Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: F4yBhg8bwINzI8wAzucRvHVr8GB2yUDC9l65S28GApE=
Subject key identifier: E5:C4:42:F8:E6:D0:64:CF:57:20:74:2B:7D:01:3F:1C:68:15:54:8F
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 019A4FD046A979A5BAFC39F785274F771D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:40 +0000
Manifest this update: Tue 04 Nov 2025 17:00:40 +0000
Manifest next update: Wed 05 Nov 2025 17:00:40 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: 9RskxCkoeOEODaCH3dRkn/m1RKyy9uVgCs9dHk99b+k=)
2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:46:a9:79:a5:ba:fc:39:f7:85:27:4f:77:1d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Nov 4 17:00:40 2025 GMT
Not After : Nov 5 17:00:40 2025 GMT
Subject: CN=e5c442f8e6d064cf5720742b7d013f1c6815548f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:cf:17:34:83:03:b6:59:99:62:d7:1a:55:
73:f7:77:4b:73:61:ef:d6:20:6f:2c:5e:0f:93:3c:
f6:ec:b3:0f:5b:71:30:30:bf:45:cb:97:9a:18:7e:
b3:0a:73:55:45:c4:ae:f6:3e:80:dc:d7:1f:00:11:
4b:d8:de:16:cd:a8:8c:20:79:43:3f:8c:85:ed:4f:
98:52:32:88:3c:d8:62:a5:d2:57:9f:1b:73:fc:27:
46:c2:83:ce:62:da:e1:31:8c:46:46:6a:83:09:dd:
ad:77:a0:a0:73:bd:f4:56:38:0c:12:62:4e:ac:34:
ff:c5:6a:8d:0d:85:46:c9:57:01:ec:16:ba:37:30:
4a:0a:aa:dc:d8:78:7b:7b:be:69:ce:b0:58:f1:51:
a0:b0:ac:93:c0:2d:17:3d:ae:c1:6d:d7:9e:ce:9d:
66:e9:e7:eb:91:d5:b8:a4:f8:a5:db:5f:84:57:bf:
46:2c:4d:f9:8a:2f:4a:59:47:44:2e:08:9e:3e:a6:
87:69:f2:39:bb:c9:54:ae:ea:23:db:73:3a:d4:cd:
f2:6a:37:03:80:ca:36:6b:63:05:01:29:bd:28:2b:
61:3b:8a:48:0d:62:13:7f:81:4b:17:d3:db:45:7d:
3d:ed:48:28:f5:63:ec:6a:76:af:e4:a7:aa:c9:93:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:42:F8:E6:D0:64:CF:57:20:74:2B:7D:01:3F:1C:68:15:54:8F
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:6a:63:a1:60:04:46:07:8f:c3:70:c2:4e:4d:95:df:0e:
48:34:a5:5a:28:12:83:52:e1:7a:c5:e3:c3:3c:f9:a1:cf:7a:
47:df:6d:11:c4:cd:10:fd:ee:f3:c3:00:d1:b0:e9:d7:46:02:
e7:fb:92:e3:2d:e8:d6:2c:66:90:7a:8e:10:00:5d:ed:d0:16:
25:66:b0:e0:28:c1:04:a4:85:0f:57:05:c2:c8:f4:36:3f:22:
be:84:1a:48:79:82:44:6a:62:9e:9f:09:d2:d6:eb:0b:0a:2f:
f7:18:47:64:4f:4b:32:ad:54:64:cd:5a:38:37:d5:68:8d:64:
fa:ff:40:7a:62:2e:fa:8d:e8:c1:76:5c:eb:b8:0f:85:d2:04:
30:14:83:16:45:c7:d2:10:53:c6:26:fd:88:14:89:e1:04:89:
a3:ae:cd:fa:ba:f2:6e:84:23:26:67:9f:a4:fc:d6:d5:97:da:
c9:7a:fc:69:65:0b:02:0b:c8:5a:03:fb:d4:ce:d4:bf:75:ff:
f0:e4:25:77:d0:65:bc:73:44:80:ef:04:47:6e:a7:22:e6:d6:
99:75:21:b1:fc:08:26:a7:bb:79:b0:ad:c9:c8:31:51:eb:9f:
b8:fa:3d:dd:28:47:3b:d8:bf:e7:91:e8:e7:67:b6:b0:02:ae:
34:03:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:15 2025 by rpki-client