Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: J/6iI+XGT/PMPuSWWvfpNkmX8t2/h2JJ03sMQRq9rI8=
Subject key identifier: 4D:CC:99:88:AA:DB:57:44:BA:18:A9:AA:E5:C9:27:FF:C7:94:F4:37
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019A533F76BB8C2569DFA87E568E5CFCE3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 13F0
Signing time: Wed 05 Nov 2025 09:00:59 +0000
Manifest this update: Wed 05 Nov 2025 09:00:59 +0000
Manifest next update: Thu 06 Nov 2025 09:00:59 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: 3vpLI20lshDGpgsNjOxirDCWIcFQk4qQtxJGQtIs8Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:76:bb:8c:25:69:df:a8:7e:56:8e:5c:fc:e3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Nov 5 09:00:59 2025 GMT
Not After : Nov 6 09:00:59 2025 GMT
Subject: CN=4dcc9988aadb5744ba18a9aae5c927ffc794f437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:32:1c:07:37:4a:cc:3a:e8:f9:bf:fc:5d:
e5:11:39:0f:4f:ab:35:7c:99:e4:8e:65:27:bc:cb:
10:3a:f0:9b:5e:3a:b2:63:c6:4d:31:55:de:83:3e:
cc:6b:0f:40:75:21:0f:ae:95:d6:40:61:ed:62:88:
56:bb:74:08:92:7c:96:3c:05:86:9c:0e:eb:41:06:
66:9b:1e:0f:7d:dc:32:f2:9a:d6:ac:3d:bc:89:7a:
55:86:c5:1a:0b:7f:a3:46:0c:8b:d1:55:ab:33:0f:
3c:26:fc:cc:de:ba:35:2e:56:3a:46:40:85:47:65:
28:20:a7:81:39:48:1f:23:5d:e1:94:27:ee:be:40:
88:a3:d1:2b:08:41:c0:8d:e7:46:73:40:92:5e:ba:
f7:77:1d:05:d2:b1:eb:31:6c:59:b4:45:f5:64:53:
9d:14:6c:be:71:e5:39:6a:a2:9b:e3:79:86:12:d9:
bf:ea:0b:e2:52:49:44:01:c6:d4:be:0f:51:64:3f:
4c:90:bc:32:51:a8:55:4a:04:cd:cc:bd:f7:69:1f:
31:5c:d5:39:36:bb:24:c5:41:67:9b:75:82:29:da:
8e:87:34:68:32:7a:78:f4:5d:15:c5:73:8a:fd:8b:
86:76:4a:43:c5:50:9a:fc:31:b6:96:93:4d:71:d8:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:99:88:AA:DB:57:44:BA:18:A9:AA:E5:C9:27:FF:C7:94:F4:37
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ca:f0:c0:fa:18:1d:05:5f:91:3e:94:07:4c:7c:63:f4:13:
8d:35:c5:e3:39:d1:9f:16:77:3b:0a:c8:ac:5b:60:be:8b:06:
15:69:48:76:1e:7a:03:d0:d7:24:d2:91:96:2f:77:4b:f5:55:
30:e8:1e:ba:3d:eb:44:79:74:6f:a4:e4:0c:16:50:1f:6c:a0:
e3:65:6e:1d:58:7b:fa:7c:96:cd:6a:8a:e4:52:30:b7:a7:b6:
36:e7:e9:c4:40:ed:a2:31:b2:ff:bd:3e:ac:c9:22:e5:dd:38:
81:5e:b0:5f:b2:90:1a:11:e6:ab:4d:3b:c8:1a:18:e9:32:f6:
13:7b:60:cf:6a:f9:3f:fe:fc:e5:70:80:e1:5f:0a:fc:cf:09:
9f:b5:39:ae:73:b2:e1:4c:6f:9d:3c:43:6a:a3:9b:04:49:f0:
37:f0:fd:be:29:0a:1f:88:8b:7d:28:d3:f8:ca:48:26:90:da:
be:1c:0f:be:29:bc:8a:d2:23:04:57:f3:fc:89:7c:10:9d:ef:
f4:d6:51:18:c2:12:4b:73:12:9e:3e:cc:50:d9:f4:93:0c:96:
4b:36:0c:e9:58:93:34:65:7e:69:9a:26:d7:3b:e1:9b:2b:c3:
12:cc:e6:aa:5f:20:59:e7:a4:ea:69:06:76:6d:c7:08:8f:1e:
b3:dd:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:18 2025 by rpki-client