Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: vsuxjfPC7A8lBwhs4RlmvPcvFylF0pC0zGOFqUrN3qw=
Subject key identifier: 4A:73:F8:99:B3:94:C7:A7:06:79:F3:8A:C4:71:F8:6C:3D:FD:F6:9E
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019A533F1F2370E10B64CBB2DC8D565B8A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 09:00:36 +0000
Manifest this update: Wed 05 Nov 2025 09:00:36 +0000
Manifest next update: Thu 06 Nov 2025 09:00:36 +0000
Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=)
2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: LpLieFnDnUhjwvsbaMR12Na44s5K74HEdUPnpZfaWLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:1f:23:70:e1:0b:64:cb:b2:dc:8d:56:5b:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Nov 5 09:00:36 2025 GMT
Not After : Nov 6 09:00:36 2025 GMT
Subject: CN=4a73f899b394c7a70679f38ac471f86c3dfdf69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3e:db:cb:5f:51:bb:7c:72:9f:b4:0b:4a:ad:
f1:f9:97:d2:c6:59:61:8f:da:f8:a4:2f:84:c3:a2:
a2:86:9c:cc:6d:09:ad:9a:b2:88:56:74:63:9f:16:
a2:cd:22:33:b5:fe:7b:3a:8a:a9:6c:7b:f6:aa:52:
77:4f:a3:63:ab:05:7e:61:10:7f:56:eb:dd:bb:2e:
7d:00:ee:9e:48:30:53:b1:b3:d4:fc:28:1a:57:49:
64:fe:13:72:32:46:b6:b1:c9:33:b3:26:b7:61:01:
a7:e7:d9:ea:a6:a8:b1:c9:65:6c:57:72:e0:6d:94:
dd:30:a9:ab:d2:e1:c4:3b:d7:f6:c0:c0:a4:15:63:
98:ab:48:d9:10:a8:89:cb:00:42:f1:a1:45:64:cf:
31:ff:14:5c:c4:fc:15:c6:18:aa:3c:e6:cf:e8:30:
38:e6:be:81:83:31:79:bf:ec:a8:02:3a:24:41:07:
3d:8e:4a:6b:76:2a:37:56:a0:6c:a8:42:63:d4:67:
89:07:eb:71:d3:81:9c:bf:61:9e:cd:ea:8a:c7:25:
f9:ab:9e:70:d8:f4:76:47:36:ed:14:3a:18:02:7b:
10:6c:a0:63:49:fb:60:fb:06:5f:6e:32:db:0b:1c:
f7:29:3f:d7:0c:63:35:23:37:b2:fc:91:6b:45:59:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:F8:99:B3:94:C7:A7:06:79:F3:8A:C4:71:F8:6C:3D:FD:F6:9E
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:de:2b:a6:6b:ca:47:44:1e:21:b1:9c:35:9f:c7:08:46:
8c:78:33:bf:c0:a5:00:98:3f:db:ec:2f:66:93:df:e5:9a:a9:
50:c1:28:53:b5:53:e5:51:c0:aa:6e:be:0c:d0:ee:4c:47:0b:
1b:d6:7d:43:17:e9:e8:54:37:06:45:af:24:e7:2a:8f:b8:da:
a6:28:d9:9b:e1:92:d6:a3:26:0c:07:59:54:0f:3b:04:5d:1e:
7d:a7:33:41:74:95:11:3b:4e:5e:1c:34:17:a0:2d:55:78:1d:
3a:55:e1:f8:59:d0:9d:ec:59:a2:aa:06:52:b2:ba:95:da:10:
b4:0a:e2:3d:1e:49:66:17:02:c6:b6:ee:63:53:d3:dc:64:69:
72:34:36:81:57:ea:e0:25:0a:0e:a8:6e:1a:01:a8:22:02:a7:
f0:c5:bd:a9:be:a6:56:35:81:23:14:16:90:82:16:30:d5:02:
e3:de:c7:07:53:52:86:01:90:25:ee:85:67:20:62:56:90:a3:
54:87:b5:95:19:34:63:8e:44:4b:e3:a1:d1:b9:90:3f:50:e7:
f0:e6:fb:99:fb:a0:a8:a6:57:5b:dd:29:f1:93:6d:13:ac:04:
4a:57:b0:4a:25:28:13:52:1b:9c:25:18:7e:33:69:d2:2f:a1:
0e:e0:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:27:08 2025 by rpki-client