Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: FbyQ9L07u1lKO0l6JlVR/WS0042rzb5xDjV8MMwZa84=
Subject key identifier: E4:DD:8F:74:35:31:C3:15:AE:95:54:4B:CE:FE:FD:AE:7F:C5:40:04
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 019A72937847885185972391E2AB7F9AEDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: VLRf52zswMdXg2ucPBKdKh7bmtv6x1D/5gpsXpuwQOM=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:78:47:88:51:85:97:23:91:e2:ab:7f:9a:ed:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=e4dd8f743531c315ae95544bcefefdae7fc54004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:fe:6b:1f:cd:51:ec:77:47:d2:aa:04:b3:
c2:41:29:9d:a7:95:8c:37:34:66:90:bf:b6:d1:10:
20:3b:eb:57:d6:6a:ec:5a:e7:5b:7b:11:73:bf:30:
ba:38:3e:c7:9b:01:f6:79:b7:49:6b:1c:dc:4f:1b:
ea:04:ba:ba:96:17:6f:52:35:06:1b:06:fd:6d:fa:
4a:8c:aa:7c:20:5e:81:ac:22:c2:5a:5f:ad:90:79:
91:1b:ea:3f:a5:36:a4:6a:04:4c:ce:f8:49:d7:dd:
b7:e6:e8:d5:a2:54:14:83:a1:95:0d:e7:fe:5d:5a:
d8:91:db:d1:30:48:e8:df:68:3d:1b:fa:40:f7:1a:
36:49:25:05:2e:c0:e3:ae:f1:a2:7d:ea:c7:27:a8:
1a:8f:35:cf:80:f1:e7:f0:c2:78:7e:58:66:91:09:
9b:f8:d6:3f:7f:17:24:03:b9:a7:d4:a8:98:f3:d5:
75:e1:e1:16:ec:27:9c:b9:65:8f:35:79:e2:14:06:
ee:cf:fa:21:65:01:84:db:5b:e6:3a:ee:99:c5:fe:
b7:bf:82:12:01:0d:28:42:90:64:01:50:e2:ca:7b:
24:56:0a:ed:5d:d5:0b:51:8f:f3:c4:ae:6a:e3:0b:
3a:1b:ac:96:13:cd:8b:cc:46:13:4e:fc:1f:70:3b:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DD:8F:74:35:31:C3:15:AE:95:54:4B:CE:FE:FD:AE:7F:C5:40:04
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:12:a9:02:76:7b:fc:17:f6:cd:14:e2:e5:8a:5c:4f:04:83:
d2:0a:7d:bf:88:fa:db:e7:1d:38:9d:ce:3d:17:d2:44:63:a6:
6f:9b:0e:68:66:a2:37:f9:eb:30:7c:e3:37:d5:ce:52:af:58:
d7:bc:b8:dd:51:6c:4f:51:50:5a:c5:56:17:6d:60:95:66:b2:
8f:d5:25:2d:54:b9:1c:1e:ed:02:1d:27:6f:8f:5c:b0:de:9a:
86:b4:2a:f2:0b:b2:e2:81:1b:59:5a:12:0e:4b:47:3d:e6:bd:
78:3d:d1:1c:74:b8:1b:e1:ed:61:dc:24:4c:ac:ba:d9:53:b5:
f1:2a:72:2e:a7:94:f1:89:9a:cd:aa:11:c7:10:5e:69:3c:20:
73:4e:64:ba:5c:ba:1a:7c:fe:96:2b:95:4e:dd:e7:22:16:60:
c4:e3:cb:e3:4a:02:d1:f3:1c:ed:28:cf:09:b1:3f:98:45:b8:
10:a5:91:99:8e:0a:db:90:9d:4e:13:86:45:ea:76:a8:7e:b3:
fc:7b:31:22:2f:5e:27:c9:2e:3c:32:e4:65:28:42:23:85:50:
99:77:43:49:2e:d3:aa:5c:c9:1c:5a:fb:1f:e1:40:c9:e2:b5:
09:9e:cd:83:4f:8d:7d:71:86:d2:28:db:73:eb:e6:4f:4c:d7:
31:a7:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:56 2025 by rpki-client