Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File: GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier: +64WxtDtGCv8POGq79W5SXLQY6irQZ9F7YZw84rvYB4=
Subject key identifier: C1:17:47:3F:D5:DD:6F:F2:33:AD:52:3D:CA:56:EA:9E:17:EE:C3:DF
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial: 019A71133FFEAACC85E4D85CC2680E8F0F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number: 0C92
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: wumOOUwp8JDzi9bUGk4TxC/PW/KySDamfrVGUPisUKU=)
2: tut7oaWJNrhx8vDfjnadysvruEE.roa (hash: oXhco3AY4UNPZerjwlU5WNQYyYnT8TDpF5tOGRePMaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3f:fe:aa:cc:85:e4:d8:5c:c2:68:0e:8f:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=c117473fd5dd6ff233ad523dca56ea9e17eec3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:89:19:f3:c4:34:17:96:f7:55:91:5e:f9:
58:47:26:f6:90:c7:78:66:42:ff:48:fd:a8:56:15:
bd:da:b9:0e:b3:85:07:64:99:42:6a:10:50:a6:25:
5f:4f:01:c1:9d:91:9b:7b:91:77:56:f8:e8:f0:b6:
5f:b5:43:d1:b1:c7:a0:d5:b3:75:c1:b8:76:3a:a1:
c6:22:97:d2:da:06:37:d9:90:90:3a:9b:d8:0e:f5:
cd:86:08:2a:cc:ff:8a:86:4d:c5:81:cd:43:3e:39:
ed:66:ba:34:4e:fd:31:1b:b2:26:c8:0d:ca:3a:ae:
eb:f7:86:d2:c3:90:22:c7:33:2c:4e:b0:e1:c0:94:
94:c9:63:28:44:54:25:73:29:bf:e2:99:95:e0:68:
87:3e:a5:14:78:ad:20:78:20:62:4c:bd:64:c5:b9:
d5:f1:c7:9e:75:83:98:a9:26:2d:ee:10:97:93:e4:
66:ff:24:d1:c5:db:d0:48:38:bd:fd:0d:ec:1a:9f:
b2:f3:fa:19:f7:35:90:34:a5:74:7d:e0:1b:71:2b:
4f:a3:4c:6f:ec:a3:6e:e9:34:42:51:51:ae:75:60:
9e:eb:ec:45:f8:00:35:5f:98:71:48:85:a1:36:a3:
6a:d9:2f:18:43:2d:fc:38:d5:71:9a:44:fa:28:9a:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:47:3F:D5:DD:6F:F2:33:AD:52:3D:CA:56:EA:9E:17:EE:C3:DF
X509v3 Authority Key Identifier:
keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:57:71:ea:d9:fc:bc:6f:1e:17:06:d5:f3:03:c8:aa:a9:2d:
49:34:d0:e9:44:ca:78:cc:85:c3:03:1c:40:58:eb:0d:9e:a3:
d7:bb:87:02:0c:fd:34:8d:71:4a:c7:dc:a3:3a:43:22:03:37:
68:77:f5:2d:e6:ae:7f:09:10:38:b8:01:d7:19:06:8c:00:b7:
fa:f2:37:1e:19:5a:57:ba:bd:27:b7:94:db:9b:0f:ad:57:7e:
80:e2:da:d4:36:1c:4d:83:09:23:f5:1c:2f:ab:07:d5:75:00:
58:27:a9:c5:b3:ed:f2:12:c1:42:83:9c:05:1c:0c:00:b2:83:
81:b2:25:01:b2:f0:f8:3d:ac:e8:b7:96:82:db:41:b4:a0:33:
37:1d:8a:f1:f2:bc:61:53:fd:06:53:12:40:85:41:47:9b:5b:
6e:6a:89:e1:13:d3:8a:7f:1a:a8:89:57:ee:99:d9:40:c0:93:
7f:69:d5:f9:f2:cf:b0:c3:7a:be:96:6e:db:89:bd:1e:7d:a5:
a3:ad:5f:5e:8f:b9:2c:3e:32:fd:03:fa:14:2b:1c:70:7a:59:
a2:46:02:b8:5b:d9:3d:39:86:5b:6f:8b:b0:fe:95:eb:d9:e7:
6f:85:88:50:69:92:54:e7:00:dd:3e:8b:ef:85:7b:ce:83:c9:
63:f2:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:21 2025 by rpki-client