Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier: Frv7jQ1LordXMrdR14eCGNisq8h/61LkxOJziXh1pLQ=
Subject key identifier: 4A:65:04:0D:4B:A2:32:FA:E5:99:22:28:D0:49:61:63:D6:B0:B3:F9
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 019A0B5E59D6BF59FA00DF66301FA75A8A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number: 0EA6
Signing time: Wed 22 Oct 2025 10:02:03 +0000
Manifest this update: Wed 22 Oct 2025 10:02:03 +0000
Manifest next update: Thu 23 Oct 2025 10:02:03 +0000
Files and hashes: 1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=)
2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=)
3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=)
4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: bDHDQCOjwnlEISutA9hq2Kr5vrSQsvOPkTs+xSOmBfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:59:d6:bf:59:fa:00:df:66:30:1f:a7:5a:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Oct 22 10:02:03 2025 GMT
Not After : Oct 23 10:02:03 2025 GMT
Subject: CN=4a65040d4ba232fae5992228d0496163d6b0b3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:57:b3:3c:55:19:81:bc:73:76:c1:53:d5:
23:f3:53:2d:ec:d9:6c:4d:b5:16:99:c3:24:49:46:
d0:7b:95:a5:98:16:24:6c:49:d1:d4:51:39:73:c4:
19:ca:cd:22:5f:e9:bf:8c:b8:0a:52:6e:5b:77:bd:
09:7e:95:d6:8d:f1:85:64:c0:4c:97:ae:77:a5:0c:
66:d9:96:e8:d2:d5:b0:e7:7e:71:6d:24:ba:ff:7a:
61:c0:92:c9:b9:3a:24:2f:d6:64:cc:c9:37:a8:20:
ef:e4:92:a2:1f:56:3c:b3:9c:10:dc:6a:48:a4:14:
e9:2c:89:7c:e1:aa:a2:4b:b4:26:5c:9b:e6:c9:2b:
04:2d:ef:36:f6:0a:c9:af:9b:53:8c:15:eb:c9:27:
47:ad:3c:f5:80:d1:ca:a7:76:42:1d:82:b7:e2:94:
40:4f:35:e3:1a:44:08:f2:83:be:2f:d4:57:c5:52:
ba:3f:0f:23:dc:16:a0:9a:3d:e9:3b:1e:d0:a4:f7:
24:e1:51:eb:82:6c:be:50:22:be:dd:ac:fe:cc:61:
41:bf:58:1f:b4:48:84:bc:a8:3c:25:69:2e:e7:69:
08:14:ec:f0:b8:56:a9:46:cc:65:ab:d3:a5:80:12:
76:ca:31:29:07:2b:fc:fb:36:b0:75:3e:41:38:83:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:04:0D:4B:A2:32:FA:E5:99:22:28:D0:49:61:63:D6:B0:B3:F9
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:42:d0:fa:0b:c7:97:71:7a:67:5c:dc:8d:77:ca:1b:da:a7:
f7:b9:65:62:dd:80:fd:b5:f3:cb:8b:19:59:f5:b4:19:d8:3e:
fe:04:58:27:35:d1:fd:48:e4:d6:91:2f:31:2b:22:39:ff:8f:
79:5d:73:84:be:e5:46:bb:83:04:88:42:45:3b:29:91:ee:68:
b1:8e:34:7e:f0:f5:b9:96:4b:f8:26:e5:05:95:df:0c:e1:b8:
65:78:16:99:d2:ef:f1:c5:e3:52:fe:19:2b:77:d9:5a:66:bd:
be:b5:08:75:30:5b:b7:fa:24:2e:55:8c:41:dd:4d:59:b4:02:
2b:e4:b0:82:0d:b2:a5:9d:51:af:75:00:4c:4b:af:6f:bf:44:
10:be:99:32:83:2e:a2:16:0d:78:c3:5b:a3:ed:b2:34:53:21:
30:01:3b:7b:a4:64:fd:dd:04:4a:f5:22:bc:94:8f:86:34:23:
e4:be:8c:38:e9:c4:6a:4b:7c:7f:9f:4c:3d:81:d7:3e:39:5c:
40:c3:8b:ab:57:b3:7b:48:05:54:00:01:eb:ad:99:93:8b:ff:
ec:ad:7e:76:75:5b:c6:b3:82:00:07:7b:46:73:7a:61:8f:fc:
c1:13:bd:2c:e9:3e:52:54:6c:2d:e6:2c:27:f0:92:7f:2a:8d:
06:64:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 14:34:57 2025 by rpki-client