Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: tizilCKIsCGpfFsP9blTKSmbolvw2aIEk3xGZ/oa47Y=
Subject key identifier: 62:FE:18:CE:66:4F:62:0E:11:85:04:43:E4:24:F1:90:49:30:C3:24
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 019A4F98E87CB0E5B7143FE92C823427B897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 09F8
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: ANiqnFHZYGw+RGWTgp+Wyf600A5/hetgkLrJwYd7GFU=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e8:7c:b0:e5:b7:14:3f:e9:2c:82:34:27:b8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=62fe18ce664f620e11850443e424f1904930c324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e8:e0:59:fe:27:6c:e8:bc:e5:a3:a9:c4:14:
6e:0c:17:06:e8:f0:04:7b:23:02:39:1c:e6:63:ce:
93:05:10:34:b0:86:39:72:ee:0f:4a:d3:f5:27:0b:
c5:82:f0:7c:81:a7:5a:0d:62:00:b8:52:6c:b5:32:
5d:0d:47:a5:8f:21:84:69:75:f9:8d:bc:52:70:1f:
05:a3:42:75:2a:d6:bc:c1:87:c1:00:41:b0:14:90:
20:4c:3e:53:d0:c0:70:7a:53:c3:06:67:d3:e0:ba:
36:27:7e:0e:e3:8d:b7:a7:1e:53:6c:fa:b1:5e:ed:
84:6e:c7:92:bb:03:e0:45:f5:d1:d0:16:27:af:a9:
6c:9f:e3:2b:28:d6:43:4e:4e:2f:3d:7e:87:4f:92:
df:0f:0d:cb:49:22:ec:e2:d7:b1:d4:24:c5:56:08:
74:5d:e7:12:0f:3a:08:24:32:65:c5:66:03:e5:e2:
a6:e6:4a:4f:d9:4c:03:ad:78:10:3c:e9:e2:3e:7b:
e7:53:7f:05:7e:13:08:71:5a:21:06:eb:ca:9d:8d:
1a:ed:8c:ff:da:91:e2:eb:6f:4d:52:ed:23:b1:aa:
07:b4:fe:9d:0a:2f:7a:f8:db:01:8f:42:09:7d:b5:
80:13:6c:2b:28:4f:e7:71:6e:d4:ed:36:38:ef:75:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:18:CE:66:4F:62:0E:11:85:04:43:E4:24:F1:90:49:30:C3:24
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5e:1a:c3:f2:e4:86:81:6b:ae:b3:c7:1e:8b:24:12:7a:ff:
54:bf:53:c4:12:f3:58:77:ca:f3:df:b9:eb:c9:a2:4a:d3:f3:
69:23:d5:fb:ce:c1:16:9c:87:ad:3e:1e:86:89:0a:e0:ed:07:
9c:c4:d8:ef:43:8a:4e:9d:84:8f:c7:f2:9a:eb:f3:09:5e:a3:
12:84:ff:1a:b2:dd:a9:1d:1b:7c:43:5b:bc:66:2c:9c:9f:e0:
fe:a2:67:f8:bd:be:65:b8:93:cc:fb:2f:10:e6:5a:96:d6:4d:
3f:b1:c4:4e:89:0b:0b:9c:ca:90:1d:aa:d8:e6:0f:eb:93:5c:
5c:5d:38:77:b9:0c:a4:6f:7a:01:dc:f9:38:62:1c:1d:7c:6f:
55:b2:9e:4c:31:3b:18:09:c9:ae:d6:5f:ea:d7:d7:b4:69:2a:
6a:20:aa:c1:01:19:b5:0b:49:cf:41:b7:ae:cc:06:88:70:6e:
8c:d1:68:25:0a:78:6c:ce:95:3d:6d:eb:1f:44:9f:df:7c:3f:
30:68:98:7f:c2:8f:44:4d:a6:eb:e9:2c:3d:ac:01:9a:43:c1:
6b:d9:7f:4f:7f:4d:0d:b3:0e:bf:b6:e2:f6:02:bf:e6:ae:8c:
75:31:de:68:ea:ad:76:b3:8a:39:44:ed:34:3e:9c:a7:5d:ce:
11:28:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:59 2025 by rpki-client