Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json)
Hash identifier: DvfGiY6WjJspWK3TvppDgJ5SBePtIMNyo2UozKsxagY=
Subject key identifier: 30:E0:42:30:87:7A:F2:E2:C3:9C:2E:5B:B6:80:E5:7C:FD:8C:3E:55
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial: 019A4FD09687A3AE1FF8A7C50B9B2AA16F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
Manifest number: 04D3
Signing time: Tue 04 Nov 2025 17:01:01 +0000
Manifest this update: Tue 04 Nov 2025 17:01:01 +0000
Manifest next update: Wed 05 Nov 2025 17:01:01 +0000
Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: xFbPAwLqPxgywWeUm1Giln7w6BnzA7oKF+Z9XTnxgUA=)
2: z6gRZQL9dktzDQCQibZshxDiKi4.roa (hash: 4kSTaNBCK4SMDmYd2plLBmE2hYKvGg7VL6yg3cqclD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:96:87:a3:ae:1f:f8:a7:c5:0b:9b:2a:a1:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Validity
Not Before: Nov 4 17:01:01 2025 GMT
Not After : Nov 5 17:01:01 2025 GMT
Subject: CN=30e04230877af2e2c39c2e5bb680e57cfd8c3e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:6a:6e:b8:30:81:1f:67:da:57:07:91:c2:
bf:2c:6b:31:a5:c2:23:ee:a7:3d:bc:a5:1a:ef:f5:
50:d7:34:8d:91:41:f1:33:0f:6a:54:91:49:b6:42:
a7:b4:f0:74:ce:fc:56:53:0a:85:63:94:9d:c6:b4:
65:af:70:af:11:d8:3e:07:4c:35:02:67:40:e7:21:
1d:10:57:1b:ab:f5:3f:e8:8e:72:c6:2b:ec:b2:2e:
78:45:88:86:ac:97:4c:ba:22:3b:14:3d:15:cb:06:
d1:3a:aa:97:57:71:d3:a8:e8:0f:3c:c3:d5:8d:ff:
58:31:61:4e:8c:5c:fe:37:cf:24:09:a5:eb:7b:1a:
7c:5d:5e:d2:74:ed:90:83:52:6a:fa:ea:3d:c8:80:
71:b3:c8:30:46:e9:3d:94:a1:f7:c2:79:64:ed:92:
35:08:69:3b:5b:2c:17:b7:e9:85:f6:e3:e6:f8:8c:
ca:63:d7:e0:ed:ff:7c:e1:f9:44:21:c7:00:2a:d1:
c3:77:68:fb:13:41:34:a1:cc:64:ff:f6:6c:c1:af:
6b:10:11:44:fd:9a:b3:86:82:4d:b7:b9:70:b7:96:
9e:1f:56:41:15:d0:1b:ad:bd:0b:c4:a1:27:96:7c:
e6:af:b0:bc:da:9d:9c:9a:b9:ee:46:31:1f:ff:73:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E0:42:30:87:7A:F2:E2:C3:9C:2E:5B:B6:80:E5:7C:FD:8C:3E:55
X509v3 Authority Key Identifier:
keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c3:90:fb:31:e8:4d:8c:9f:f4:dc:85:e7:e3:3a:39:c0:d8:
cf:1b:2f:42:75:dc:05:82:a3:91:9f:77:db:62:97:0c:93:fd:
c4:e4:44:de:b2:f5:a3:25:52:c7:30:87:27:2c:26:20:27:61:
04:71:50:84:09:dd:dc:36:6a:ca:bc:91:0c:43:7f:17:06:e3:
a2:f6:6f:7e:9d:a1:cd:96:27:18:49:d7:d3:a7:13:a9:2e:f8:
a0:7d:1f:6d:46:b3:2c:40:c9:d8:65:6c:be:bf:ee:f0:d0:f5:
d1:e2:54:dd:43:55:f1:cd:da:e8:b2:5b:6e:34:33:f1:f7:72:
ac:94:30:8d:4c:2f:a7:1d:24:cf:e3:0f:1e:59:d9:3e:a0:e7:
8b:ce:66:f7:de:59:46:ac:00:71:4e:d2:ca:9e:33:a1:86:7f:
37:b5:17:84:10:65:88:90:04:26:b0:a0:9c:76:ac:25:29:90:
b1:66:d5:f5:13:72:3b:e4:0d:f5:1f:a6:91:6d:77:9a:5f:af:
f9:51:da:70:66:1a:2a:71:23:25:ce:a4:2e:e7:7c:b9:ee:75:
e9:8a:3b:14:3e:39:61:f2:00:a3:1c:59:e6:e9:d6:6c:f9:55:
ee:b0:a5:c9:76:21:8e:1e:d0:7b:37:74:8a:2e:d1:d5:88:fc:
7a:f0:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:14 2025 by rpki-client