Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: OHEJRfGGAhbMiSnLM/ukEVALOTXjowNyPK3VY8tnI5A=
Subject key identifier: C4:DB:88:05:B6:E7:85:F4:DB:CF:DB:08:3D:CF:01:E4:E6:EA:C0:E2
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019A7293FD3B5A3D9E5A64BD53969A6173E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 07CE
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: 5MEkoSXf8uEgla0AjjM/o/1+RG4MC0pnSlrjsjORNTc=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fd:3b:5a:3d:9e:5a:64:bd:53:96:9a:61:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=c4db8805b6e785f4dbcfdb083dcf01e4e6eac0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:70:43:66:19:30:c9:f1:fc:a7:3c:75:9c:
06:dc:43:0d:59:a3:eb:a2:18:cd:e0:b5:53:af:94:
45:cf:e5:d5:b9:15:fd:2a:e1:68:23:d2:d9:30:43:
da:01:1d:01:42:64:c0:63:de:2e:c5:27:77:5a:ab:
28:bc:c2:5d:c6:42:c7:d6:02:70:62:e7:02:e6:b6:
39:be:2e:dd:9c:c0:82:3d:4f:b3:d2:eb:e6:77:8a:
75:48:84:2b:d9:0f:11:2a:fe:0b:de:91:a0:1d:cb:
fc:f9:ce:db:81:40:ad:c7:b1:fe:df:35:79:6d:ec:
52:5c:5c:cd:78:3b:7f:c8:8a:8d:69:4c:a0:b0:7f:
e9:45:84:c2:c5:74:8f:97:fb:ee:39:4f:31:84:a8:
57:e2:c5:7b:cf:1d:d3:61:bb:d0:17:33:b4:93:3f:
64:dc:59:53:e9:f2:a3:a4:6d:83:af:40:92:f7:d2:
0b:2c:d6:89:31:05:c7:b6:81:42:4a:f7:47:6d:86:
47:9e:66:ca:bb:ad:46:26:b9:03:59:7d:cd:0e:20:
fa:9b:b1:6a:d3:f1:74:77:3b:fd:33:89:08:0f:5a:
99:d6:1d:ad:d0:e9:ac:07:69:47:48:a2:a6:ad:24:
c0:a4:26:85:34:e4:29:aa:4e:cc:1b:d8:77:1e:b8:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DB:88:05:B6:E7:85:F4:DB:CF:DB:08:3D:CF:01:E4:E6:EA:C0:E2
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:63:49:68:8c:be:a6:16:b4:43:75:30:e1:83:30:03:c6:23:
de:52:11:a1:fe:59:a5:39:8a:c2:9a:14:5b:15:c3:0a:15:48:
df:69:9b:45:c2:9d:3b:ca:49:27:40:d5:d0:3c:00:87:3f:4b:
9d:52:54:9b:4b:2b:7c:59:ce:e1:63:4d:23:ac:f1:d0:31:e1:
45:89:a8:6c:fb:05:fa:86:f7:a6:07:97:eb:99:fb:01:f8:89:
c1:1f:5d:e0:6a:8c:4a:51:50:83:b3:f4:8d:5c:4a:05:40:f6:
cc:e6:47:28:e8:90:77:09:3a:d2:ee:00:db:15:50:a4:23:7a:
e6:fb:b2:d5:b2:4d:1c:40:91:2a:ad:f0:b2:a1:49:fe:21:8e:
7e:f0:a2:06:2b:fa:a2:7e:68:5f:91:17:bd:8f:d8:98:7c:34:
fc:7e:7f:84:61:8e:1d:2c:8f:35:d5:ca:14:b4:9b:69:a1:e9:
49:22:be:38:53:99:e7:b7:dc:3e:1f:28:ca:be:88:57:c3:0d:
61:c6:a0:88:8e:0a:91:60:6f:a9:2f:62:af:16:53:49:d4:84:
f8:96:65:d6:c7:b0:ab:2a:43:fc:1e:2b:9d:7c:1c:e4:00:94:
66:3d:33:13:ba:cf:d0:33:ec:92:68:fa:d8:5a:e7:b8:51:7e:
76:b1:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:40 2025 by rpki-client