Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier: 3HuOi3JtRylgvdNrT98PeqfDdRmTETKxJlCB7Vd/aEs=
Subject key identifier: 4C:C0:34:72:32:04:FC:C6:EB:19:A4:99:DA:CE:1A:95:9F:73:ED:76
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 019A72936905A3565472552A78B77D2BEF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number: 11ED
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: 91a4AyjiQ11AE-ejkjHD7dP2jCw.roa (hash: mqMxschgmHfJobGTtzuGdiipq4NqJDFBcrZK6ygd+ok=)
2: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: C9HyKEjYdUDx0Cpz9AAnd2h6lk6zQYCd/4QC9aCqo5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:69:05:a3:56:54:72:55:2a:78:b7:7d:2b:ef:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=4cc034723204fcc6eb19a499dace1a959f73ed76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:ce:47:9a:2f:aa:35:ac:ff:e5:ac:23:d3:
31:04:83:6a:b7:61:3b:c7:43:01:68:e9:c4:e6:e4:
f3:23:12:b0:58:07:d6:d2:bc:0d:3d:45:54:7f:28:
4b:f1:a0:8e:86:5b:84:cb:cf:5a:43:25:5c:8d:c2:
e8:aa:47:7f:4c:64:1a:a1:b1:3c:84:c1:54:5f:98:
fe:60:74:0d:17:e9:a7:9b:89:e9:d3:d1:f3:e5:06:
2f:a1:d7:c4:42:72:83:c2:36:d5:b2:ad:7a:f7:46:
41:93:3a:e0:9d:90:b7:c2:69:b5:68:34:f2:dc:8a:
7f:16:a3:79:33:b2:ef:f7:22:97:7f:13:52:17:12:
3a:30:c0:cd:95:22:8f:d1:67:c8:28:a2:ab:c8:8d:
77:dd:f1:72:b3:54:d6:e0:88:fd:e8:a1:46:61:67:
3b:0a:99:8b:92:93:57:75:34:b3:62:5e:b7:3c:74:
07:94:ea:84:99:b4:0a:ce:b3:d3:a8:43:40:5f:95:
1a:20:9c:cd:51:d9:b4:28:19:6d:8f:d0:13:f2:1d:
45:20:db:17:30:6c:68:1b:17:6d:5e:8d:5a:7b:23:
5a:21:dc:44:e7:a8:8e:9b:de:6a:2d:21:f6:54:d5:
57:52:3c:16:26:94:ae:df:5a:7f:8b:39:4b:92:28:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C0:34:72:32:04:FC:C6:EB:19:A4:99:DA:CE:1A:95:9F:73:ED:76
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:93:23:15:2f:e4:a2:95:78:36:ce:05:15:a8:3f:25:2c:98:
75:43:f0:19:3a:7e:01:00:83:d2:31:d5:c2:5f:f5:9f:96:42:
ae:b8:b0:e4:cc:98:88:1c:59:6e:35:99:f1:61:c2:d2:32:e3:
69:e5:be:a4:c2:d2:5b:47:e3:27:5e:64:1b:71:4f:8c:d4:2b:
0b:2f:bf:ed:4c:48:2b:ab:00:94:9d:86:19:1d:fc:94:fe:b3:
dd:5d:f1:46:60:a6:2e:a5:c5:3a:18:f7:52:f3:a6:3a:20:f1:
fd:42:d4:38:30:07:c0:e3:7c:53:4a:3e:58:87:72:a6:90:0b:
59:99:49:64:ca:c2:fb:88:97:9d:95:c7:9d:92:12:1a:38:2f:
97:04:3d:1d:49:4f:66:8d:2b:64:3f:da:85:e5:6b:4c:c2:13:
7b:c5:10:09:eb:70:7f:be:20:99:ca:c4:14:a6:2d:5a:a0:cb:
66:2a:63:16:a3:52:e6:e8:a8:cd:db:40:7d:b8:a6:2f:04:4d:
99:4e:12:ba:f8:f1:28:b1:65:8e:a2:8c:02:25:df:4a:7a:59:
7b:e5:da:51:0f:c9:a0:2e:c8:a0:4b:3c:e8:e6:d4:36:54:0d:
49:77:05:d3:69:39:4a:de:23:09:60:be:2f:89:c5:e6:ba:72:
87:39:61:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:08 2025 by rpki-client