Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: l1iJOzYHveQN5KiTpE4n67DFq7AKy0jUY1OYxfiEpUU=
Subject key identifier: B4:60:D4:09:67:D8:AB:A6:D9:0A:D2:EF:84:30:9F:9C:52:2F:30:D5
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019A4D05E1778F93921DE538FEAC2FC21C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 08B2
Signing time: Tue 04 Nov 2025 04:00:22 +0000
Manifest this update: Tue 04 Nov 2025 04:00:22 +0000
Manifest next update: Wed 05 Nov 2025 04:00:22 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: m2AjxovQjU7NWNxRJSH1g7aiuha8WLFq/kmEia5q1Pk=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:e1:77:8f:93:92:1d:e5:38:fe:ac:2f:c2:1c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Nov 4 04:00:22 2025 GMT
Not After : Nov 5 04:00:22 2025 GMT
Subject: CN=b460d40967d8aba6d90ad2ef84309f9c522f30d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:0d:ff:86:2b:f7:1f:b2:9d:e6:19:4a:93:
b0:bc:9d:7e:63:0f:8b:3e:59:21:52:11:77:77:59:
74:7e:65:2f:3f:b1:4e:09:2d:50:0c:22:90:ad:d1:
c9:97:00:a7:a2:fe:e0:41:09:32:16:6b:fb:10:14:
48:7a:d6:70:bc:eb:e1:51:e1:2a:3c:78:1f:21:78:
fc:04:81:da:cf:53:61:b0:16:cd:b3:f3:71:68:9e:
a9:be:96:53:b5:88:7e:bc:51:79:f7:66:fa:53:b9:
02:55:fc:43:79:08:1b:dd:15:55:8a:e1:bf:a9:c3:
46:f6:ec:93:d8:3e:9e:07:84:cd:35:e4:5b:38:d1:
d9:3f:92:1b:85:da:ad:09:80:f9:c7:d1:25:17:af:
a7:6e:c2:4d:d9:3e:9f:6a:a6:5d:22:14:fa:a3:e5:
25:6f:2c:00:b1:ab:b8:a3:77:75:fb:90:9f:55:9f:
b4:a6:9d:85:3a:a9:14:ee:ae:4a:b6:0b:79:58:ba:
e3:57:b7:ba:27:40:0b:9c:ce:09:ac:c0:79:5c:b2:
07:60:62:d9:9d:31:c5:2a:42:17:1a:80:de:36:7e:
ef:c2:e3:82:52:62:b8:3d:ba:9b:e9:b7:dd:0d:d1:
12:41:e9:27:35:24:4a:7d:4a:f3:e2:c6:0a:b8:f0:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:60:D4:09:67:D8:AB:A6:D9:0A:D2:EF:84:30:9F:9C:52:2F:30:D5
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:e2:cb:41:7b:98:73:dc:1c:47:36:dc:46:7a:7d:f1:19:
7d:39:90:86:9d:94:01:b1:b9:1a:af:1e:68:3f:2b:20:1c:6b:
6b:38:57:04:b5:72:7d:b6:4f:08:07:d8:c0:88:ee:f2:2e:36:
fd:c6:1e:3b:60:e1:8b:a5:f6:0c:55:39:7a:dd:b7:bb:b9:da:
6c:af:33:17:4f:dc:36:db:4c:ae:cd:25:67:05:dc:f7:a0:21:
e6:76:72:13:73:cc:2b:4f:db:5a:9d:65:e6:99:ff:7b:bb:08:
20:6c:a7:29:cc:e8:14:78:bb:79:26:5d:5d:56:36:5b:58:6e:
44:77:a7:1a:9a:12:5a:52:e4:c4:e4:c9:b0:fd:e9:02:4e:fb:
fd:c3:22:df:56:bf:e3:f4:f6:ac:c0:a7:af:52:62:1b:e0:f0:
76:0f:ce:6a:6f:8b:41:2a:16:75:12:55:d5:36:b2:ca:f2:dc:
64:ce:a6:53:a2:64:f2:6f:b6:e3:69:ea:d8:8a:aa:3a:84:03:
09:7a:53:01:b4:ad:69:a4:71:95:17:75:ba:a7:fd:c1:b0:d1:
14:19:3a:cf:59:c0:4a:38:0c:e7:fc:67:db:50:b1:4a:c1:52:
8c:4d:e5:13:d8:e4:ae:ea:b6:c3:e3:0f:89:69:25:4e:20:4b:
44:db:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:45 2025 by rpki-client