Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: Kls78RKIaXpb1bWbuJ22SKlfYkXx8XJhfliaLXYPiCw=
Subject key identifier: 14:34:5B:07:1E:62:CC:81:84:DB:CD:47:89:3D:80:A8:76:92:1A:AA
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019A4FD0865A6CBA63C1F35E58934ADE2876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 17:00:57 +0000
Manifest this update: Tue 04 Nov 2025 17:00:57 +0000
Manifest next update: Wed 05 Nov 2025 17:00:57 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: AbRxBlHAcKwf0wDimTafJ/jNQ9P7SWr7pk6/wlDeXhM=)
2: bDbEU-n8q6DljyAoCb2HG5IpwAM.roa (hash: eRAv8rRBi2xmtRMeoh59gG1sQ1a+pnNx2m0jnwKDhWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:86:5a:6c:ba:63:c1:f3:5e:58:93:4a:de:28:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Nov 4 17:00:57 2025 GMT
Not After : Nov 5 17:00:57 2025 GMT
Subject: CN=14345b071e62cc8184dbcd47893d80a876921aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:24:42:69:3c:9e:d5:7b:76:a1:75:78:b6:
0f:8f:da:0e:b0:ac:33:2a:2d:2d:5f:69:86:87:23:
9a:36:d9:5a:7a:2b:6d:c4:d7:ad:07:2f:40:18:a4:
72:59:38:cd:9f:43:aa:65:22:81:b8:2b:d5:77:b4:
f9:f5:47:f6:c3:7b:2a:63:51:bd:74:14:43:b3:31:
51:0e:b2:a7:da:97:d1:eb:35:b0:22:32:e0:a4:de:
6a:b1:17:e7:21:ac:1e:26:7b:56:92:5f:ce:46:fa:
36:71:f7:92:f8:e0:bd:f6:97:e0:39:fa:8e:64:96:
12:25:40:13:62:25:76:2b:10:78:4f:c8:f6:6f:ae:
5c:40:16:91:d0:9b:2f:7f:d2:9f:65:51:ae:26:36:
77:31:70:55:da:53:e9:fe:7f:ff:3b:25:66:49:e7:
b2:2f:c8:da:c4:61:eb:16:bc:0b:13:02:e8:fb:aa:
16:7d:49:1b:d6:3e:2f:c8:47:b6:45:f3:8e:59:08:
5a:48:7d:63:6d:3a:b8:86:4a:b0:70:73:86:1c:b1:
c4:f5:78:43:6d:35:f4:f3:e0:f0:30:6d:39:fd:60:
c3:1d:a4:29:ae:d1:d5:06:3e:ff:8e:75:63:ed:92:
e5:b2:98:13:90:c1:42:a8:ca:19:3b:ee:b1:36:54:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:34:5B:07:1E:62:CC:81:84:DB:CD:47:89:3D:80:A8:76:92:1A:AA
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:5a:90:20:12:e3:5f:8e:6c:69:53:c4:4a:9d:8b:4a:e0:
db:b9:a7:9d:05:1a:40:c6:09:19:f5:42:25:ce:28:74:54:3b:
ed:e4:f0:99:bc:7e:65:56:a6:f4:0f:e3:4b:25:a9:1d:cc:e0:
79:1d:eb:7d:58:79:39:e9:2a:22:e2:47:9a:21:43:dc:02:e5:
6c:10:36:6f:f2:fb:34:f0:1b:1b:b6:76:3e:4d:96:09:82:63:
b3:1c:0a:79:14:52:99:23:0d:12:4d:9b:55:2e:ec:c7:58:a1:
5f:72:f9:fe:a5:52:99:70:bb:d9:ee:49:c3:a2:a8:d2:c9:88:
df:d0:5f:36:d6:fd:d3:fc:24:46:1d:9b:73:61:a2:db:20:60:
ed:48:6c:b2:7f:cc:eb:5e:87:91:c5:75:50:9f:ad:be:35:c2:
cc:65:c6:49:c1:92:53:ba:2f:d8:d3:12:f1:bd:d4:1e:53:a9:
19:5b:74:db:36:ea:24:9c:d4:11:4f:e0:96:ef:9d:d0:4c:f8:
31:fd:54:9a:17:e7:40:fd:48:46:4e:a7:f2:87:d6:fb:25:1b:
71:a9:f3:ec:39:2e:c5:78:64:77:a5:70:27:14:fa:12:92:84:
b1:60:6b:43:12:79:95:1e:18:77:db:95:84:68:8b:b3:7c:c6:
0c:2b:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:17 2025 by rpki-client