Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: QBF1Ue2eQmJfFK6M4MwhGmDIk3BCTnrkuqfdk8vIW/Y=
Subject key identifier: BD:86:BF:DB:8E:ED:A6:5C:9D:63:C8:70:CC:CA:56:0C:BA:A4:2E:97
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019A4E384CC1CDDD03D7F647692FD1A249FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 0F66
Signing time: Tue 04 Nov 2025 09:35:03 +0000
Manifest this update: Tue 04 Nov 2025 09:35:03 +0000
Manifest next update: Wed 05 Nov 2025 09:35:03 +0000
Files and hashes: 1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: 3YV+2YYSJXcfPvSJGsCSEYq1xzg28uFK0Xopx1QNnt0=)
2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=)
3: O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa (hash: zkyPGN71itUBurBDFCf1AgW9vMBDOWpYZJYvI+GyxrU=)
4: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=)
5: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:38:4c:c1:cd:dd:03:d7:f6:47:69:2f:d1:a2:49:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Nov 4 09:35:03 2025 GMT
Not After : Nov 5 09:35:03 2025 GMT
Subject: CN=bd86bfdb8eeda65c9d63c870ccca560cbaa42e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:41:fb:58:f3:44:e2:2c:19:14:34:11:2d:
90:18:8c:17:9c:9c:bc:36:70:12:5c:bb:8f:2f:78:
7f:d4:d1:e4:a9:66:f4:8d:2c:49:cc:9c:c6:2b:1b:
e0:25:c5:80:20:85:04:c4:d8:0b:ac:4b:60:ab:56:
ea:0b:00:5c:91:c7:40:35:a7:a0:e6:0f:ce:17:21:
ce:a6:a4:53:0b:e3:f6:02:6d:16:e7:3d:f4:9c:c3:
81:57:c3:5b:88:f0:d7:91:ae:a1:5b:20:2e:73:83:
f3:47:5d:06:bb:68:e0:f7:1e:05:b2:d9:ab:b7:b2:
76:9b:a3:dd:b7:9e:0a:e2:18:fb:1f:48:50:4a:a6:
b3:97:0a:d3:e9:ae:bd:34:1b:82:bb:6b:7a:0d:66:
75:34:13:ba:7f:dc:15:98:41:cd:15:1d:a5:09:98:
92:ee:05:f8:d6:a8:48:9a:6a:ab:d3:51:bf:0c:36:
9e:37:f2:aa:34:5e:0b:16:ab:6c:2f:81:e5:a7:04:
7e:bf:82:bc:33:2d:dd:e7:e7:43:89:60:ac:2f:46:
ea:69:9f:9d:58:bd:52:b9:9b:aa:bf:84:e2:5b:77:
d4:ca:87:b1:b7:09:46:ae:28:c6:80:06:da:39:72:
59:c9:cb:6c:59:83:74:74:b9:1d:51:37:05:80:98:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:BF:DB:8E:ED:A6:5C:9D:63:C8:70:CC:CA:56:0C:BA:A4:2E:97
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2b:49:fe:39:de:c9:69:12:0b:44:49:c3:41:c8:ac:f0:a0:
a5:17:25:f2:d9:51:54:bc:1a:12:d1:e1:46:58:2c:30:e7:87:
1f:26:20:50:c7:fa:9d:29:ba:03:48:16:e0:c9:d4:7b:fc:ee:
0b:88:38:ba:77:7c:9d:5d:eb:6c:84:09:5b:fc:80:76:2b:6a:
cd:e7:f2:88:c1:a6:bb:c9:db:97:58:56:04:ab:03:8a:94:f3:
23:e9:12:d4:13:af:4d:f8:6a:b3:e1:1d:45:8a:6b:98:df:7f:
8b:33:fd:c1:84:1a:0e:e1:d1:f5:20:8d:87:09:8f:68:f1:b7:
0f:45:d7:94:1e:f0:94:c9:a7:94:eb:d5:4b:95:f1:e4:5e:da:
d7:08:ee:04:20:c6:88:b5:5e:ed:a2:4e:07:db:4d:32:ec:fb:
43:3e:f3:76:2b:45:c8:44:68:dc:a7:c8:2f:d7:fe:7a:11:23:
7b:1a:b4:ca:c0:b3:d9:e9:8c:b7:5e:ec:dc:c5:0b:28:f7:ea:
25:2d:35:5f:7c:f6:3a:9e:ae:b2:97:f8:cc:be:0f:83:9a:d7:
85:d0:eb:9d:12:03:c2:a6:6c:6a:b2:67:c8:27:40:1e:16:35:
59:90:c3:b7:96:b6:60:db:70:7d:f1:4a:00:00:ff:59:18:03:
f7:c5:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:46 2025 by rpki-client