Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: 41aP5VHqXvqDsbMIgB/wSUKm2dvQ+cciFXtiv0UrVeQ=
Subject key identifier: 8E:73:89:20:99:15:BF:E8:31:30:4D:67:80:A4:BD:51:7F:7B:98:CD
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019A4FD03C468F77557972170A9B3B62815A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 1446
Signing time: Tue 04 Nov 2025 17:00:38 +0000
Manifest this update: Tue 04 Nov 2025 17:00:38 +0000
Manifest next update: Wed 05 Nov 2025 17:00:38 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: n9BTpE6BDCC4bvoXXsHRqX2IspEcBzMfn0MD6pXsm+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:3c:46:8f:77:55:79:72:17:0a:9b:3b:62:81:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Nov 4 17:00:38 2025 GMT
Not After : Nov 5 17:00:38 2025 GMT
Subject: CN=8e7389209915bfe831304d6780a4bd517f7b98cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:71:ea:30:a2:c4:57:f4:65:e3:9c:5b:5d:
30:4b:fd:55:64:64:cf:5f:a6:d2:d0:8d:96:ae:54:
d5:1e:ac:2f:2f:83:90:35:25:43:79:56:ca:86:95:
b3:eb:94:5b:54:d5:75:45:60:11:64:a8:1b:50:d2:
41:00:45:23:8e:5d:68:5f:0c:db:4f:f7:73:f4:8c:
7e:43:d0:6e:24:76:ed:c6:67:83:75:3b:51:91:5c:
23:18:21:e1:65:d3:33:a9:3d:c9:4b:80:f8:23:0d:
eb:11:87:8b:e9:95:ba:1d:36:19:2f:6a:a1:f8:5a:
fb:28:01:42:04:e3:af:4e:6f:65:f0:2f:0f:cc:4a:
af:9a:2f:b8:26:29:f2:48:25:12:64:90:cb:66:1c:
c4:39:39:e0:a8:2b:99:e0:03:68:49:73:80:a1:a0:
47:e0:87:14:97:97:c7:d2:49:9c:6a:3a:d4:db:be:
fd:8a:47:da:b5:f3:94:1d:2f:51:8a:6b:8a:94:96:
c9:54:d5:6a:aa:2b:3c:49:ac:33:06:94:6a:2b:12:
0f:1e:8c:b7:1e:b4:a8:e4:72:a2:51:60:ab:3c:c5:
99:be:0f:b1:a0:e9:d7:2c:1d:8c:57:b6:47:ea:fa:
94:79:ef:05:c2:79:7e:0d:bf:92:b0:cc:64:bb:1a:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:73:89:20:99:15:BF:E8:31:30:4D:67:80:A4:BD:51:7F:7B:98:CD
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:85:02:60:26:39:b4:63:53:63:7f:ff:76:f1:0f:bd:ff:2b:
f5:18:14:ec:7e:68:88:9a:4f:3b:a0:48:16:28:12:28:ad:b3:
37:1b:77:bf:a7:c2:55:54:e8:77:76:98:ad:0b:25:4f:27:60:
69:1d:3a:34:ca:62:11:75:96:30:44:c4:fb:15:bc:77:f0:4d:
29:d0:62:ce:35:0c:2b:8b:9c:b8:1c:90:79:50:ac:bd:b8:51:
c1:de:59:7a:04:f8:4a:73:01:91:ef:92:47:b6:4a:37:38:60:
8f:7b:7b:9d:f6:32:79:36:c9:c0:86:88:bd:a0:f6:dd:8f:28:
be:1f:b3:32:0a:3b:2c:08:4b:f0:12:0a:e0:b7:48:9b:af:ae:
b4:c6:1c:03:66:12:9d:13:09:5f:f9:ef:06:f2:3c:08:18:94:
34:f5:a7:45:67:4f:b7:3e:a0:d6:97:cb:0c:e4:7f:8f:99:4f:
ee:01:2c:3f:99:8a:24:a6:05:d9:a1:da:4d:3e:18:35:c3:fc:
b5:74:e1:1f:76:4e:a1:19:5c:90:3a:74:0e:20:b7:00:5b:47:
e7:c9:b6:92:d2:97:33:9c:56:e6:3b:ed:00:6c:67:d1:38:8b:
b7:c3:24:c4:3a:f0:8d:a5:9b:87:1e:f0:46:7a:2b:45:60:11:
80:02:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:44 2025 by rpki-client