Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: f2+xz6JYTyoFE7x1Xcrc7irB4cb01P2XS5XRANOj+Wo=
Subject key identifier: C7:82:B9:3E:93:F6:04:41:2C:3C:3F:EC:05:C1:7F:ED:D2:4D:76:4C
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 019A71B8DF6428932337ED2E1BA8B68497C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0D8D
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: wm/AsiI8zBAzr0xtrg70dkdi0PQ2dR9KI3+RaVPlLAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:df:64:28:93:23:37:ed:2e:1b:a8:b6:84:97:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=c782b93e93f604412c3c3fec05c17fedd24d764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:48:dd:08:0f:5c:16:03:d0:b7:cd:f9:7b:
82:48:ab:df:92:8f:fd:5a:e9:0b:52:a0:80:c1:c5:
ba:57:cc:f6:a8:89:06:75:b6:c2:68:5a:26:91:ef:
73:b7:2f:c4:d4:44:a2:b2:28:76:39:d7:8b:aa:98:
b6:54:16:f0:65:00:27:9c:14:65:39:bd:d2:ae:2d:
43:c8:e6:8b:7d:28:8e:fb:af:71:31:0b:39:df:13:
67:67:e8:4a:0d:3e:45:bf:ff:93:1b:32:42:b8:f3:
a4:ae:97:57:bb:f6:a7:13:10:b6:b9:77:1f:87:b7:
ec:99:f5:9c:98:2e:a5:51:6f:fc:8f:46:1d:90:9b:
73:a9:dd:74:5c:16:b9:99:d9:61:5b:80:14:ee:46:
7d:dd:6d:78:10:d0:3d:b5:95:a1:b3:79:f0:1d:0f:
db:9c:49:e0:cc:3c:73:15:d6:ae:92:93:74:22:cc:
4a:11:71:4c:77:5c:eb:69:9b:48:8a:63:80:a7:fc:
41:d4:1a:86:d9:cf:29:d7:00:82:b3:1e:a3:4c:19:
bf:7e:b7:6b:02:88:9f:3b:47:ab:8e:ab:ec:a3:a0:
64:27:d6:b3:ae:46:67:da:70:4a:52:32:d5:50:73:
a7:23:a0:f4:5e:4c:62:c9:f7:fe:28:11:a8:cd:8c:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:B9:3E:93:F6:04:41:2C:3C:3F:EC:05:C1:7F:ED:D2:4D:76:4C
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2c:2e:29:5d:78:de:74:09:3c:f0:c6:43:07:62:13:9a:46:
44:13:80:e8:ff:27:c5:a7:ed:e1:08:ba:b8:bb:e1:7b:11:ff:
ae:25:cb:33:b9:7c:1d:a9:e8:11:74:a8:fb:15:4f:fa:f1:84:
b1:fb:87:bc:a3:cc:74:ae:a4:15:02:62:7b:f6:be:53:42:d4:
0a:8f:16:f6:ea:fa:1e:54:5f:fc:4c:13:a7:18:63:c7:47:8f:
1e:d1:3f:d8:46:1b:db:b0:f8:72:dd:f7:c0:ac:10:e8:76:88:
28:7c:77:55:44:bd:20:f2:e5:a5:79:f2:37:aa:a1:62:6f:09:
9b:5c:8f:08:bb:12:17:85:02:29:1f:b6:45:e5:e7:11:e1:ed:
22:60:eb:6b:f3:f4:42:be:e0:2e:73:16:a0:d2:f4:f4:19:9b:
aa:3d:88:4f:8f:d0:a4:27:32:88:d8:54:ce:34:2a:f7:f1:01:
88:0e:6f:3a:38:4b:1f:a2:77:de:62:9f:9c:ee:87:ac:7c:e1:
7f:c6:6c:38:cf:aa:53:5d:92:15:68:64:35:b3:e9:78:91:4e:
d5:b6:d2:6f:b9:2b:19:be:fa:cb:fe:9b:c3:46:a1:02:73:72:
8f:50:27:0f:c1:bc:6e:01:5b:e0:a3:53:fb:92:47:40:80:fd:
d0:40:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:40 2025 by rpki-client