Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File: GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier: ay8US4krkR983GK8edBTNX1Kp80gBJCwkQPtV4IZFnE=
Subject key identifier: 7D:B4:2D:25:53:97:33:8C:1A:E7:22:6E:EF:13:0A:89:8D:7A:81:D8
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 019A71EECAB584CD8CD4CF5814A5DB7870E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (hash: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=)
2: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: 8bx0FyML1FqusW+uBpZrEP6AgD4NujjVkgAmIi8htnQ=)
3: HaiHFPazwgQRJw4yytWvokUzRVs.roa (hash: Pe9HBJh+6DQK8Oywez23C2fyZVdlN/Z1EykYUUEzvY8=)
4: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (hash: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=)
5: kRGf0bWxjWUh8sdGXabcomhWjno.roa (hash: 9dSAfgPcrU0QfkObtWRj3oGya1C5FzdCWWHZarkr0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:b5:84:cd:8c:d4:cf:58:14:a5:db:78:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=7db42d255397338c1ae7226eef130a898d7a81d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:1e:44:99:c7:ff:59:f2:0d:08:f4:90:e4:
51:e4:25:a5:a5:1c:2d:58:8b:3b:f3:23:23:2a:03:
77:47:1a:38:63:c2:90:9c:6f:a8:c6:77:ef:0d:cb:
43:72:e7:80:ec:49:6b:ce:75:20:70:1a:f1:ba:e0:
2e:e2:a4:aa:12:ec:06:c4:bc:92:55:cc:01:94:b0:
db:d3:aa:37:5c:f6:f9:e2:1e:cc:5e:28:55:57:5b:
f6:c2:48:49:86:b9:8a:95:d8:28:b8:5a:5e:00:88:
f3:c3:44:66:c9:4f:6c:2a:29:86:73:fa:33:29:92:
dc:e4:6e:2e:cc:48:74:5c:c8:95:e7:24:0d:f8:03:
a1:d9:2a:14:2f:b7:46:fe:50:c5:23:09:20:db:af:
32:da:41:f4:3a:32:da:31:94:2b:09:1e:38:37:1e:
3b:c8:b9:3a:13:7b:45:8a:c0:92:09:88:c0:2b:dd:
27:12:a5:9f:ca:05:83:1a:10:7c:c9:a1:63:2a:57:
e8:67:c7:e0:4b:ee:8e:ac:63:e0:31:4b:d2:d9:0c:
df:3b:9a:95:e0:70:1d:27:8e:9c:8b:35:04:49:96:
3f:32:5b:e3:ef:9f:20:83:f3:8a:2f:0b:66:c3:1b:
fe:4d:52:39:e9:a4:5c:cd:34:34:64:e5:98:06:56:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:2D:25:53:97:33:8C:1A:E7:22:6E:EF:13:0A:89:8D:7A:81:D8
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1b:d4:95:88:64:c3:50:a5:76:8d:1b:00:1b:39:fe:44:52:
ec:49:e7:cf:90:7b:bd:d3:0c:04:9c:1a:7d:25:dd:fe:26:56:
06:d2:67:53:44:5c:4e:47:d1:c7:09:19:4c:76:d9:42:7f:07:
db:6d:30:fe:5c:6c:4c:f0:30:7f:eb:63:81:0f:ad:62:14:72:
66:ff:b0:a5:30:51:ff:20:4e:eb:b4:b4:40:c2:81:45:91:51:
0c:69:1b:90:19:4c:74:20:0b:b2:7d:da:6d:13:d3:3e:ac:77:
41:bc:86:60:d5:59:47:92:0d:0e:ec:df:0d:99:cd:91:86:7c:
98:ec:e0:76:6a:88:57:a5:d0:27:74:a7:57:68:df:68:b3:48:
3d:c3:f1:9c:eb:9f:ea:39:df:a5:1d:03:b3:87:f4:a6:71:e7:
ee:3c:a6:db:50:f3:24:b0:f3:85:2b:7d:3b:d2:94:af:bc:46:
d2:80:d3:98:3c:02:f1:4d:65:fc:39:db:ab:8c:68:8f:7c:af:
8f:cf:20:39:c6:92:13:3d:e1:73:a2:a4:6a:a7:4a:43:22:01:
36:cc:a5:c4:82:91:89:a5:d9:fe:8c:06:4e:03:9b:1e:df:02:
9f:92:04:34:51:e2:b5:47:e3:81:47:3a:7f:eb:b4:a2:67:7a:
17:be:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:30 2025 by rpki-client