Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: bRwR+2GMpcpYdjKpGyTxexuEuKQSObTn+s1Irz8A4RY=
Subject key identifier: 20:D5:82:15:BD:7F:4D:14:2D:9C:BC:CB:26:43:F9:E6:0F:26:B6:14
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 019A4E500AB1C38EA5C11A95C793C80579D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 10:00:59 +0000
Manifest this update: Tue 04 Nov 2025 10:00:59 +0000
Manifest next update: Wed 05 Nov 2025 10:00:59 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: kcHUSXX+cRRvoOxgemFtAjt5e0ivY/yPzv7agbOYC3k=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:0a:b1:c3:8e:a5:c1:1a:95:c7:93:c8:05:79:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Nov 4 10:00:59 2025 GMT
Not After : Nov 5 10:00:59 2025 GMT
Subject: CN=20d58215bd7f4d142d9cbccb2643f9e60f26b614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:4a:5f:d7:c4:93:4d:69:6e:b7:33:04:41:
36:f4:34:66:76:4c:b0:d8:4a:9c:9d:f0:6a:75:1f:
1b:78:a9:31:6d:f4:d6:22:33:e0:aa:57:f5:dd:9a:
7e:36:f6:2d:43:2c:1f:00:72:59:41:81:f2:ac:ea:
21:d9:de:e8:dc:73:f4:12:a4:67:94:6c:e6:5e:41:
97:4c:16:6d:16:e5:75:ca:cd:2f:fd:d8:93:60:ec:
76:8d:46:e9:72:35:11:7f:71:f6:f6:ef:75:d0:73:
72:d9:36:5e:2b:b4:18:43:36:61:da:66:24:c2:34:
56:a9:3e:4a:86:3b:12:06:f3:6f:41:1b:c9:bb:eb:
d2:ac:5f:49:d6:f9:44:f9:0b:eb:a3:9f:3d:1c:7a:
72:b2:8c:2d:f9:ce:96:5f:b4:c0:f8:5a:2a:08:85:
aa:d7:87:9e:8d:57:1d:fa:c5:7d:b2:d0:90:4a:b8:
4b:5a:ca:6a:9f:44:71:75:38:20:c3:de:09:4f:f8:
20:12:e5:7e:0d:8c:59:6d:38:6c:fa:da:3e:0c:21:
ae:16:66:53:50:ae:ed:e5:b6:38:6c:0c:e4:7a:0b:
64:49:a1:30:26:42:7c:2b:1e:8d:ce:6d:cd:d4:b8:
b1:7f:ca:9f:bf:95:ee:f1:aa:ab:c2:40:1f:a1:58:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:82:15:BD:7F:4D:14:2D:9C:BC:CB:26:43:F9:E6:0F:26:B6:14
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f0:9b:e3:92:86:31:54:e7:e7:40:e1:fe:9c:a6:07:e7:90:
6e:6f:95:cd:3b:56:c4:12:f0:5c:fc:68:c5:e9:8a:37:20:39:
65:59:63:0d:43:9f:d5:60:5b:ed:e4:d8:87:13:cb:77:ac:d2:
26:96:ab:fd:31:c3:76:7c:79:e5:50:ae:41:5b:93:1e:72:36:
65:47:1c:1a:b2:88:f3:71:c1:37:ee:91:39:b9:93:99:0b:e1:
89:a2:96:7f:68:63:33:83:8d:e5:eb:cc:ae:6a:c9:24:1d:84:
a2:40:88:6c:fd:66:89:bf:db:0d:f9:fe:86:57:97:0c:69:2d:
c7:74:67:fe:2f:06:00:c4:7c:88:fe:62:08:b5:ce:1b:d3:40:
b7:55:fd:94:5a:01:a3:a9:3c:de:9f:e6:1d:db:97:39:8d:6d:
3f:de:e7:f1:83:5d:52:6e:d0:94:91:9c:74:38:96:6a:d2:aa:
74:a3:8e:78:37:74:0b:b1:14:09:7d:63:11:65:00:1d:06:04:
0f:0f:86:8c:ce:cd:14:be:8b:2b:60:b4:cb:be:fa:1f:cc:1d:
dd:93:44:35:87:8a:b3:99:1e:9d:d4:e6:b9:7f:24:48:9e:de:
fe:e3:ae:80:6c:7f:01:58:96:80:ec:b2:97:a9:e2:85:ec:cd:
0b:58:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:41 2025 by rpki-client