Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier: muwxiFP0Ngn9XP5Hr/bzg6/+BNn/dTKuN/sZrZ2ic0A=
Subject key identifier: 20:21:E4:D0:29:A8:00:4D:AD:5F:7D:15:A2:58:72:75:23:F5:FB:81
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial: 019A4D747526CFF575C5F1B0EFC8D4222B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:01:08 +0000
Manifest this update: Tue 04 Nov 2025 06:01:08 +0000
Manifest next update: Wed 05 Nov 2025 06:01:08 +0000
Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: SZSyBFXxsLx+6Yi93O5eoatCsWfTMKwaB2A6kRpNif0=)
2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:75:26:cf:f5:75:c5:f1:b0:ef:c8:d4:22:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Validity
Not Before: Nov 4 06:01:08 2025 GMT
Not After : Nov 5 06:01:08 2025 GMT
Subject: CN=2021e4d029a8004dad5f7d15a258727523f5fb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:fe:0b:af:a3:c1:bd:95:6f:f1:ef:0b:f6:
4c:3e:2e:c7:3e:41:ba:20:bf:bd:84:8e:41:11:b0:
9f:d1:2d:e8:14:41:3f:9a:82:41:4a:45:b0:0a:92:
72:bd:dc:f8:dd:e2:bd:1f:5f:2c:e3:74:df:9a:76:
32:75:fb:d8:b7:36:4c:77:24:6c:91:2d:67:9b:4d:
52:7d:be:36:a0:c2:a6:e7:14:9f:50:95:6d:51:56:
2f:dd:eb:a4:3b:0d:b4:68:60:c5:8b:23:96:58:0a:
6b:98:72:23:d3:61:ca:59:3e:d5:9e:30:65:cc:13:
22:25:a6:23:86:ba:ad:e3:52:b4:f0:0e:13:14:21:
21:fa:a3:d2:42:1e:2a:6f:5c:9e:8f:02:e2:b6:88:
3b:f8:68:5d:5d:a7:1c:b9:cb:16:7d:f5:00:ad:ec:
69:6a:61:48:3b:a1:d1:6d:43:a3:46:15:44:42:a0:
f3:97:a6:7c:c6:f8:e8:83:76:d2:b8:3b:43:67:bb:
69:c1:08:6f:e5:40:05:c4:a7:43:52:ef:00:07:04:
c1:4f:bc:6a:0e:8c:38:4a:12:65:19:fc:db:4a:dc:
d5:c1:91:53:52:00:48:18:9b:20:c1:ff:48:18:36:
ae:ef:10:99:f9:a2:b4:cc:a4:29:01:fa:0c:e3:69:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:E4:D0:29:A8:00:4D:AD:5F:7D:15:A2:58:72:75:23:F5:FB:81
X509v3 Authority Key Identifier:
keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:be:38:66:f4:47:16:39:5f:94:42:cd:c2:2b:9c:12:95:
69:95:04:8a:db:27:6e:b7:66:d1:39:75:65:8c:7a:df:ad:73:
82:d6:92:9b:5a:c8:1d:2d:02:58:46:02:0e:1e:ff:2a:17:c5:
dc:8b:0e:8a:47:68:8e:8e:0c:02:57:e5:e7:24:0e:7e:1d:db:
97:74:d0:4d:e2:ce:e7:7b:f7:e3:92:89:37:b6:c3:e1:20:6f:
5e:37:d8:ab:e5:99:d7:8e:64:33:ab:84:20:d5:d1:07:ad:7d:
5b:ce:4e:c3:57:df:0a:fd:38:4b:8c:70:7e:05:c9:7a:93:90:
5b:31:3c:f0:df:40:2f:49:88:fb:4b:05:df:1f:b7:c4:97:12:
e4:5a:2c:c3:be:a4:98:28:18:0e:89:18:01:7b:26:3a:87:80:
a6:56:51:15:87:85:92:8f:1f:21:ed:aa:5f:48:c5:fe:1b:33:
57:00:69:24:c5:a8:02:0b:40:20:a8:51:72:37:c3:da:a7:30:
61:ba:68:60:68:f9:c4:a9:e3:12:87:2d:47:4d:a5:cf:2a:ec:
0a:ad:71:03:98:34:e1:40:7d:b2:9b:1d:74:c3:ef:ef:ba:c1:
47:34:6a:20:bb:e8:43:4e:dc:3b:04:f7:69:44:07:79:17:fb:
a2:43:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:10 2025 by rpki-client