Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: g7HhGAGzb+GpzXYYpa/GskVhjSW+FlngxoWIX5TtYVE=
Subject key identifier: A9:58:3B:FA:66:B0:9F:82:A1:6F:FF:63:4A:87:19:C4:6C:21:2D:EF
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 019A4EF4933C504D11FBD3BFA0FEB3E9D1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 0601
Signing time: Tue 04 Nov 2025 13:00:42 +0000
Manifest this update: Tue 04 Nov 2025 13:00:42 +0000
Manifest next update: Wed 05 Nov 2025 13:00:42 +0000
Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: gVXn823mbOjYQ3UiT4gmL6P0BtQO3rrRBTRMI/LRijo=)
2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:93:3c:50:4d:11:fb:d3:bf:a0:fe:b3:e9:d1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Nov 4 13:00:42 2025 GMT
Not After : Nov 5 13:00:42 2025 GMT
Subject: CN=a9583bfa66b09f82a16fff634a8719c46c212def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:57:c2:55:cc:de:45:01:f1:ba:46:ec:2a:
09:27:91:fe:f1:0e:4a:ea:c4:af:41:fd:06:84:a5:
c5:eb:60:04:19:63:cd:2e:49:aa:5a:6e:8b:f8:be:
b2:a7:d3:50:af:6b:29:53:c6:d1:cb:c8:15:3a:32:
45:c8:76:63:fc:a1:8f:6b:60:88:16:3c:74:af:5e:
37:ed:36:49:fb:f7:0a:74:e6:dd:1a:09:d2:c6:9a:
9e:29:b7:bf:eb:18:13:66:8b:7b:20:16:bb:be:43:
f2:b7:2c:13:b3:15:ba:22:3b:32:d2:16:f2:8f:a4:
4a:4e:e8:4e:22:39:f0:ec:12:fa:79:28:52:fd:ca:
c8:0a:a0:37:18:bc:6a:bb:5e:52:09:d8:0d:f6:65:
0f:3a:02:c2:bb:a2:c8:40:48:4a:59:cb:f5:91:ce:
82:0c:0d:04:cb:b9:50:79:14:53:7e:a1:2a:0e:f5:
f5:08:1b:b6:77:7c:8d:7b:9f:76:7a:7d:9d:07:8c:
d3:2e:61:ad:1f:0d:a0:7f:1b:b7:c7:74:a5:cc:87:
f7:90:d1:ee:6c:d3:dd:b0:06:3d:3f:c9:02:7c:15:
e8:fe:58:32:2a:e2:e2:19:da:26:84:a8:5d:f6:60:
2f:5a:48:b5:9b:81:bf:09:e1:39:87:77:4e:c2:11:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:58:3B:FA:66:B0:9F:82:A1:6F:FF:63:4A:87:19:C4:6C:21:2D:EF
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c1:05:b5:96:c1:a9:3b:ab:ee:4e:6e:a3:de:3c:54:60:98:
44:d3:c8:e7:4a:20:70:02:44:b4:5f:f5:ea:2f:93:89:23:b0:
f1:e9:ab:31:d1:8a:26:db:8f:35:ac:43:cf:6d:fa:ef:3b:34:
23:67:b7:cc:6a:09:55:7c:95:ff:39:83:4f:47:a2:5e:31:88:
4b:b3:ba:45:00:9c:66:b5:fe:4f:e9:2f:3a:a5:66:41:00:10:
24:36:f8:5e:0c:4d:f0:4f:76:30:d4:d3:f9:5e:2e:73:5d:8a:
8b:c8:41:85:86:86:d7:46:2b:f2:9c:d5:aa:d1:d9:6f:79:d9:
7f:72:cd:9a:74:a3:dd:93:f5:62:63:f6:97:90:91:b3:2c:a0:
77:dc:b1:fb:96:03:53:19:c8:17:ce:b0:e0:51:58:fb:cb:ce:
9f:83:b7:24:a8:9d:9b:71:19:10:f9:11:ca:a8:ef:e6:a5:98:
f8:b3:c3:14:0c:14:5b:01:54:aa:ba:fc:5f:0b:cd:f4:a3:98:
00:02:dc:57:88:35:ed:72:9a:25:34:95:8f:3a:40:78:de:04:
9c:c0:d5:f6:e6:2f:57:fe:c2:0a:ee:15:14:b9:41:c2:05:38:
b0:30:4f:ab:e3:88:26:c2:ce:53:dd:54:7e:30:db:0f:fa:67:
fd:a2:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:17 2025 by rpki-client