Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: wFfliBa+NPgSLtLXnug6jTkyD+0mpLVSbPvDhXWin2c=
Subject key identifier: BC:60:30:9C:F7:44:B1:8B:1D:01:9E:43:B8:59:AF:C4:40:0A:53:07
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019A552E16FF573ABCB37C90C85385F687AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0C95
Signing time: Wed 05 Nov 2025 18:01:15 +0000
Manifest this update: Wed 05 Nov 2025 18:01:15 +0000
Manifest next update: Thu 06 Nov 2025 18:01:15 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: pSuOJfjizP1G1nTI+OQvoPTEpKG3IkdFtGzkm1ribT8=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2e:16:ff:57:3a:bc:b3:7c:90:c8:53:85:f6:87:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Nov 5 18:01:15 2025 GMT
Not After : Nov 6 18:01:15 2025 GMT
Subject: CN=bc60309cf744b18b1d019e43b859afc4400a5307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:1b:1c:42:c3:73:fa:2e:0e:4a:e6:de:d8:
6e:86:83:21:27:ab:23:46:7a:5f:c5:81:6d:d5:14:
b4:a6:70:f2:be:9b:67:07:09:4f:5d:15:1f:72:f2:
ec:7e:84:47:ea:5d:6a:e2:6e:f8:c7:61:40:c2:29:
d5:7b:0a:39:c1:79:33:ac:55:5a:02:07:f7:90:49:
24:d1:16:0a:23:3f:12:e8:4f:30:c0:f0:87:e2:f0:
f3:a2:cd:cb:25:43:22:60:0a:98:c3:8c:6c:46:7c:
96:21:bf:cd:13:55:f1:a7:39:a3:2f:18:d1:e8:97:
18:fd:e4:61:27:a4:08:fe:67:3f:80:50:30:8b:9c:
e2:da:95:8b:eb:01:3b:eb:20:f2:e1:8b:6d:7e:a7:
96:2b:6c:67:a6:52:8b:9c:73:82:5f:40:ad:e8:96:
9d:2a:ef:cd:45:76:b8:d5:25:da:51:1a:cd:a9:2a:
5c:95:ac:79:20:5c:2f:ed:b9:16:12:75:50:06:1b:
1d:f0:e0:a4:c0:4b:14:e4:f0:7a:55:de:f0:a6:61:
64:0d:1a:70:f5:0d:ed:72:c2:60:9f:50:69:6e:f3:
3f:d2:a2:bd:ad:fb:a2:5c:4b:ce:85:8d:a3:d8:64:
ff:68:ea:61:6e:58:e7:1d:65:2c:fc:d9:ae:e1:53:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:30:9C:F7:44:B1:8B:1D:01:9E:43:B8:59:AF:C4:40:0A:53:07
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d4:40:a8:63:dc:91:a7:c1:1e:e2:9c:f5:56:27:d5:80:e5:
14:d8:6d:dc:df:ba:d6:bd:6f:83:fe:21:b2:b5:60:b7:2b:f5:
5e:eb:4a:fa:94:27:ef:9a:31:d5:d5:63:c3:fa:03:88:a8:4b:
6b:c3:af:07:69:0e:6e:ee:41:ec:da:17:ac:24:b7:bb:88:ff:
37:a9:c4:c7:c1:c3:22:82:1d:3a:c9:70:de:e7:cf:6a:fa:54:
9c:59:71:bb:00:c9:53:42:5c:47:bd:23:a0:6a:09:21:60:e6:
65:d4:b3:7e:38:9d:11:ee:07:a4:94:86:55:44:f9:7a:a6:93:
7e:e6:a4:bb:5e:ad:a9:c5:98:91:1c:64:3c:03:c0:c2:90:1b:
41:bb:0f:16:4c:26:02:e1:62:46:34:e4:f9:61:85:84:3f:17:
8e:bb:ac:71:c8:74:96:99:09:c1:f6:6d:8b:47:de:25:f9:f6:
3a:5d:2a:a6:63:90:f9:ac:79:aa:e7:f2:e1:9f:95:57:3e:e1:
4f:88:0f:23:6f:9b:2e:04:9e:82:27:44:ac:db:9f:15:6b:92:
33:ba:c9:cf:8f:bb:de:d1:b3:00:cb:41:95:cd:61:7c:e2:ea:
9c:ec:74:46:b1:90:0e:08:2a:92:e1:38:ae:60:91:03:71:37:
59:b6:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:54 2025 by rpki-client