Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier: XhssnW7sljqe9+gj1zouzkszgWqzhSJuaFv8F1ucNVE=
Subject key identifier: F1:8A:FA:A0:04:A8:25:2B:A9:10:01:20:B7:E6:B6:6B:7D:11:64:D7
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial: 019A50E3363865AEA22E5A92366E6470A11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number: 0BEB
Signing time: Tue 04 Nov 2025 22:00:59 +0000
Manifest this update: Tue 04 Nov 2025 22:00:59 +0000
Manifest next update: Wed 05 Nov 2025 22:00:59 +0000
Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: edc0jZhxAR4etAOlymw6/9iByx4gJpDU9xTby0N+CtI=)
2: xkDVDS74gDDghtjYO_lZo1jkZAw.roa (hash: U2DpQz2gMSrA9mkY42SKxIWprno9ie8cfBuo5TlCH84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:36:38:65:ae:a2:2e:5a:92:36:6e:64:70:a1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Validity
Not Before: Nov 4 22:00:59 2025 GMT
Not After : Nov 5 22:00:59 2025 GMT
Subject: CN=f18afaa004a8252ba9100120b7e6b66b7d1164d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:1e:23:b6:af:cf:5e:5f:4d:03:20:ce:e7:
06:ec:23:cf:cb:b7:28:42:8c:ae:e2:58:09:3e:c4:
e4:89:a9:78:36:fd:f0:cc:57:ee:64:ea:51:09:5e:
0a:42:da:8f:58:d6:8b:92:fc:8e:11:9b:c4:81:ca:
8c:4b:8c:bb:ae:87:2d:63:71:c7:a7:c9:fe:11:d9:
b9:57:ab:19:35:0f:25:ad:58:e6:92:2a:a3:59:a9:
07:2c:73:65:e7:8e:c5:2d:f1:6b:70:b3:77:dd:e3:
d4:16:a7:ae:17:47:07:93:81:0b:5e:f9:98:2b:65:
60:65:b6:5b:12:db:74:f9:9a:97:c9:b9:f3:4c:59:
cb:36:9e:b9:a3:b2:54:16:bb:af:4d:87:40:bc:79:
31:44:e7:7a:a1:8b:8a:24:f4:1d:23:0e:09:a3:bf:
96:b4:2a:9b:88:c2:3a:68:8f:d7:62:cb:1b:74:6c:
74:86:74:49:26:f7:4e:99:2d:37:b2:e9:40:ba:94:
69:60:1b:bf:a3:47:56:34:a4:8d:4f:50:94:96:83:
5a:d2:1c:2c:dc:ad:5c:2d:78:2e:8b:39:51:fa:d3:
3d:13:22:be:17:b1:7c:2e:d9:e7:0c:62:20:9c:5c:
95:92:f7:26:0c:b3:94:3c:80:62:83:72:e9:7c:16:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:FA:A0:04:A8:25:2B:A9:10:01:20:B7:E6:B6:6B:7D:11:64:D7
X509v3 Authority Key Identifier:
keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7f:ec:b9:99:23:45:f8:7f:cc:d5:37:21:75:72:e1:b0:23:
b9:57:a4:6c:ea:c3:02:d7:57:b4:8b:0f:ce:13:c5:17:88:db:
a9:72:2a:5a:1b:9f:e8:87:ec:f5:f1:e4:85:49:5a:e4:af:e2:
e7:f6:45:21:b4:4e:b7:83:ae:14:3d:26:f1:1d:a7:24:59:3f:
43:71:91:3e:bb:18:9c:16:a4:5e:e5:4c:4e:0e:f2:8a:c3:93:
5b:7c:48:5b:a0:7d:11:26:00:22:ea:d7:be:f5:7d:49:1d:40:
4f:9b:41:57:31:02:90:99:61:06:e5:c5:1c:0b:6b:11:6d:55:
98:ad:00:cf:65:89:4e:75:6a:28:00:b6:b4:cc:90:b7:ef:80:
9e:72:e5:13:13:93:10:65:f2:31:f8:c3:a2:2f:5b:90:08:d9:
b0:b3:14:71:b9:5d:3e:53:6d:df:53:1e:c9:e1:a7:a6:53:f7:
59:ba:60:8b:01:57:cd:75:b0:25:73:dc:10:b8:fa:de:75:75:
48:94:54:76:87:80:2b:af:50:5f:0e:4b:3d:3e:4d:7c:55:b9:
9c:60:78:5a:a0:ff:d2:bc:ac:d7:c1:26:e6:8f:42:b5:b3:09:
85:d1:34:2e:72:56:e0:21:80:e8:b9:12:61:f4:ad:84:65:8d:
a6:83:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:10 2025 by rpki-client