Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File: GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier: 4eTHSHQI1S7joh/1Tou3N5JmnKd0Ybx53ZkUKj3Qn+0=
Subject key identifier: F5:AC:E4:DA:1C:E6:73:2E:F6:F5:30:55:0F:68:4B:0B:D3:F4:01:EB
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer: /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial: 019A4FD03663F8A1AE8D58F2DD04C9018124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 17:00:36 +0000
Manifest this update: Tue 04 Nov 2025 17:00:36 +0000
Manifest next update: Wed 05 Nov 2025 17:00:36 +0000
Files and hashes: 1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: KggSMJfRru3AcBaLtflUz3Goj9QvSzGL2ZIKK8MEBZE=)
2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:36:63:f8:a1:ae:8d:58:f2:dd:04:c9:01:81:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
Validity
Not Before: Nov 4 17:00:36 2025 GMT
Not After : Nov 5 17:00:36 2025 GMT
Subject: CN=f5ace4da1ce6732ef6f530550f684b0bd3f401eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:2e:6e:2d:60:0e:c1:bb:f8:b9:c7:93:dc:
e3:cb:ab:bb:12:d2:86:ae:2a:3e:58:06:8f:95:60:
f0:1f:5b:bc:6b:5c:86:ed:44:5c:fd:57:0d:75:e4:
26:59:bb:22:e7:ad:35:38:5c:ab:44:07:30:ab:b9:
1b:27:5d:ba:38:b0:72:55:23:41:81:1f:d7:d2:d1:
dd:74:9b:23:e8:fd:fc:56:85:2f:8d:81:3d:4f:7c:
a3:3e:58:3e:f8:a3:3c:66:b2:d0:af:cb:8e:df:f0:
ab:b8:c2:05:59:58:df:39:82:e8:b0:e5:b5:fc:5a:
c4:62:95:92:98:6b:31:c6:9c:c0:ff:87:c9:f1:e7:
47:7f:0b:4f:3b:70:04:5a:7f:b7:81:e0:32:1a:b8:
54:bf:8d:49:ab:ee:80:4e:c0:07:a7:da:38:68:07:
c8:cb:dd:af:85:5a:50:c0:89:92:33:09:b8:dc:fb:
cc:a9:92:92:eb:3e:b9:d1:4e:42:f9:00:f1:12:64:
0c:94:a7:4c:67:93:52:34:e0:9b:e3:bd:f5:40:12:
98:82:89:f6:9f:d9:2b:96:58:c9:70:90:e6:36:24:
7f:9b:8c:13:63:96:d7:8e:3d:49:51:ea:94:58:60:
86:7f:40:86:2a:68:6e:b9:bb:69:66:04:ca:b9:db:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:E4:DA:1C:E6:73:2E:F6:F5:30:55:0F:68:4B:0B:D3:F4:01:EB
X509v3 Authority Key Identifier:
keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:33:38:ce:1c:8c:83:b4:a9:df:ae:de:bc:30:ed:2d:cd:00:
a9:41:0c:4c:9b:7e:f4:76:62:87:14:c0:d3:e4:a9:af:82:39:
c6:1d:a9:82:b6:9d:1c:09:6b:26:b3:d3:b9:3a:84:0b:40:17:
ea:1c:2c:ce:1d:8b:7a:4b:a7:cb:d1:1d:41:7f:46:ef:0a:69:
e8:32:49:26:be:fa:e4:1b:4d:2f:d6:76:32:0b:e0:f1:8b:e5:
b8:e2:09:55:c3:1f:17:57:1c:6d:07:0e:0f:98:f3:ad:c8:10:
22:15:e7:80:8b:53:b3:e1:19:f5:aa:f5:6d:f4:d2:c8:d7:1a:
da:4a:da:43:e8:c2:8a:27:db:2e:b0:aa:e2:15:8e:72:5b:04:
a8:81:72:02:1a:f8:5b:54:33:fa:b2:af:37:62:33:9e:0c:83:
98:26:c9:f7:67:49:0e:45:28:10:33:4f:71:3e:b0:30:0e:33:
5f:66:cd:d3:77:66:64:54:4a:f8:cd:b8:88:f2:24:4a:4f:61:
a6:77:75:74:ef:8e:51:b9:4c:ba:b3:31:8f:cb:86:db:eb:61:
30:6f:e7:39:f8:13:b4:4b:df:18:b9:31:7c:83:34:6b:42:9b:
59:9e:f5:00:b3:70:02:4f:39:09:68:76:a9:8b:9a:bf:a1:da:
1b:d6:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:41 2025 by rpki-client