Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: 1xYsWEcox185AULz3ExamI4OoB+j6UeWXCFWMnmk73g=
Subject key identifier: C8:00:15:61:4B:07:8D:C1:D2:EF:27:BA:83:8F:81:32:37:A3:85:04
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019A503E05A8F5A5624620B0DEF6BB352034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 0236
Signing time: Tue 04 Nov 2025 19:00:33 +0000
Manifest this update: Tue 04 Nov 2025 19:00:33 +0000
Manifest next update: Wed 05 Nov 2025 19:00:33 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: NjNLK4X93EKJ4oEZ1GNiumwyVFrijZ4+psecGXLxBXw=)
2: rGfdr756R5fC-L5KExb4TDe2AiU.roa (hash: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=)
3: uNOJmAq6voVkPfj182da4gb5W7g.roa (hash: /Vgo6Tc+QicjXS2eidHAg9cx4rFLuic3fsDr6FFDDKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:05:a8:f5:a5:62:46:20:b0:de:f6:bb:35:20:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Nov 4 19:00:33 2025 GMT
Not After : Nov 5 19:00:33 2025 GMT
Subject: CN=c80015614b078dc1d2ef27ba838f813237a38504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:50:01:25:ba:90:26:de:38:5d:18:eb:91:
db:b3:ba:fd:95:83:19:35:c3:62:79:39:4d:cb:eb:
0f:58:1f:59:ff:d4:b4:c3:b0:bb:29:1a:66:1e:35:
e0:ab:d4:90:bc:3b:34:ba:0f:42:1e:e8:b2:1e:94:
d8:7b:3a:ca:c9:2e:39:12:0e:bb:00:9d:e5:00:4e:
79:a5:97:cd:f8:e0:66:f5:bf:a8:0d:3a:d1:23:b7:
3c:d4:68:e1:72:a8:87:10:ae:f0:61:0b:45:fe:6a:
dc:95:28:40:66:c7:fb:e0:51:6d:10:5f:30:10:9b:
d8:ec:eb:47:65:d9:57:d7:ff:e9:8c:e0:93:0a:ad:
7c:5a:9c:46:f0:ee:17:c9:61:18:d1:02:cc:42:cf:
67:03:d8:c9:32:a8:f4:ba:b2:1b:56:4b:22:34:ab:
f6:bc:1d:4b:3e:eb:8f:75:9b:54:a8:57:96:dd:25:
78:c1:c0:17:d7:f4:c1:e4:19:ed:f1:dc:06:1d:e3:
b3:db:db:50:bd:22:2f:c7:7b:67:98:3f:aa:aa:0f:
5d:9a:cb:3e:b5:ed:bc:b7:7c:5b:49:8a:64:aa:5f:
b2:78:eb:75:db:7c:99:b4:8d:a5:f1:aa:5d:b5:d7:
2b:c7:b7:19:28:ca:00:b4:e2:bf:73:33:1b:ea:4a:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:00:15:61:4B:07:8D:C1:D2:EF:27:BA:83:8F:81:32:37:A3:85:04
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:01:61:45:00:5b:14:e2:df:f8:63:37:72:39:32:36:2d:
62:2d:92:c8:29:df:bf:a9:0a:78:bc:54:72:12:db:c3:eb:e2:
51:ad:1b:a0:d1:ad:2c:47:6e:1a:1f:0e:72:48:16:90:0c:48:
4f:52:d7:c2:1c:dc:6f:f3:55:a9:12:b2:10:20:5c:57:24:36:
57:a6:32:9b:6a:f4:d7:09:8f:37:da:10:7f:73:98:df:fc:3e:
0f:75:10:07:0f:4a:b8:ed:7d:6f:d4:32:73:1b:8f:66:fc:16:
b1:43:70:3d:b4:e4:3f:15:3f:0c:7a:3e:1b:0a:03:93:a0:ce:
f7:a2:27:ac:25:0c:9c:24:4d:21:f3:3c:12:17:e3:e6:4e:f8:
19:0f:06:62:2c:aa:e7:dd:71:15:45:33:66:50:a5:5a:07:89:
c7:da:87:d4:8a:b6:ee:11:13:03:fa:a4:b6:08:d1:2d:c0:5e:
34:2b:c8:8e:f0:e3:60:a0:d4:99:13:59:01:81:b5:2f:2c:a8:
14:2b:38:75:28:35:de:a8:5c:9b:46:38:75:61:fd:b4:ba:f5:
95:c6:a4:01:36:64:2e:2b:19:48:5b:ce:32:34:48:86:cf:cd:
f9:5a:2e:62:bc:a5:c2:45:6f:43:bb:b7:7b:9a:8e:41:0e:d8:
2f:8a:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:55 2025 by rpki-client