Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: uPMfLSDVmnHtM47NgpraReDlyJ1YJSnbODsRVAr0GPY=
Subject key identifier: 3A:87:4C:47:BD:CF:55:B9:92:A6:16:77:AF:F8:0D:58:BA:D5:EF:01
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019A71EEB9F5EA9B95BDCC73807F5398E7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: A+NMJpgDmFcSUchEfZeAg8H7ANRzrm66IQY0FnBadrw=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b9:f5:ea:9b:95:bd:cc:73:80:7f:53:98:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=3a874c47bdcf55b992a61677aff80d58bad5ef01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:14:9f:4f:da:b2:d5:2e:e5:61:b8:3f:bf:
71:9b:c3:4a:a7:3c:53:5d:47:7d:44:73:ed:71:e9:
60:27:2f:9e:86:e6:c8:01:ee:00:5f:44:0d:ac:eb:
b2:eb:de:7b:61:b2:e1:63:7c:74:8e:f2:ce:ac:ea:
c1:e9:2a:97:fd:1c:e1:f1:76:26:53:ed:9f:b8:03:
bf:d3:a0:ad:7b:12:d4:7a:75:b1:7c:cb:23:30:67:
4c:3f:9d:d9:0d:1c:0d:5d:ce:ed:16:93:43:b7:06:
c0:d0:25:5b:fb:77:e5:a2:4b:29:fe:4a:03:c7:4a:
ac:5d:ca:ca:b0:47:61:1b:bc:51:75:1b:1a:99:4e:
a5:7c:f2:42:ad:2b:06:8b:e3:7b:05:17:d8:9c:f0:
83:a5:77:c9:b2:2f:6b:50:00:f4:9f:a7:ea:9f:18:
b5:73:70:08:a6:f7:2f:9a:09:57:04:2a:d3:10:95:
42:12:08:6a:ee:75:60:a5:d0:77:57:a8:e8:e1:b5:
42:de:7f:a5:de:b0:f4:23:89:42:6a:24:da:16:52:
02:0c:e0:7d:f7:9d:d9:01:45:a9:dd:8d:d3:b8:35:
36:7e:0d:90:f6:88:7c:4b:a1:a5:8a:e7:81:12:ec:
e2:c0:a2:62:32:2f:4d:fa:54:08:25:bc:03:13:08:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:4C:47:BD:CF:55:B9:92:A6:16:77:AF:F8:0D:58:BA:D5:EF:01
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bf:76:0f:d6:26:ff:df:26:5c:61:8e:52:59:ff:e7:cc:e4:
f6:98:36:8a:37:43:4d:6a:97:f5:77:19:b8:7d:1b:f4:6b:9a:
70:9d:51:be:52:80:e8:18:34:1b:61:15:3a:6c:5e:bf:84:9c:
ad:43:65:c2:2f:60:68:a1:4c:48:23:46:79:dc:6f:df:6f:22:
01:dc:39:e0:c8:ba:a5:71:af:db:b4:79:93:df:35:3d:90:3e:
c9:29:b2:8f:ff:de:4d:a4:5f:af:d3:c0:4c:16:75:5f:d4:ce:
83:73:fa:a8:8e:43:d6:2b:b2:cc:94:b9:d7:33:0c:8d:b7:02:
81:40:6b:a9:b8:15:d5:d9:c7:9c:32:98:9b:37:06:26:1f:d7:
c3:ee:d5:a6:3e:49:53:81:70:60:c6:9f:95:93:da:15:8c:cd:
5c:36:f4:52:01:8e:1c:ee:5d:94:cc:38:68:e1:d0:bc:85:35:
4f:12:3f:99:e3:bb:45:6f:2e:3d:8d:e2:95:a8:a6:58:df:d1:
2d:dd:85:55:c3:8e:eb:82:2b:08:3b:93:82:f7:78:ee:93:b3:
cc:fb:af:51:dc:28:e2:d8:e2:8b:99:d5:b1:86:cb:ec:f7:01:
fb:8a:ea:83:bf:f8:2b:9d:5d:9f:8a:ba:b5:e2:f0:3d:33:44:
05:e1:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:33 2025 by rpki-client