Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier: hMIo2nYGq5VYLXYOA55rr19wDyPlcK1CJ0sUHp4QdE4=
Subject key identifier: 6E:41:88:1B:3A:74:37:A7:DA:BF:51:D5:12:C0:65:04:48:95:06:4A
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 019A4EF44923183D300ABE019ABCC5889BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number: 0EC9
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=)
2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=)
3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=)
4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: YNs0ICvKMVQDhR/TqA36+Pjm96zpdNVpeX9P54+CF1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:49:23:18:3d:30:0a:be:01:9a:bc:c5:88:9b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=6e41881b3a7437a7dabf51d512c065044895064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:e5:df:2f:96:b5:81:e6:37:a0:2f:62:7b:
49:cc:9c:11:cd:f3:aa:dd:95:bd:ad:fa:64:39:d1:
0e:e5:40:35:4c:68:58:4f:00:96:32:f2:01:8a:1a:
29:19:70:a8:0a:8c:e9:8f:78:c2:dd:61:cd:fa:46:
f0:b4:63:7b:19:11:47:8d:bd:77:98:c9:2b:33:a5:
0e:6e:2c:3d:46:4d:24:66:65:4e:86:01:06:e4:17:
d4:91:c8:f4:48:97:c6:3d:2a:61:8b:c0:c6:fa:63:
7b:3b:a9:2b:98:34:85:1d:29:95:79:b3:8b:83:92:
12:ce:a8:a8:59:9f:e3:bd:16:a8:a9:92:cc:8a:c4:
48:15:b6:ed:c2:74:e5:b6:d9:cd:f5:64:64:c3:5f:
20:40:67:70:c2:fa:d6:ef:17:52:b1:45:52:f0:01:
2c:38:69:f2:6b:40:31:77:e0:27:02:a5:c1:5d:c0:
38:f6:4f:1a:d5:aa:57:95:ba:2b:28:b1:54:37:58:
ea:85:59:f9:31:bc:92:0a:b9:51:77:3f:31:95:01:
8c:76:ac:2f:09:80:cd:e0:87:ef:fa:12:67:65:53:
ec:7b:67:fd:4a:3b:69:c3:a7:84:bd:29:cd:88:43:
a0:cd:5b:65:7a:79:06:23:1c:fc:16:da:e2:04:a0:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:41:88:1B:3A:74:37:A7:DA:BF:51:D5:12:C0:65:04:48:95:06:4A
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:92:8c:7f:c9:4e:e2:f1:ee:6a:02:a2:7a:0c:da:b1:58:72:
18:8e:2a:e2:46:90:55:5a:f4:6d:42:23:4c:f7:78:26:51:3a:
76:e5:a0:54:cd:3d:0d:d9:4b:89:d9:d9:ac:a6:b7:af:51:bc:
79:8c:c9:f2:78:31:35:8f:c1:09:89:c6:4d:d7:f8:4b:ab:18:
ee:4c:c5:99:c7:75:15:59:5a:12:cc:da:08:3e:dc:57:cc:24:
ec:7e:cc:05:3d:1b:99:63:e4:1f:98:79:d4:9d:83:c7:25:e7:
e2:a9:a0:7e:60:cb:b3:74:30:96:27:1c:8d:29:76:63:6a:6c:
2f:2e:70:c7:e3:51:5d:47:9d:63:a5:f4:e8:30:24:58:9a:c7:
92:d7:c7:2b:e5:7b:5f:cb:ff:f9:79:a3:79:8d:7a:22:9c:9c:
52:97:ac:76:4d:2b:5f:bd:54:73:92:3e:71:bb:72:55:38:00:
96:2a:69:ef:c9:ae:af:48:89:f4:96:c6:e7:e4:bd:1f:32:ff:
ec:9a:48:d7:03:b4:81:5f:42:59:13:c1:14:a9:61:61:f2:e0:
c8:4c:b7:50:45:b3:05:f4:47:f7:72:b6:0b:64:27:26:53:81:
bb:c2:2e:01:b0:8c:57:6b:6b:e3:e5:2d:24:60:50:48:73:32:
e3:e2:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:01 2025 by rpki-client