Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: uhubhrltncOnmg/FEEoxhthyyZIyyZyK/EhRoMytO2I=
Subject key identifier: 43:70:2A:BD:E1:59:F8:42:2B:0C:E6:71:58:39:BA:BC:10:F8:97:12
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019A1AD12952CE350DB25680E9DE28C74F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1684
Signing time: Sat 25 Oct 2025 10:01:46 +0000
Manifest this update: Sat 25 Oct 2025 10:01:46 +0000
Manifest next update: Sun 26 Oct 2025 10:01:46 +0000
Files and hashes: 1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: n08OjgsguZNln0loZV48sHSTml7WOhp6CLhvGuFI2sQ=)
2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:29:52:ce:35:0d:b2:56:80:e9:de:28:c7:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Oct 25 10:01:46 2025 GMT
Not After : Oct 26 10:01:46 2025 GMT
Subject: CN=43702abde159f8422b0ce6715839babc10f89712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:16:2a:df:0c:e3:2d:2b:50:6e:75:25:34:
9f:6a:41:70:25:af:e7:a8:dc:15:33:8e:25:d8:b2:
f2:24:2e:da:87:f2:63:76:48:2d:79:c5:ee:dc:63:
32:aa:cf:22:eb:08:60:f1:05:7f:8c:b7:e4:55:7d:
d4:43:b3:2b:66:7d:7f:b9:60:52:6c:90:77:0e:b5:
3c:6e:4a:c6:f2:a3:ce:36:06:45:f3:ff:ce:b8:41:
4b:13:bc:19:ed:f8:6d:b9:55:4d:33:bd:a0:5f:aa:
54:00:a3:6e:a4:dc:ea:a0:62:6a:34:61:12:5d:88:
4a:a4:1b:21:81:a8:da:35:42:66:83:ef:eb:b1:1a:
2e:16:7c:7c:e6:aa:57:a0:f8:22:05:81:a8:5d:82:
8e:ae:5f:b4:8a:48:0b:e5:7b:41:dd:1b:e4:f6:78:
74:4a:db:7f:6b:ba:9d:c8:25:8d:ab:b7:81:0e:e8:
10:8d:8e:27:f8:3e:c6:8e:33:46:db:aa:69:a5:1c:
f3:37:b1:dd:a4:ac:aa:e7:aa:1d:78:a3:4c:5b:bf:
14:9b:57:89:3a:e0:55:45:0a:a3:16:ff:95:30:13:
c5:bc:de:46:11:27:1a:c1:dc:fb:c5:78:f9:f8:7e:
b3:db:b7:07:af:dc:c7:b6:41:cd:3a:4f:bb:07:93:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:2A:BD:E1:59:F8:42:2B:0C:E6:71:58:39:BA:BC:10:F8:97:12
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:19:34:91:13:71:a9:c9:31:10:97:45:30:55:ae:0f:e1:01:
48:9a:81:41:16:4a:db:04:a3:be:04:0b:2e:5b:ac:8d:c3:86:
4d:84:16:fc:94:26:47:9f:ef:b0:d3:77:8e:8a:d0:6f:e5:ec:
48:0a:b2:75:d7:46:a8:fc:8c:f0:21:47:d4:92:d1:3f:c9:76:
7b:32:04:d4:09:76:dc:32:4e:2d:8f:97:f0:c9:ef:49:a6:7f:
e7:8b:a6:82:47:d2:b4:e2:b5:18:4c:87:83:b2:33:20:39:0e:
f6:6a:b3:69:46:7f:eb:df:b8:49:5e:e2:87:ab:6d:c6:16:69:
9c:94:a2:0b:19:32:af:f7:df:c8:fb:7b:6f:06:5a:a3:6d:c1:
8c:b7:cc:d3:22:88:d7:a0:4c:ef:f1:84:7d:09:3c:01:54:a7:
77:2e:09:e1:9a:c2:52:dc:0c:7e:f8:19:57:ad:d5:80:37:a0:
8f:98:33:ef:2c:f2:6c:61:65:80:ff:e7:8b:cc:6f:7b:ff:2a:
b1:83:a9:88:3b:23:93:48:9e:85:f7:19:a9:b4:31:1e:ce:89:
02:e6:bd:d2:d5:e8:7e:12:1d:db:8f:c8:d2:d3:a1:d7:73:27:
f7:c2:56:b2:77:77:a4:64:e7:18:bc:17:60:29:06:a4:7f:a5:
d6:1c:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:17 2025 by rpki-client