Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: OpgU9pQCg7do7B1Ra7l9OZ71C1v23FRisx8KvuPTzzg=
Subject key identifier: 78:C9:05:C4:6D:B5:B5:75:7B:C8:B9:E4:D0:C7:AB:1A:7B:CC:85:C2
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019A503E314F3CF4AB288F57467AAD72CF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0EBE
Signing time: Tue 04 Nov 2025 19:00:44 +0000
Manifest this update: Tue 04 Nov 2025 19:00:44 +0000
Manifest next update: Wed 05 Nov 2025 19:00:44 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: w78gF3yxxeNCv9uXt9DTyM50l/tn6A6NeaeIK1RXy4A=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:31:4f:3c:f4:ab:28:8f:57:46:7a:ad:72:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Nov 4 19:00:44 2025 GMT
Not After : Nov 5 19:00:44 2025 GMT
Subject: CN=78c905c46db5b5757bc8b9e4d0c7ab1a7bcc85c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:a8:ec:3a:05:86:7b:38:60:d3:68:55:1e:
70:69:b2:3d:b5:1e:72:8b:b5:ed:c8:5c:79:56:32:
eb:9e:5b:92:77:73:84:12:09:1f:9e:27:4b:69:f7:
e8:3d:11:e4:12:52:2f:7b:ca:1a:f9:86:8b:cb:2a:
72:7f:f8:fd:e7:ae:f2:81:b7:4d:1b:2b:1f:b9:32:
0b:30:1d:e5:c1:e7:31:8d:93:39:4e:91:85:38:41:
8c:13:f6:21:f5:7e:d5:b4:3e:0e:47:d6:06:29:77:
bd:4f:02:d0:43:b2:71:a7:29:53:05:27:f7:38:fc:
13:b6:4f:c9:7a:7e:2c:02:fc:5c:71:cd:94:96:50:
60:17:1f:63:65:28:d6:f7:8a:a9:dd:57:a0:3c:f1:
73:7e:89:3f:03:86:4f:e4:3f:96:6f:b6:62:d2:77:
3a:cc:40:7f:0c:85:cb:81:e9:c2:79:ea:47:c6:d9:
6e:66:9e:c5:7a:f3:8e:ac:e0:ef:4f:3d:17:1d:39:
88:72:68:7a:6b:04:21:1a:9b:ab:35:30:ea:42:a0:
c1:06:6c:5f:35:aa:af:fe:b7:ff:7c:b5:33:c0:6b:
95:80:dc:fb:93:3c:77:cf:55:58:8f:30:39:64:77:
19:8f:8d:1e:56:b0:41:28:de:42:36:35:22:f6:31:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:05:C4:6D:B5:B5:75:7B:C8:B9:E4:D0:C7:AB:1A:7B:CC:85:C2
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:62:d3:b6:9e:7d:11:ac:ce:1c:31:1f:52:17:d6:c5:0e:38:
39:8f:b7:a8:90:96:dc:bb:0d:de:0e:37:35:73:cf:91:62:39:
94:a0:b3:1d:e0:a1:b5:74:9e:ee:e5:be:7c:56:23:60:97:e3:
6e:f7:6d:c4:7f:f4:15:bb:e5:bd:ee:3f:49:13:48:e5:34:ca:
54:82:8c:78:af:08:44:f4:93:54:15:cc:68:33:9d:67:9c:a6:
97:5b:19:aa:d1:16:d7:f7:3e:c9:1e:ab:a8:21:ca:51:4a:7d:
78:86:85:99:4b:39:6a:58:00:a5:ca:77:a2:58:a6:11:c6:8c:
1a:27:59:46:2f:70:7f:27:9b:84:ad:4c:a5:af:70:3b:5e:7e:
6b:69:61:67:5d:03:5b:6d:f7:ff:24:73:c2:7e:be:2f:98:b4:
06:06:45:a1:4a:35:e2:c6:2e:7d:49:59:ff:55:a5:9a:d8:2d:
1f:56:9f:38:bd:f9:24:d3:a4:b1:bd:4a:bd:76:71:3c:8e:de:
15:a6:83:4e:0f:49:9a:46:56:7f:44:92:06:24:7d:9c:d4:35:
fc:a5:2f:a6:9c:37:f4:a8:8c:b3:41:a2:43:fc:4c:18:aa:7c:
fd:63:7e:b4:3f:6e:bc:af:a3:70:80:59:a8:9b:3a:7c:fd:00:
64:bf:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:40 2025 by rpki-client