Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
File: GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft (raw, json)
Hash identifier: 4yFAOrAxr/aEd4GFZLwW3GLiltes1r6e1vhewnOciyA=
Subject key identifier: 1A:46:FC:93:89:43:0D:AB:48:6C:D5:ED:65:09:04:F4:36:92:64:8B
Authority key identifier: 1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
Certificate issuer: /CN=1af1487e4d0e26c53d593ece6e14712221e24010
Certificate serial: 019A54F63F37D8D108EA276C2E17747EC749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
Manifest number: 1F
Signing time: Wed 05 Nov 2025 17:00:15 +0000
Manifest this update: Wed 05 Nov 2025 17:00:15 +0000
Manifest next update: Thu 06 Nov 2025 17:00:15 +0000
Files and hashes: 1: 4jPpa2yrHFokJLczcdkZDLR9h98.roa (hash: EAFCvLqIzBJHhjSQ4BlNHua0JxEcTXMXgVltdpts9XM=)
2: GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl (hash: KcTTvGPGSyzZbd8zklc/bWDNqMhh9zm7BXMYGk5nT4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:3f:37:d8:d1:08:ea:27:6c:2e:17:74:7e:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1487e4d0e26c53d593ece6e14712221e24010
Validity
Not Before: Nov 5 17:00:15 2025 GMT
Not After : Nov 6 17:00:15 2025 GMT
Subject: CN=1a46fc9389430dab486cd5ed650904f43692648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:71:ab:37:40:1a:c5:e5:39:bc:d3:00:39:
cc:90:60:40:fe:fb:12:d5:13:ae:f4:66:a4:dd:f2:
38:89:5d:75:87:64:c0:8c:68:3e:ba:f9:2f:35:48:
3c:dc:f7:aa:7e:cf:17:89:82:cd:13:19:c7:47:07:
e8:9d:ea:cd:b6:5a:76:fd:8a:2c:72:76:02:e8:23:
58:53:51:e6:2a:a1:f3:e6:f5:f6:53:73:f0:58:af:
41:e3:16:d2:a9:ad:94:79:a0:8e:8e:8f:00:49:19:
9f:56:0d:47:45:9b:67:79:31:bc:33:65:1c:de:19:
e0:b0:c1:e4:e6:c0:cf:06:52:40:ea:7c:1e:07:c3:
8f:d1:68:74:19:92:0a:0c:23:cf:e3:d3:2c:36:b8:
50:e2:bc:d6:bc:2f:50:bb:ff:97:6d:93:04:a7:35:
04:70:37:de:7a:ef:b9:d1:f7:cf:7f:fa:b6:e4:cc:
e8:14:34:a5:23:5a:34:1c:a4:9d:78:1e:2d:c5:1e:
23:d1:28:96:a7:31:b4:24:36:fc:d3:dc:27:d4:2e:
dd:85:78:4a:7e:4f:b1:d6:15:17:2d:80:37:c5:10:
4c:1e:51:d9:04:7c:23:f1:79:58:19:8b:fa:4b:b8:
d5:74:9b:e8:69:73:d6:66:22:61:59:27:56:4a:fd:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:46:FC:93:89:43:0D:AB:48:6C:D5:ED:65:09:04:F4:36:92:64:8B
X509v3 Authority Key Identifier:
keyid:1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:57:b5:0f:be:9c:93:f6:44:da:c1:08:06:67:9c:3c:c0:7a:
84:c3:57:b4:ee:f9:66:b6:d6:30:ee:25:ce:40:c5:08:8a:8c:
02:34:84:99:ed:61:87:4c:d0:8c:54:82:2a:88:67:87:a7:62:
87:7f:97:10:34:9d:ca:92:d2:83:18:e1:16:b2:f7:04:60:d3:
be:a2:db:de:cf:bb:aa:ba:78:b6:4a:53:b3:59:a0:ba:69:cf:
25:c8:f5:57:90:a5:c2:9a:0e:62:99:0d:c5:dd:30:24:db:73:
8b:ef:6a:54:0c:54:d4:2e:3e:bf:a3:ee:6f:73:46:69:88:5c:
c8:0e:2b:40:21:dd:bf:9d:06:f6:99:b5:59:9b:43:33:65:e1:
4e:fc:23:82:de:2f:b8:5c:c9:ef:b8:11:8f:9c:12:89:d0:2f:
8e:f1:97:3f:c9:e9:86:4e:c4:72:65:9a:b0:d3:e4:bc:1f:2d:
89:bb:80:6d:d5:4d:f2:21:65:fc:c5:4e:c0:3e:0e:c2:1e:25:
d2:d6:28:67:34:ca:b4:c7:f1:29:9b:e5:5b:0c:b8:b5:8e:a1:
15:3f:f8:ba:bc:37:f3:80:80:fb:ab:44:d6:dd:9b:b5:a1:2d:
d1:dc:76:42:44:de:29:8c:b9:68:d1:f3:47:45:b9:67:30:9f:
85:2f:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:53:59 2025 by rpki-client