Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: 6VYFyTPy+3Mv8uMkCE3+jSUcMXFmRm3he0SrUw53OAw=
Subject key identifier: 1C:01:12:AA:B7:C7:7D:7C:5E:0B:74:B7:9F:D7:56:51:18:6A:5B:70
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019A29D541AF63B801F88A4767D1763B1BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 0234
Signing time: Tue 28 Oct 2025 08:00:33 +0000
Manifest this update: Tue 28 Oct 2025 08:00:33 +0000
Manifest next update: Wed 29 Oct 2025 08:00:33 +0000
Files and hashes: 1: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: FFuVcwwckl/IDwxwUcuKdz2uzyJp7Pas8DbWy6nmjyY=)
2: vvdAJvoqdhRnHyNRnR9QwCmshOA.roa (hash: yno5bMF5UsFhgiWOHsRLetn5+9bEbKawwZrFBu7TWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:41:af:63:b8:01:f8:8a:47:67:d1:76:3b:1b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Oct 28 08:00:33 2025 GMT
Not After : Oct 29 08:00:33 2025 GMT
Subject: CN=1c0112aab7c77d7c5e0b74b79fd75651186a5b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:1c:79:e6:02:24:59:5a:96:49:eb:c2:c7:
3a:e5:b1:07:7c:c6:83:87:94:62:59:4b:f7:95:9c:
5b:92:c7:c0:7d:d0:52:a9:a0:94:c3:c4:af:82:ec:
67:4b:6b:59:ed:a3:7c:c5:85:ed:72:df:4d:fc:d8:
97:05:d5:c2:50:ef:a7:98:06:78:d3:41:32:a3:f2:
f0:81:0e:d2:88:c0:2a:c2:73:7c:d7:76:ec:97:a6:
34:23:c2:99:1b:71:6e:5d:c9:7a:f3:7b:12:e5:4c:
8c:fe:28:77:04:9c:a0:3d:5e:aa:61:36:b5:f7:dd:
e4:fb:19:7c:f3:33:0c:f4:78:35:0d:42:99:41:c8:
a1:3a:e2:fb:f7:9c:78:57:98:7d:9e:f8:a2:cf:b6:
20:94:4f:0d:d3:5a:ee:e1:22:d0:83:05:58:41:1e:
b4:97:c3:83:49:61:b2:5d:c3:34:e3:13:49:63:e5:
8d:5d:07:2e:52:cb:e4:7f:16:2f:fc:9f:c7:8c:ec:
3b:b9:66:3d:0d:a2:d9:09:59:ce:ad:78:41:35:94:
48:b1:6c:0e:7b:76:ec:be:15:20:be:68:be:16:cc:
c9:b9:d0:7d:4b:52:35:3b:a8:82:4d:9e:89:a5:8a:
c5:5c:08:f6:1a:c3:80:45:b7:86:f7:c6:de:3a:69:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:12:AA:B7:C7:7D:7C:5E:0B:74:B7:9F:D7:56:51:18:6A:5B:70
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:85:3c:b1:b6:b5:46:e4:0f:6a:3a:50:05:19:3a:80:c3:5c:
b7:60:7e:dc:c2:8d:a9:9c:e6:59:b8:30:24:24:99:8f:f8:8c:
34:c8:86:00:44:c5:f5:e1:9b:19:69:77:15:3f:1d:dd:e3:cf:
16:65:26:4b:f9:86:c8:a7:6b:06:91:c2:0d:1f:9b:90:87:a8:
47:d9:56:32:6c:3b:e1:41:ba:7e:87:2c:57:8c:b8:7d:cb:d2:
e9:1b:e1:0b:b4:47:71:aa:6a:98:12:ff:a9:0a:09:25:33:36:
c8:f6:46:2e:a9:7a:6b:01:4c:0a:28:b6:43:ea:19:75:b9:5d:
71:d0:03:8d:df:be:aa:3d:26:93:a5:36:e5:b2:66:7b:49:05:
18:bc:81:ca:4c:a9:5f:f0:05:ce:4a:4f:f2:2f:e2:5e:95:67:
b5:fe:6b:9e:7c:d6:3a:90:03:7f:02:44:e7:93:6f:82:ec:f8:
fc:1b:5a:d5:55:28:53:02:c9:ac:74:36:db:45:85:db:03:76:
8d:86:67:8e:87:f2:21:0a:20:ea:89:06:2a:e3:e0:a7:92:d4:
5f:1a:6b:b6:c4:b7:b1:b4:dc:d5:c7:47:98:8c:fe:94:32:a1:
a6:61:9b:c0:28:be:0f:bd:e7:d2:df:33:5e:be:59:da:08:04:
e1:10:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:40:56 2025 by rpki-client