Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: NOmFeE2p3rrPpGIIkoN3blV5QETkQyMseyZIlpqSEJM=
Subject key identifier: 2B:32:29:6A:38:52:44:38:BE:2F:56:2B:3A:31:0B:CB:13:F5:69:66
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019A4E4F9519C46B2A9742B3521DBDC0C531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 13EE
Signing time: Tue 04 Nov 2025 10:00:29 +0000
Manifest this update: Tue 04 Nov 2025 10:00:29 +0000
Manifest next update: Wed 05 Nov 2025 10:00:29 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: eoeoHy8NdJ+eEsH4/i7ZzpY7eANAuaUiKcP4ueUvBFU=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:95:19:c4:6b:2a:97:42:b3:52:1d:bd:c0:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Nov 4 10:00:29 2025 GMT
Not After : Nov 5 10:00:29 2025 GMT
Subject: CN=2b32296a38524438be2f562b3a310bcb13f56966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:2f:44:d5:7b:44:79:e7:fa:4d:7d:90:28:
b4:98:11:a7:d9:40:31:1f:85:88:b5:d7:4c:8d:50:
54:31:0f:21:5c:b6:f2:fe:29:4b:09:b6:48:78:84:
ac:9d:e7:5a:03:2b:59:9e:fc:cd:d5:ec:7d:8a:03:
91:f3:ba:8f:a8:dd:5a:ab:00:fb:f4:c5:f1:f1:f8:
8d:36:a9:7a:28:fc:cd:cd:8a:d9:c4:fb:e2:4d:f7:
6e:f7:36:13:99:ba:ff:ec:be:fb:52:01:79:48:13:
09:1e:c9:0d:3a:02:93:dd:49:c5:ca:44:e5:fb:26:
82:38:5d:5c:ac:66:06:e4:bd:39:8c:37:be:de:2c:
70:de:af:b6:2b:be:85:a4:a3:51:e1:ad:9f:03:2a:
3c:36:44:72:47:96:87:a3:12:d8:03:c7:e5:3a:fc:
26:8a:25:d5:10:e7:18:e7:5d:c6:ce:e8:b1:87:e6:
21:23:fe:1d:19:05:91:c7:54:93:ae:b5:6b:c4:74:
b3:05:45:70:de:9e:a0:ef:21:b0:8b:5f:a8:d1:fa:
0a:38:16:f4:bf:59:30:ab:87:13:26:2c:0d:aa:03:
9a:4e:f6:c1:ce:f5:31:b8:d3:01:b7:91:4b:9b:f9:
fc:80:d2:02:70:01:75:5d:db:76:ac:a2:80:17:0c:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:29:6A:38:52:44:38:BE:2F:56:2B:3A:31:0B:CB:13:F5:69:66
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:9d:18:f9:f0:5d:f0:19:2f:5e:17:c7:d4:25:5a:ed:f0:
b5:6c:57:b9:a5:47:07:20:ed:be:ba:b4:b3:7f:e2:19:cc:39:
0f:b7:b1:94:1c:e4:77:02:5a:80:d7:de:79:64:48:bb:51:f4:
98:48:42:cb:75:4b:31:24:9c:3f:08:f7:39:d6:7f:ed:b3:bb:
d1:7a:19:43:83:49:3b:6f:4b:5b:4d:5b:f8:d1:fe:df:85:43:
79:cf:f9:31:51:9a:7a:19:36:57:12:44:fc:96:88:09:01:b9:
62:e0:28:b1:d0:f2:c5:14:aa:34:9b:58:9a:9e:6b:63:82:81:
85:f9:1f:c0:ec:fa:78:84:a7:0e:a2:26:43:30:a4:d7:f0:84:
04:3b:ee:21:2d:21:49:e9:6b:8b:8a:6d:b2:6b:8a:2c:90:bb:
5e:90:fa:d0:c0:e9:ea:7b:62:38:59:bf:9d:a2:f5:e0:02:8c:
5f:4d:76:a0:a6:46:d4:39:75:71:eb:9f:f2:5a:df:9e:03:d6:
d0:1d:bf:15:04:b6:c5:13:43:c1:0d:09:9e:9b:94:82:0e:8d:
c1:80:c1:a6:3f:02:b7:11:5e:f5:09:cc:2a:42:71:a4:98:e1:
ad:61:d1:9d:2a:45:4e:fd:0b:6d:41:63:f6:f3:fd:2d:f6:51:
17:8c:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:18 2025 by rpki-client