Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File: GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier: YhvWByLhbsn6c+828vxrjyx2tkKR4f5KOwSGTax/Cc0=
Subject key identifier: CE:9C:6D:90:8F:66:60:15:D5:6F:FD:10:3E:97:C6:9E:C1:25:E6:56
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial: 019A4E19096F0B90C542FA2496438E97D24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number: 0DD0
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: OQGqn+WWc29RWknVyehkjEoO2sRiOkqrSQ523bs76Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:09:6f:0b:90:c5:42:fa:24:96:43:8e:97:d2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=ce9c6d908f666015d56ffd103e97c69ec125e656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:ea:ae:1f:da:48:7a:59:04:4f:4b:18:f9:
4d:53:ef:a0:95:d5:cd:24:8b:d7:19:0c:ca:15:99:
7b:49:08:ce:8e:54:a9:99:32:63:4b:ce:2a:7f:5e:
27:d8:40:1c:ab:40:d4:51:9d:bd:57:9c:99:22:b0:
fa:25:59:60:11:37:0f:bf:80:c2:c3:fd:c6:13:20:
2b:d1:fd:53:73:97:8f:51:e6:66:32:0d:fa:35:bd:
a8:69:ac:5a:99:dd:da:0c:fa:89:9f:0e:1d:1e:34:
ee:6f:79:f8:7e:3f:4e:03:7f:cd:71:72:dd:cf:44:
2d:fe:42:d3:34:b5:bb:c7:b6:b8:04:47:49:e9:23:
38:f6:7e:ee:7b:dc:5e:17:2a:4c:05:fb:73:a7:33:
cd:92:0e:18:c6:b7:e7:a8:39:75:eb:57:00:ec:d7:
c1:33:8a:71:b2:3b:a7:e5:7f:56:e2:86:86:56:c3:
f6:80:c7:1f:f0:25:32:7e:42:d9:38:e9:e3:89:ce:
8c:f6:38:52:7e:da:b0:f3:6a:3c:16:b6:4a:96:aa:
c6:84:b4:6e:81:5c:b6:7f:ca:5c:a9:06:7f:eb:05:
b2:f3:56:4a:ee:46:b2:b4:87:c8:69:ec:4c:67:d0:
44:73:08:9c:19:8a:c3:d7:0a:3e:93:e6:a6:14:33:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:6D:90:8F:66:60:15:D5:6F:FD:10:3E:97:C6:9E:C1:25:E6:56
X509v3 Authority Key Identifier:
keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5a:aa:45:9b:ae:03:63:68:52:a3:40:c1:7c:2c:a9:8f:6a:
a8:e8:19:71:ab:d3:49:a1:0a:e0:43:97:5d:b5:c3:6f:5d:da:
e6:fc:ce:ac:9e:3c:42:1a:23:4d:3e:66:ee:85:6f:27:a7:1a:
9f:90:1b:f1:b8:9d:58:52:02:a4:d7:93:1d:f2:27:86:2d:09:
3a:a6:3a:ca:e3:c7:1f:71:b0:c4:55:bd:24:11:c6:ce:20:1a:
93:80:dc:f4:6d:5f:04:69:9c:22:c7:f6:7e:c7:9c:ac:79:54:
32:b1:e7:b9:bf:04:ca:9c:df:5e:bc:ca:da:3e:a7:0a:c0:40:
a2:77:c5:ed:63:a8:74:97:50:ee:df:0f:3b:4b:ba:13:e8:9b:
07:a4:ce:ee:de:68:3a:9a:23:4b:f1:6c:cd:03:fe:3f:cf:38:
dd:b5:06:3b:2b:10:8f:97:9f:59:86:e2:1f:6e:28:be:04:f2:
8b:b6:05:2f:1d:48:b6:79:da:95:a1:e8:1d:1e:fd:a5:cc:bc:
48:41:50:82:54:ef:cb:79:fd:ff:15:11:d2:28:78:df:55:e1:
ad:12:7a:a7:47:ca:f6:0a:5f:28:de:ef:68:a3:c3:a9:c4:76:
99:06:f5:a7:6d:35:4f:0f:49:4c:be:64:94:c9:52:29:48:06:
a2:21:68:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:47 2025 by rpki-client