Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: lSq77wpuuTh+bojRI33unpFPxIDtzunzvj/v76TteXk=
Subject key identifier: 5E:A6:D7:13:14:08:94:ED:28:63:47:1C:54:1B:B8:A0:22:42:CC:FC
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019A50E3A5818DB043BA8A4F0D75EFA380C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 0436
Signing time: Tue 04 Nov 2025 22:01:27 +0000
Manifest this update: Tue 04 Nov 2025 22:01:27 +0000
Manifest next update: Wed 05 Nov 2025 22:01:27 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: 5Eggp88PmTKrdjiYY69+vO8q7cJQeZ0KxsoBLzKsc/A=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:a5:81:8d:b0:43:ba:8a:4f:0d:75:ef:a3:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Nov 4 22:01:27 2025 GMT
Not After : Nov 5 22:01:27 2025 GMT
Subject: CN=5ea6d713140894ed2863471c541bb8a02242ccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f0:7c:23:3d:44:b0:f0:06:bf:e9:63:65:d5:
55:ad:d7:83:f3:fd:f4:e3:ca:28:d7:22:ff:f9:be:
ad:b4:25:98:1e:e2:21:fd:70:ff:f8:59:a5:2c:da:
01:74:ad:d0:3b:fa:07:c6:74:a9:d7:ce:8a:3a:3d:
40:75:55:1a:17:22:f8:b7:c0:e8:c6:68:fb:44:b5:
e1:7a:35:bb:92:8e:c4:8e:47:f4:5c:6d:c2:03:cb:
e6:32:ea:27:34:31:8e:91:d6:04:f1:4a:29:20:5c:
1e:b9:c9:65:51:d1:05:b4:f2:be:0d:07:f9:b6:fa:
50:e8:ac:2b:33:46:c7:08:f2:17:29:3a:62:de:72:
d2:93:ba:a5:91:c7:4c:30:4e:3b:ac:03:ef:d6:13:
4c:4e:0e:4a:89:6a:f8:c7:f7:79:6b:ca:8d:b9:27:
60:66:40:2b:cd:fa:38:25:05:b9:8e:91:cd:a0:e0:
d6:a8:18:55:85:d4:80:1a:28:14:02:62:27:bb:1e:
dc:2d:e5:2d:0b:c6:a3:a8:0b:a1:c8:e6:63:39:ee:
8c:76:fa:36:cc:38:11:44:03:0b:b5:ce:cf:c4:18:
c4:9f:48:08:4c:f0:7c:41:00:ad:ca:89:38:d4:62:
5a:8c:6a:39:8c:6b:1b:34:08:ee:50:50:10:22:88:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A6:D7:13:14:08:94:ED:28:63:47:1C:54:1B:B8:A0:22:42:CC:FC
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e7:15:9f:33:3f:5d:48:db:80:18:65:b5:c1:d6:7d:be:0b:
e7:52:0e:62:21:1f:35:8e:8f:8f:49:6f:03:8c:3f:a2:df:91:
b6:b6:81:69:3d:97:5d:bf:9f:c4:56:e9:23:e2:53:7e:25:cb:
b9:e6:b4:2b:b7:ef:d3:8d:f7:ae:d8:a4:77:ea:2c:db:4f:ca:
5b:24:be:86:a2:ae:28:7e:91:05:9f:62:e6:a9:9c:4f:2b:1e:
dc:e7:84:44:52:41:84:d4:e2:71:05:2c:12:b0:af:e3:3d:51:
8e:a3:e5:50:15:90:57:75:6f:76:77:67:8f:de:12:a1:65:58:
d5:62:29:a3:a1:c5:f8:fd:4c:d7:82:b3:d3:01:5b:82:ba:a3:
82:ac:93:f5:4c:f0:7b:69:98:ad:69:18:cf:d5:af:5b:87:b6:
48:c3:6d:44:12:c2:9c:b3:1d:2d:1c:89:ea:6a:96:06:b1:68:
a8:cf:ff:55:36:fe:74:69:f9:2d:37:d3:22:4b:a1:87:c2:3c:
51:0b:a5:d9:3b:58:62:f0:43:b3:64:cf:d5:22:ac:6b:fb:a8:
f6:4b:c6:d7:91:5e:7e:4e:af:14:02:38:ae:25:c8:2d:14:23:
03:20:05:8f:75:bf:27:60:86:ae:ac:64:92:00:56:c4:2b:42:
8a:e8:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:20 2025 by rpki-client