Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
File: geY5cEKnqWRfwS91nQJhldfL_Vg.mft (raw, json)
Hash identifier: 7qW863501PYgEI8I6p1Te9eUCmBc+H79vhl11XAhOIg=
Subject key identifier: 78:30:12:DB:5D:9C:D9:45:65:36:17:04:52:FB:0F:0B:3B:53:35:C6
Authority key identifier: 81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
Certificate issuer: /CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Certificate serial: 019A4F6239AAFA7E904C012D67B2953AD904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
Manifest number: 0E18
Signing time: Tue 04 Nov 2025 15:00:28 +0000
Manifest this update: Tue 04 Nov 2025 15:00:28 +0000
Manifest next update: Wed 05 Nov 2025 15:00:28 +0000
Files and hashes: 1: geY5cEKnqWRfwS91nQJhldfL_Vg.crl (hash: 2RAiaOblz31toXU/HA17AUxE1IMeuXRudttr8Cc3wa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:39:aa:fa:7e:90:4c:01:2d:67:b2:95:3a:d9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Validity
Not Before: Nov 4 15:00:28 2025 GMT
Not After : Nov 5 15:00:28 2025 GMT
Subject: CN=783012db5d9cd9456536170452fb0f0b3b5335c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:5d:61:8b:48:3f:09:ad:ad:91:12:4b:9f:
05:cd:e7:a1:a4:85:f8:2f:51:95:5b:cc:3a:fb:f3:
af:b6:fd:d3:e1:e4:48:cc:b4:bd:82:23:24:88:a6:
24:a9:57:88:0a:18:67:88:96:6f:fa:35:a7:ca:d0:
43:46:3c:10:ef:3e:69:a6:7a:86:91:c9:f2:a5:37:
5b:10:71:f8:0f:53:3d:c9:7a:cb:19:59:22:4a:31:
56:bd:1e:dc:0a:c0:7c:dd:73:d0:fe:cd:1c:c9:97:
8a:8b:e6:0b:e3:57:e6:da:72:23:52:ba:c1:23:d0:
11:a6:53:89:d7:45:90:8f:82:99:e7:0a:4b:d4:2e:
57:2e:94:ce:9b:fb:cd:07:a3:43:22:19:69:50:c4:
92:bd:c2:d3:9b:c7:ce:da:0b:c0:60:f6:0b:ed:7f:
53:d2:ce:5d:d4:85:fd:3d:1b:a1:ec:24:6a:b9:22:
d2:63:e6:b6:e5:7d:ef:69:d2:67:8f:15:fb:7f:4d:
a6:53:a0:2d:8e:c9:6f:5e:90:3f:ff:4a:8a:4e:48:
8f:d1:e1:4b:f0:91:ae:4a:49:2a:25:d9:60:10:89:
2c:64:e7:5d:be:bb:20:5b:2c:0f:5a:f3:aa:a0:6a:
86:10:d2:bd:a3:78:1b:d7:30:b0:d3:19:0b:5d:a4:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:12:DB:5D:9C:D9:45:65:36:17:04:52:FB:0F:0B:3B:53:35:C6
X509v3 Authority Key Identifier:
keyid:81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3f:72:c8:9c:a3:5c:e3:3d:bc:5d:5f:4a:1b:52:3f:93:ef:
f6:7e:85:b2:c5:8a:34:54:2c:5e:5e:f1:5c:a1:21:9b:2f:82:
e7:3b:c2:09:7f:c4:b6:d4:3f:8e:12:0b:47:12:1f:f6:35:79:
c1:3b:c7:e2:8f:55:73:83:39:95:70:32:1e:24:b1:ec:25:b6:
1a:86:74:29:43:33:9f:60:8e:d7:d0:d7:14:69:36:33:a7:cd:
2b:13:ec:09:eb:e1:f0:da:36:c0:39:f0:46:9c:3c:da:36:28:
b4:57:1d:9d:d7:6e:72:34:6e:e8:e1:26:9c:ef:00:c7:fb:b9:
a7:ad:c4:70:8f:f7:be:ae:82:67:68:23:34:bd:6a:98:33:79:
2e:37:5a:3a:33:41:55:8b:e0:57:b4:e6:52:92:5c:76:fe:bf:
8c:74:0a:a6:b4:a7:d9:79:3e:e6:60:93:64:de:11:a3:d1:12:
90:5a:7c:79:2e:98:27:e5:b5:48:09:08:d4:df:15:9e:78:52:
45:66:4e:47:c3:7b:2e:a8:b1:63:6b:c8:c7:6a:e3:9b:32:cd:
11:a1:16:25:e6:b7:9c:65:1a:92:a2:5b:f3:fb:0e:54:79:8e:
15:6c:f9:5b:17:42:9c:f3:96:9a:66:dd:6b:05:9a:3d:9d:81:
74:77:3e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:54 2025 by rpki-client