Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: Wh0vR1eUo/Uq2WLg8QO96BaLSH1Ozd8KXRt2EuU4yjI=
Subject key identifier: D8:3C:29:17:AD:1A:E5:CD:E7:67:BD:F8:DD:94:93:D5:45:49:A6:E3
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019A72CAC220DAA44DEDCD8E9510B153B636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 0F79
Signing time: Tue 11 Nov 2025 12:01:21 +0000
Manifest this update: Tue 11 Nov 2025 12:01:21 +0000
Manifest next update: Wed 12 Nov 2025 12:01:21 +0000
Files and hashes: 1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: WyXCeHGa7H566Iv/ZWYLUXG3kFvcO8L2jKwj9qbv8HM=)
2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=)
3: O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa (hash: zkyPGN71itUBurBDFCf1AgW9vMBDOWpYZJYvI+GyxrU=)
4: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=)
5: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:c2:20:da:a4:4d:ed:cd:8e:95:10:b1:53:b6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Nov 11 12:01:21 2025 GMT
Not After : Nov 12 12:01:21 2025 GMT
Subject: CN=d83c2917ad1ae5cde767bdf8dd9493d54549a6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:8c:4e:d9:70:a2:73:a6:9a:1d:cf:86:4a:
f6:29:10:0b:ac:50:b9:a5:78:2c:e3:ca:45:58:c7:
fc:6e:12:26:9b:fc:e8:89:9c:fc:0c:0a:e8:d4:ba:
d8:be:03:10:66:24:44:30:ef:0a:14:74:40:55:47:
4b:5a:6d:a1:0f:69:b9:fc:b8:6c:91:57:07:af:ec:
2f:1d:ce:f4:3c:49:3f:18:77:44:0a:41:77:f7:ef:
26:55:be:d8:a3:b8:bf:0d:17:c6:06:dd:25:8b:d4:
0a:38:a0:a0:8d:e5:55:c4:51:1a:da:0c:10:fe:39:
fc:07:86:93:fa:d4:86:8d:8a:30:cf:39:8b:ba:f9:
b5:52:ff:05:9d:49:28:47:68:c8:84:3e:83:13:23:
65:43:cc:77:31:a2:1f:9e:0b:07:75:2d:7a:69:f3:
fb:a1:b9:60:cb:27:4b:c2:a0:8e:d4:c9:19:14:21:
69:49:47:ae:2f:3e:5b:21:a7:53:da:64:ce:d7:8f:
98:07:e9:7c:ba:14:f6:15:25:b6:e7:83:a7:6b:ad:
b9:e1:ea:07:26:59:9f:b2:89:66:8f:e2:18:45:31:
d8:0e:65:c1:3e:65:31:b9:ef:be:c4:dd:51:32:c3:
7c:d6:bd:85:e4:3d:26:60:69:1f:91:ac:1e:c9:50:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:29:17:AD:1A:E5:CD:E7:67:BD:F8:DD:94:93:D5:45:49:A6:E3
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4c:ce:84:9f:6d:0c:ca:06:3d:6d:24:9d:26:c0:ad:a4:4a:
8d:09:9f:ac:35:a0:4b:4e:cb:01:a0:97:8f:9d:7e:68:13:59:
20:9c:00:20:a6:6c:84:91:e4:99:8d:7a:ee:41:ee:24:04:78:
24:34:5b:0f:41:ef:ea:37:ad:9c:6f:b4:3b:4e:72:a3:dc:d1:
31:52:7a:ad:1c:a5:86:04:8e:db:2d:18:54:8e:ad:3b:78:d0:
63:4a:5d:d6:98:32:bf:90:ac:e9:01:83:f3:51:92:1a:6c:5f:
c9:83:64:4a:4e:2d:cf:79:b3:9b:ea:df:08:e9:69:9e:ff:32:
c9:33:90:61:14:2e:ba:cd:45:6e:bf:97:25:84:e5:bd:c1:c4:
e6:e9:b1:da:e7:12:60:46:cb:09:98:41:f6:f5:21:e8:b2:22:
86:25:43:5a:77:4e:d2:17:b1:cd:a0:06:c3:9f:f9:51:89:9b:
38:17:b2:26:ea:9f:bc:a2:fd:49:e6:54:33:b4:3d:f9:fa:e0:
38:0a:7e:c8:94:13:e8:1b:35:bf:d1:35:47:cc:d8:75:d1:5a:
ad:3d:95:dc:cc:81:24:40:68:4c:de:1e:ac:d9:3c:02:9f:80:
6a:40:0b:aa:1a:0c:8f:40:66:97:d6:18:95:68:0f:47:78:47:
f2:d2:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:06 2025 by rpki-client