f1fea5d948e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:a5:61:0c:c0:b1:2d:69:f1:b7:52:62:e2:
7a:7c:bb:06:7a:a3:93:8f:f0:59:9d:e1:dd:44:27:
8f:bc:2c:f7:7b:85:59:7d:bf:d0:fe:b8:eb:e2:b9:
50:54:23:5f:35:20:bd:df:e8:75:fb:ab:a7:fd:40:
f0:f3:d5:73:17:59:55:83:35:6b:3b:90:4b:42:72:
6a:c3:7b:80:fe:ca:be:d6:4f:d4:42:d4:1b:ec:87:
d9:f9:39:27:8a:ef:31:6d:be:62:8c:56:dc:0a:b9:
30:fe:a0:76:bc:46:17:e0:79:b6:49:61:50:b8:e0:
82:6f:37:75:7f:d4:1b:c1:5b:02:5c:42:a9:7b:bf:
d3:0b:c8:45:c3:6a:62:50:15:34:b1:c2:a9:b1:e0:
02:e7:eb:5c:03:3c:07:82:c8:21:f5:3c:33:d8:43:
eb:71:8d:12:79:f6:ca:70:78:13:8b:8b:9d:70:b8:
50:c0:64:03:4e:c7:de:d5:f0:a7:ae:96:71:2b:bb:
e1:9d:bd:89:bf:7e:c0:39:d0:f1:35:7d:a5:2d:0c:
8b:2b:af:fd:a9:3e:8f:8b:7a:b7:f5:c4:1f:be:ef:
e5:b4:db:c7:ea:66:d7:b3:e3:8d:ea:c8:d1:88:0a:
d2:51:a2:a7:97:98:61:ff:4c:d2:e8:84:3e:8e:c5:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1E:79:E0:DB:D4:1A:CF:73:71:A7:57:E4:F1:FE:A5:D9:48:E8:D3
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:15:18:a8:3e:92:e0:ba:1b:4a:fc:b8:33:a8:75:7d:67:
3d:db:0b:0b:69:be:8f:76:09:46:70:73:1c:aa:f5:53:a4:2a:
a6:ee:f4:5e:33:b1:61:d7:5f:d0:5d:8e:d8:12:0b:09:1b:a1:
dd:8b:bd:ac:cb:ad:f8:98:91:df:bc:3e:fd:98:4b:6b:c1:5f:
00:dc:b5:3d:07:a7:69:f1:d3:16:6c:dc:49:35:84:0c:26:18:
7b:2e:9e:e4:77:a4:d5:e5:2d:3d:5b:ed:a0:77:50:15:7d:16:
a2:35:bb:2e:50:80:2f:b3:76:35:78:70:f3:ef:fb:0a:0a:d7:
7f:86:f0:17:5b:01:64:b5:d5:73:f6:fc:e4:15:25:c4:e5:7b:
ca:09:17:d0:75:69:28:fe:b4:13:d0:e4:1a:69:38:94:36:4a:
5d:67:e1:cf:71:75:49:2e:f8:36:fa:0d:b6:bb:e1:e8:72:68:
28:a0:91:0a:2d:ee:8d:1e:69:1a:93:4f:4f:38:49:c6:3d:48:
23:6d:52:13:16:29:ef:fd:05:ad:e5:ae:0c:84:24:f5:a0:25:
1e:50:6b:3e:16:6e:d9:90:9d:4f:77:77:06:7c:46:b6:c2:ee:
4f:ab:68:c3:be:c8:77:d8:a6:d5:da:3f:46:7f:d5:46:2d:4c:
d8:22:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:20 2025 by rpki-client