Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier: E8+gBTyF0cFOXzQvH5//LyrDW7moxqvGq2kzNfeV05Y=
Subject key identifier: CA:A8:61:1B:1E:C7:52:46:55:31:B5:36:32:6B:2B:B8:41:5C:9B:2C
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 019A4F61E92446E2ED158D1CAF426AF7D1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number: 0690
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: pr2tLgxCVKT5Bw8Mh609i4OoQIGAK2jECoIlhItj6yM=)
2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=)
3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=)
4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e9:24:46:e2:ed:15:8d:1c:af:42:6a:f7:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=caa8611b1ec752465531b536326b2bb8415c9b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:6e:63:42:32:dd:9f:d8:64:43:c4:de:a2:
39:30:73:e3:8d:12:de:33:29:71:8b:96:ce:8e:b7:
da:c7:91:ba:b6:cf:3a:49:bc:17:1e:03:42:6a:69:
91:d7:e7:f1:6b:c5:b3:8f:8d:52:23:7e:5c:09:16:
66:a2:55:6a:ef:52:a5:c5:7a:89:b1:87:9c:28:6c:
a6:8d:55:a7:f9:ab:b0:ae:ba:99:89:19:34:72:d2:
07:3c:7b:2f:2c:9e:95:e9:67:bc:6d:8b:bc:f2:0a:
56:3f:a6:e5:92:53:2b:16:af:3e:af:a2:62:4e:81:
f1:a9:40:fd:c2:9a:e9:32:b6:7c:58:c7:bb:c3:ee:
24:74:f1:3e:ce:27:52:1b:87:21:08:ba:f9:ab:40:
db:0d:81:c0:8a:96:33:82:40:4e:39:f9:34:03:40:
3e:9a:ed:a3:ea:36:52:11:f1:9a:86:93:db:65:a5:
52:51:ea:ef:03:c7:e4:62:d7:de:05:68:62:49:6b:
3e:f1:ff:a8:9c:0d:12:3a:02:01:b4:1f:ac:a1:b4:
8a:39:fd:c2:65:80:27:f3:06:3d:5d:82:bc:a7:ee:
08:bf:69:61:48:fa:83:7b:d9:90:65:11:16:19:ca:
a5:66:da:ac:94:da:0b:d7:ef:00:19:57:61:40:cb:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:61:1B:1E:C7:52:46:55:31:B5:36:32:6B:2B:B8:41:5C:9B:2C
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:be:27:b8:b3:23:8a:76:6d:87:6d:12:8a:27:0b:75:37:3a:
8b:18:87:70:fd:0e:13:83:23:26:6e:1f:72:e8:89:02:2d:f6:
3c:a7:1f:74:07:7d:5b:45:d9:bd:5b:89:cc:2a:73:65:ef:f7:
c8:93:77:b8:30:01:74:dc:d8:5c:05:dd:af:68:95:88:8b:90:
ff:7a:96:13:ec:9c:ec:82:1b:c3:58:9b:5d:e3:8b:ad:30:f4:
4d:f3:8a:b8:d5:21:6e:01:9c:36:0f:4e:2c:78:f0:a1:4c:fa:
20:e3:b8:d2:43:c0:1d:61:f8:b5:91:bf:6b:c0:a3:f5:b8:d3:
d0:5a:d0:07:b5:95:20:e2:ce:51:d0:a4:80:97:4c:06:9f:1f:
43:f0:1e:1e:ff:a6:8c:46:ec:88:89:dd:03:cc:b9:02:10:30:
c6:f5:95:94:ed:f0:4e:5e:35:5a:d6:c5:c3:de:b0:28:73:a4:
83:06:b2:aa:e4:1a:a7:ed:9a:0a:15:38:e6:85:68:34:cb:13:
2d:f8:25:22:4c:b0:11:20:6b:4f:79:50:1a:ff:12:b4:cb:3c:
13:52:a8:36:65:72:7c:61:99:64:7e:ab:f2:a5:e8:56:cd:0b:
f0:b2:65:33:f2:72:d9:41:90:82:50:95:dd:7a:99:90:dd:5f:
e8:ed:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:18 2025 by rpki-client