Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: k3PixS9pHGAqHmWdITzwSpMCybX+XZ5T+XGdWBto3Vs=
Subject key identifier: 54:5C:8D:07:60:84:15:67:F6:C4:93:DE:5D:E6:91:68:1E:8A:3B:E7
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 019A4DAAC2B565E3F2FAA1B2452F38AAEC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:27 +0000
Manifest this update: Tue 04 Nov 2025 07:00:27 +0000
Manifest next update: Wed 05 Nov 2025 07:00:27 +0000
Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: CJ+CfUXmEtJiF665ogTV8Cdhrvt2vv1wTyCjViz655s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c2:b5:65:e3:f2:fa:a1:b2:45:2f:38:aa:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Nov 4 07:00:27 2025 GMT
Not After : Nov 5 07:00:27 2025 GMT
Subject: CN=545c8d0760841567f6c493de5de691681e8a3be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:6e:70:46:57:2e:5b:b2:3b:47:99:d9:7d:
cd:bf:da:9a:92:80:c7:bc:94:a3:96:25:fa:5d:cf:
c1:42:f7:09:43:45:1e:10:3e:26:9b:cd:b1:1a:4e:
69:89:e7:bf:60:b4:dd:2d:56:29:0a:39:ce:2f:9f:
5c:ce:2a:02:f4:59:71:b1:92:b6:b9:99:79:96:d5:
d0:65:06:b0:51:82:13:6f:57:69:46:cd:10:17:4c:
55:5b:1d:28:94:d0:30:10:97:66:66:32:0d:07:b1:
82:30:46:99:f1:9c:e5:bb:de:21:c1:3b:1c:d6:37:
35:c1:4b:d5:3f:80:31:db:b6:5e:b6:5f:74:67:41:
a1:44:4f:d9:14:6f:31:dc:ca:6d:2a:c5:b4:e1:ac:
50:df:a1:bc:f2:59:88:b7:40:61:df:bf:cf:e0:03:
a9:d6:7b:c2:11:c9:d8:22:d9:0e:f5:71:b6:1b:47:
0d:4a:16:3d:2a:33:61:53:6c:ac:16:71:0c:85:19:
30:4b:9b:28:86:a8:3c:69:cd:78:64:09:47:4b:8f:
c8:b9:9f:d8:47:41:d8:7b:58:a8:62:6f:9c:b3:bc:
fe:9a:81:9f:1a:d3:75:c4:56:66:50:fa:5d:c5:57:
54:7c:67:5f:8c:72:7d:5d:bb:38:52:38:75:76:c8:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:8D:07:60:84:15:67:F6:C4:93:DE:5D:E6:91:68:1E:8A:3B:E7
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:45:c7:dd:63:a3:ce:cf:e6:90:fd:18:18:bb:10:d3:12:64:
b5:cc:be:3e:71:e9:c3:b0:9e:dd:56:2b:25:8d:b9:7b:7a:31:
90:21:cb:74:d6:e4:87:8d:ab:b4:c6:68:4b:71:d0:81:f7:c4:
0a:de:52:20:e9:f1:ed:6d:dd:46:97:f1:fb:40:2c:41:3c:9e:
ff:cd:27:c3:4c:f0:5f:c3:2c:03:73:0c:47:d1:f9:3b:93:ab:
3b:e6:f9:74:b5:77:e3:5d:9c:d0:e6:7e:bc:9e:04:66:7f:89:
f0:2a:23:b3:75:2d:89:0e:f9:a5:fa:68:dd:06:78:27:54:a9:
fe:19:66:5f:09:3b:6f:d8:7a:9a:a0:2e:75:8b:fe:82:8f:f4:
92:9f:ea:98:1c:40:2a:a2:ec:a8:82:b3:bb:bd:80:f6:5f:ec:
e1:ab:48:19:4b:81:7d:e3:4d:ce:ba:b8:2c:b9:96:8b:29:9b:
99:70:90:7c:9a:f6:d5:d2:30:9b:b1:b5:f6:61:ee:b5:17:22:
4f:e5:89:8f:e3:67:94:dc:67:38:34:85:98:4b:fc:90:03:ec:
bd:ca:33:86:fb:6c:57:a8:52:9b:a9:61:c4:5f:cd:54:d0:08:
ad:01:f0:a7:64:8d:37:49:c5:04:70:51:bf:a5:fe:29:ec:89:
13:04:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:40 2025 by rpki-client