Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier: J/LceNjEz2G19bxDLCDd8HoMpZW9yo/wJXUpLfZJOp0=
Subject key identifier: BD:58:91:0F:EA:09:49:E0:52:0B:B8:AC:BF:7D:6D:A3:8D:2A:8E:0B
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 019A4E188410BDE3EF1ADC474585F3E2370F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number: 1223
Signing time: Tue 04 Nov 2025 09:00:20 +0000
Manifest this update: Tue 04 Nov 2025 09:00:20 +0000
Manifest next update: Wed 05 Nov 2025 09:00:20 +0000
Files and hashes: 1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=)
2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: 9CEAwnTQfR0wpg6WQJs7pCJrqTx2+XdGAxcPYYeuqGU=)
3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=)
4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:84:10:bd:e3:ef:1a:dc:47:45:85:f3:e2:37:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Nov 4 09:00:20 2025 GMT
Not After : Nov 5 09:00:20 2025 GMT
Subject: CN=bd58910fea0949e0520bb8acbf7d6da38d2a8e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:06:6f:21:03:c3:b0:69:02:a8:ee:dd:27:
e5:9b:77:29:25:3d:6a:0d:f8:fb:ee:be:20:51:2a:
33:c6:ea:17:51:6c:10:ac:61:2c:11:af:da:a6:0b:
a3:f4:8c:5e:8d:a5:01:f0:32:9c:f8:7d:37:10:07:
e5:24:96:a9:49:41:03:c8:52:e1:38:3d:b6:3b:f8:
48:1d:89:79:6b:ca:0e:b8:2b:68:1f:3a:a0:06:cb:
fc:d6:5e:4d:9a:24:14:bc:56:79:bc:32:3e:0b:97:
2b:9d:29:81:64:ec:fc:b5:ad:4e:af:ba:b1:e7:a1:
ee:d2:44:51:ce:ac:76:71:47:cd:3b:9b:82:44:30:
1b:3e:98:47:11:a4:de:11:a6:a6:4e:7f:31:9e:a9:
67:f7:8b:b2:ac:36:a9:da:90:3c:7a:47:dd:f7:78:
23:6b:66:76:77:d3:6a:c4:63:00:4f:2b:8b:7a:9c:
77:6f:78:e8:8b:78:9b:53:16:6f:5c:89:65:76:73:
0a:9d:76:93:23:85:7f:cc:89:60:bd:97:37:de:4e:
9f:af:84:21:67:ef:0c:07:e8:28:af:d0:6a:9f:89:
54:b7:a9:78:ef:0a:9f:45:99:3f:9d:be:b1:ac:7c:
81:08:4e:e3:a8:f5:37:8e:0e:7b:7e:9c:3c:d6:c4:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:91:0F:EA:09:49:E0:52:0B:B8:AC:BF:7D:6D:A3:8D:2A:8E:0B
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cd:82:f1:dc:4d:90:46:a1:32:de:05:74:ad:be:c4:df:7b:
32:be:dd:99:5b:8c:4f:90:47:95:71:fb:ed:b7:6c:3a:93:cb:
a6:c3:9a:bb:a1:c4:49:fe:47:b0:84:eb:42:d1:bf:b7:fb:83:
4e:38:7a:c3:1f:9e:5f:68:dd:78:bb:b3:60:84:de:f0:7c:88:
79:b8:99:7d:23:f6:00:76:e2:06:8c:88:c1:86:f0:08:8d:5d:
2b:5d:df:e6:51:50:22:f0:3e:32:41:c3:0a:bb:2a:b0:6b:0f:
7b:e5:42:25:00:ec:90:27:25:aa:af:4e:6f:2e:2f:49:0f:d2:
7a:06:01:eb:dd:e7:ab:33:c2:fd:b4:fa:3a:6b:14:d5:df:3d:
7f:4f:cd:20:5a:58:f1:86:dd:dd:22:f0:5d:e4:13:08:db:29:
82:b4:ff:52:d4:5c:7c:50:27:20:fb:ee:f1:13:bf:2d:56:f6:
67:09:e9:15:a1:36:cb:08:6e:c5:c2:d7:51:9d:4f:f0:f6:b8:
f8:96:f8:ff:c4:63:10:99:f7:c7:3b:09:70:95:a9:28:24:7f:
7e:4a:4d:32:8f:42:91:6a:01:34:a3:d4:07:b1:e9:04:36:da:
5e:79:7c:3f:3d:ac:9e:5f:a1:65:16:5d:d0:72:b4:a4:d8:c5:
37:3f:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:26 2025 by rpki-client