Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: yS8PWBuIPMlrZno8tkeKp7yLcxnPBPJSYsNUoWNbYUU=
Subject key identifier: 85:16:2D:8D:7F:46:3E:CC:44:65:9F:D6:BE:8B:55:F0:EE:26:D1:0C
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019A571C2388FE70328E52329D7FC93D65CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 13F2
Signing time: Thu 06 Nov 2025 03:00:53 +0000
Manifest this update: Thu 06 Nov 2025 03:00:53 +0000
Manifest next update: Fri 07 Nov 2025 03:00:53 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: TUODMu5DVt1dY01IWFXh9aHxwWaSCyg85wdswOm6kvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:23:88:fe:70:32:8e:52:32:9d:7f:c9:3d:65:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Nov 6 03:00:53 2025 GMT
Not After : Nov 7 03:00:53 2025 GMT
Subject: CN=85162d8d7f463ecc44659fd6be8b55f0ee26d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:53:6a:a2:85:7c:a8:c4:d6:b7:91:40:bc:
60:f9:ad:d7:f9:60:d5:5c:25:da:1e:04:9f:dc:28:
33:2d:31:d6:be:e9:2a:c7:51:7d:f2:cc:4c:a9:a0:
44:21:aa:28:cd:95:9a:c6:b0:45:5b:9f:af:e9:11:
01:30:6e:1d:cc:e3:07:9d:ba:cc:d7:d9:61:c7:78:
34:84:63:eb:97:f1:27:83:7b:f8:ef:4c:1a:42:09:
28:14:af:53:2e:ce:7c:f7:5e:71:a0:ce:e0:95:13:
1d:09:8a:81:14:35:a1:f7:a3:be:bf:55:79:2e:30:
5a:c3:aa:1f:f0:1f:31:ca:96:98:a8:58:f1:1f:7a:
2c:9e:9d:20:20:ae:c0:0e:23:f0:7d:21:07:27:ea:
5a:50:d5:b3:58:9c:42:fb:cc:95:2d:a6:5e:9a:ca:
da:00:6a:64:e7:d6:a9:af:08:5a:46:f6:67:61:80:
20:54:79:f7:d9:68:78:8b:70:73:65:14:6f:dc:94:
ed:d4:8c:b0:56:08:e1:5e:0a:ad:4a:d8:87:cf:78:
3d:b1:b9:fd:09:0a:9b:dc:e1:66:37:97:e5:64:12:
c4:bc:02:d2:a4:a4:d1:97:58:7a:98:b8:0a:68:f3:
4c:5c:3a:ba:8d:11:24:97:07:4f:58:be:67:c9:50:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:2D:8D:7F:46:3E:CC:44:65:9F:D6:BE:8B:55:F0:EE:26:D1:0C
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:f0:25:ce:fd:04:40:74:fa:f5:fc:36:88:00:8d:22:e5:
d6:23:f6:3f:a2:07:f1:1d:da:e1:a1:37:18:0b:81:2d:0f:c0:
d0:43:81:f4:52:a3:41:4a:27:41:7a:80:58:7a:e2:f1:1e:a4:
fe:be:0c:b0:05:66:af:e3:92:ea:bd:e7:08:7f:84:46:fc:1b:
9e:f3:77:c5:b5:ff:de:bd:5a:ee:36:09:81:c0:5e:ef:30:c8:
02:7c:8a:0b:83:56:0f:63:0a:a2:8b:ec:e4:b0:a1:4f:29:46:
65:9f:65:fd:b6:c1:02:f9:b1:f0:94:08:2e:29:08:01:5b:0a:
84:25:33:03:2d:58:1e:04:d2:fe:0b:97:fc:e0:ed:db:7c:cf:
03:c3:1c:47:1f:8b:52:e8:6f:51:da:54:c4:ba:98:ea:5f:c6:
06:b3:7b:4a:17:ba:98:5d:a9:ef:c0:fd:7d:94:6a:a1:38:4e:
2b:35:e3:56:a2:49:0a:e9:fe:bf:cb:46:b5:03:c2:91:3f:d1:
68:0a:9f:b9:91:9a:0c:b0:e3:23:5e:02:c1:ff:aa:df:c0:d9:
a0:72:40:0c:cb:86:e5:e6:4a:6c:8c:3a:ef:1b:8a:e9:2b:2e:
81:c8:4e:1c:22:c1:07:b5:8e:51:16:62:3a:11:60:e9:5f:fd:
86:1d:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:11:30 2025 by rpki-client