Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: e8rQJC5CNITmmf+/4HgTnW/rJMvDJQfE7+WD09ckEHc=
Subject key identifier: 5C:53:1D:3E:E5:2E:60:91:47:E1:C0:24:AA:BA:6D:13:21:7F:2D:DE
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 019A4E18BB417BB3B4A75E733AABCBD951A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 1104
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: lwum1mLY6nEkqGh5OfZ7oewuHaBBWVs3NZFf47RiFV4=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bb:41:7b:b3:b4:a7:5e:73:3a:ab:cb:d9:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=5c531d3ee52e609147e1c024aaba6d13217f2dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:c5:db:0d:b6:7c:89:b5:77:cb:4d:0e:5a:
70:d4:79:f8:88:74:7a:0f:d8:cc:08:07:e5:6a:37:
2a:c2:fb:7a:b4:31:20:eb:06:9b:ba:2c:3d:5f:94:
45:f8:83:b5:4d:d4:d0:b5:d7:d4:d0:2a:38:da:7c:
ea:d4:02:5e:c5:2b:7c:0c:2f:ad:4b:09:43:fe:b2:
3a:17:83:d3:fc:68:5a:5a:63:99:f8:68:2a:c3:3d:
a4:21:9f:f0:dc:55:32:36:dc:b3:34:79:9a:d3:30:
7c:6b:79:e5:01:5a:46:48:ce:91:ef:92:5d:3f:55:
7d:ac:81:c5:ca:7c:88:03:38:55:7a:63:d8:a1:51:
d6:05:18:53:d6:fe:6f:d7:0a:7d:6b:8d:dd:e5:2d:
91:b2:a9:9b:02:cf:5e:2f:30:3d:39:7f:c5:91:6d:
80:6e:7d:ed:52:b4:3b:ac:a5:16:05:95:79:64:79:
5e:01:9c:c1:71:36:d8:1e:ea:55:5e:3c:d1:56:d9:
b2:a8:5e:d0:ce:2f:04:2b:ba:b2:1c:19:b1:e6:f9:
5b:6a:a1:e4:08:1e:f0:ea:a3:f9:50:a4:42:3e:19:
7c:63:01:9d:19:29:02:3d:99:43:6b:39:a4:e7:dc:
96:d8:b5:80:e8:8d:9d:c1:f1:06:23:f5:a5:43:44:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:1D:3E:E5:2E:60:91:47:E1:C0:24:AA:BA:6D:13:21:7F:2D:DE
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:88:99:cc:ff:9d:94:8d:d3:5c:6c:a8:21:a2:ce:9c:28:88:
41:9b:bd:44:a9:19:45:2c:e8:e9:6a:bb:13:fd:a0:f6:1b:50:
f7:4f:32:0f:12:12:e7:67:dd:21:7f:26:5c:f5:79:6b:d1:ec:
00:e0:eb:53:13:03:8e:a5:02:9f:a9:2f:37:0f:46:85:2d:c0:
74:a7:9f:49:61:73:56:90:5c:1a:10:a3:13:ca:72:ce:e2:53:
72:e3:c4:4b:70:52:35:02:17:53:e3:b5:f5:90:c5:c3:bc:24:
1e:56:d2:79:51:af:79:d3:ec:1a:80:42:5f:84:6e:96:b9:d4:
ca:e6:84:65:6b:cb:7f:05:90:98:80:2e:d1:6f:c1:c3:38:ae:
00:81:46:ae:fe:df:42:92:79:ab:8e:ba:a6:0c:ec:08:ca:c5:
72:b4:fb:0f:8d:27:17:95:a7:31:c5:80:cb:94:2f:97:48:b7:
49:10:a1:d2:e0:ae:0b:5a:96:5c:cd:3c:69:cc:e1:eb:8a:f4:
12:17:42:9f:f5:d3:d1:85:ea:91:7c:f6:0e:f9:be:92:0f:11:
6e:aa:da:24:51:1e:8d:a1:c5:f1:81:ac:a1:1f:db:54:ee:12:
50:8e:46:98:d9:41:4e:09:e9:42:d4:44:58:72:b6:3f:95:83:
0e:c5:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:41 2025 by rpki-client