Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File: GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier: 49/ZZJlli/FIYTjHu1PPAL/rFKfR8+NgYsu4TyFsJ0g=
Subject key identifier: 33:C9:8F:73:41:77:5C:58:BE:4C:62:D4:3B:31:B3:73:84:00:E9:E7
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 019A53AD5526CE917BE883190FD077BCB282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number: 1012
Signing time: Wed 05 Nov 2025 11:00:59 +0000
Manifest this update: Wed 05 Nov 2025 11:00:59 +0000
Manifest next update: Thu 06 Nov 2025 11:00:59 +0000
Files and hashes: 1: GMiGJIQPkTJHbljDh9-Qbgs-ofQ.roa (hash: gehqPfu1dznuITregHu34HVG8SqD/GP87okupLZENG8=)
2: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: vAVIfwTFRxSRN4frwq4OQsMElKvPVY4zqsyBtnZpLe0=)
3: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (hash: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:55:26:ce:91:7b:e8:83:19:0f:d0:77:bc:b2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Nov 5 11:00:59 2025 GMT
Not After : Nov 6 11:00:59 2025 GMT
Subject: CN=33c98f7341775c58be4c62d43b31b3738400e9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:61:de:3d:db:71:2a:bd:14:26:87:81:94:
e4:ef:e2:e3:79:8f:78:88:ac:4f:9e:22:47:52:36:
71:54:96:ad:b2:b2:ee:be:ee:8a:61:01:42:70:13:
aa:75:a5:cf:26:f8:c7:8e:ea:65:d7:be:82:bd:99:
2d:69:0d:87:8c:91:f7:da:c5:47:46:13:2a:f5:f0:
05:68:dd:39:d2:dd:07:96:f2:40:85:e9:f5:03:d0:
e3:f4:c3:b6:ac:8f:91:75:d7:cc:0a:dc:d3:e8:cc:
2a:4d:23:c2:b8:bf:4f:12:40:4d:34:9c:52:28:74:
8c:30:94:32:d9:c4:d5:ae:c3:45:6c:44:44:5b:01:
4c:a1:e4:0f:a0:48:80:a6:f6:4b:9c:23:85:00:aa:
2d:0c:97:90:e2:e4:74:87:98:8d:57:1d:a2:73:21:
19:62:f8:10:06:2c:2f:23:22:2a:03:f9:d1:81:ab:
49:de:dc:50:8e:7c:4a:dd:48:50:8c:35:04:5d:9e:
d9:fc:53:85:45:9b:78:63:9f:f6:91:26:c1:28:6d:
dd:87:e4:2e:6c:a3:74:3b:5a:76:67:4d:b2:ed:4a:
44:98:9d:34:b2:a2:b5:b1:82:c8:53:e4:6b:38:08:
17:43:e2:97:57:67:b7:3a:b6:9d:7a:6c:08:b0:51:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:8F:73:41:77:5C:58:BE:4C:62:D4:3B:31:B3:73:84:00:E9:E7
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:46:37:6f:d0:62:e7:06:e9:bf:fe:27:ab:3f:32:d2:50:9c:
e8:d8:2a:03:eb:00:81:54:22:3d:fe:55:c0:99:32:52:d6:7f:
68:3c:51:a0:8c:93:51:71:cc:ae:91:8a:fc:4d:2e:cc:16:9f:
7d:0b:9f:6c:ac:1e:f9:f0:12:06:6b:35:ca:09:33:ab:6c:a7:
ea:f5:8b:b4:29:96:97:36:d9:c9:b7:ed:50:29:3d:5e:8b:f1:
db:a8:ea:7b:27:24:e8:f0:96:c0:f9:ee:84:2a:bf:63:5d:f5:
a3:a8:96:91:dd:c5:2e:83:51:26:8c:24:74:f2:ce:83:5c:4d:
01:97:d1:78:fc:2d:42:00:ce:2a:03:68:d5:7a:36:27:e3:c5:
da:48:44:13:29:42:a2:54:71:1d:7a:08:41:5d:61:e5:bb:60:
31:68:2a:b9:52:d6:3a:04:11:7e:ff:73:82:3f:95:4b:cc:b0:
fc:61:4b:30:22:e3:ca:fb:32:39:9b:74:69:37:d3:02:8a:c2:
ee:eb:4a:97:4a:3b:7f:5c:48:12:c2:8a:09:9c:06:32:35:65:
ef:37:1e:55:bb:c4:07:38:f7:5e:fd:46:04:6f:4d:9c:06:68:
fb:98:11:f7:9e:6f:64:cd:7d:df:17:5a:ee:76:6f:42:0c:0a:
4b:7c:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:00:49 2025 by rpki-client