Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: zyHqt6oaVU1VOtEvsEEkjlRuyPhec2W6L5Ons5e07Ak=
Subject key identifier: 5E:51:B9:A9:8B:F8:72:3C:F7:DF:27:37:A3:84:69:62:17:6F:96:2C
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 019A54885324ABE2F54AFCBBA4F3B70F14BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 0171
Signing time: Wed 05 Nov 2025 15:00:11 +0000
Manifest this update: Wed 05 Nov 2025 15:00:11 +0000
Manifest next update: Thu 06 Nov 2025 15:00:11 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: /J2qXqwUj0tAYbYIVPGzWo9k+ymQ5FLSRdk7lB1Cu24=)
2: oV8Ma4hc484xc5SJXQCWtZwI26E.roa (hash: mXD629tUJB3Ogv1XBao+edGNLrPyoPhY8LRLBmBi4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:53:24:ab:e2:f5:4a:fc:bb:a4:f3:b7:0f:14:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Nov 5 15:00:11 2025 GMT
Not After : Nov 6 15:00:11 2025 GMT
Subject: CN=5e51b9a98bf8723cf7df2737a3846962176f962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:95:b3:25:be:68:f3:06:c2:81:02:22:00:
e5:00:2a:ae:c4:66:f2:7a:e0:ea:60:58:42:f8:d7:
57:74:10:18:95:30:66:77:6a:24:23:bd:21:d7:d3:
15:c4:9b:48:78:d8:3b:e7:7c:33:80:c9:c6:61:69:
09:7f:79:19:39:f9:05:0a:30:27:8b:8a:ad:38:2d:
be:f1:c6:74:df:29:c5:31:6f:af:d4:4f:7a:bb:9f:
ba:5f:5c:6b:86:87:b3:df:fd:cf:b5:03:2c:fe:5c:
e0:98:0f:07:18:6f:9d:01:53:ef:f6:b9:86:4f:c7:
f9:65:3a:07:69:9c:dd:5c:e5:aa:34:f6:b6:34:98:
ff:2b:29:04:22:95:98:be:83:71:19:71:ca:db:27:
e7:81:5f:a7:b2:73:39:fb:c7:3e:f9:c6:95:05:df:
37:ac:ec:e0:d5:01:18:d1:15:70:d1:3b:8b:84:3e:
a2:40:83:04:d1:cc:8c:8c:8f:0d:16:98:0c:31:1c:
c1:ac:3d:c8:60:2a:90:d9:eb:07:41:18:bc:24:c6:
1e:75:a9:f1:88:9b:8b:5a:78:ef:4b:1b:44:0a:44:
39:0e:32:a9:0e:88:66:b8:a2:78:bf:b9:26:d4:d7:
b6:b7:0d:53:c5:03:10:56:8e:99:b7:7a:6c:c0:d6:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:B9:A9:8B:F8:72:3C:F7:DF:27:37:A3:84:69:62:17:6F:96:2C
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:4e:4b:50:f1:27:3f:a8:d2:da:72:52:a8:67:3e:8c:32:
6a:87:c8:73:5b:f9:42:b8:84:a2:42:26:64:9f:bd:4d:cc:0d:
36:d8:39:c8:d5:53:aa:40:91:da:73:d1:f6:cf:61:b8:c4:11:
fc:e0:98:1f:5b:8f:8a:46:ef:e5:98:61:bf:62:92:35:78:ac:
17:15:0f:90:73:e0:99:2e:80:f1:18:10:83:5d:7c:d1:9c:d2:
82:78:ed:be:b4:30:64:4f:ce:f1:61:dd:a4:ca:72:06:c2:93:
01:d1:01:b4:c5:bb:25:03:81:7b:8c:c4:71:49:51:a1:ba:71:
93:0a:f1:a6:5d:f4:05:30:1f:f3:82:95:e4:b9:7b:42:32:71:
6f:60:d8:1a:88:a5:f8:58:f8:4d:d7:82:0b:18:65:e1:0f:4a:
f6:64:8e:0e:1a:82:fe:c7:9b:77:ca:ba:73:aa:36:74:d3:a8:
1c:73:1a:53:22:6a:00:94:9d:0d:9a:1e:30:38:b5:44:f5:85:
f8:b4:c8:57:3d:9f:7e:fe:a8:f8:b2:89:80:27:53:5c:ce:7c:
51:27:ca:da:d6:3a:70:e8:61:55:29:61:1b:a8:29:d2:9f:1d:
81:6f:62:83:92:d5:d8:a6:85:28:bf:45:3e:5b:60:90:93:df:
3c:95:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:04:20 2025 by rpki-client