Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File: GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier: z/l9BkXr8uwBty3Gtr7Jb69T7Hq5KFpG4herXhGDYqg=
Subject key identifier: DD:8B:78:A6:BE:57:83:77:C8:5B:93:C6:41:4F:81:4B:4D:5E:0E:F5
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial: 019A4E4F85F8895B545333D29F2C3CA9DACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number: 0C80
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: sj5uYBFNdH/kYTV81w3t/6eIp08Zz4ZjiAqWIwWUktw=)
2: tut7oaWJNrhx8vDfjnadysvruEE.roa (hash: oXhco3AY4UNPZerjwlU5WNQYyYnT8TDpF5tOGRePMaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:85:f8:89:5b:54:53:33:d2:9f:2c:3c:a9:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=dd8b78a6be578377c85b93c6414f814b4d5e0ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:38:a1:14:89:be:c5:d0:9e:71:49:1c:1e:
fa:38:21:c6:76:ea:ea:5b:60:dd:79:af:c1:0b:86:
59:76:b1:21:c2:bf:34:35:c1:03:08:b4:d0:ed:6d:
e0:ba:2c:22:41:c5:4b:6e:8e:15:3b:d3:00:9e:7b:
82:e8:a6:36:fd:b5:01:f2:c8:a9:ae:b4:08:89:a3:
26:38:5c:ff:f0:66:a0:bf:78:9e:46:72:98:6f:0d:
a3:ed:c4:6e:b0:a8:0a:87:f8:51:d8:32:20:9b:6e:
e3:81:15:a0:a1:ca:dc:03:f0:d7:be:c8:a2:eb:c2:
60:88:b1:7d:4e:e6:2c:10:d4:b7:7e:0f:6e:a9:b0:
4a:2f:e0:31:af:fe:7b:41:0a:d9:ca:7f:da:4b:ff:
1e:50:2d:69:06:e9:de:79:19:c4:77:ea:4c:91:a9:
cd:4c:5a:e1:ea:fe:5d:2e:e9:51:e8:ed:c4:c5:6a:
3b:de:15:da:3f:c7:52:11:31:0a:86:78:28:2c:04:
78:4b:5e:47:03:82:6a:7b:83:b8:37:8e:29:8e:59:
24:78:87:2e:51:e9:fe:b5:dc:f6:da:d4:3b:37:e7:
79:d4:9d:a8:92:b7:2f:11:99:cd:d0:50:66:8a:4f:
a8:ae:b6:ec:8f:aa:83:fc:51:bb:5a:98:5b:d0:3b:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:78:A6:BE:57:83:77:C8:5B:93:C6:41:4F:81:4B:4D:5E:0E:F5
X509v3 Authority Key Identifier:
keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:af:0f:ba:b8:6a:7b:3c:5d:d4:17:cb:d0:21:46:37:0a:8b:
e6:8a:8f:26:cf:05:9a:e8:a7:b6:ae:3f:61:be:95:18:73:9f:
fc:ef:51:3f:d7:d7:2f:6b:75:37:8a:09:4f:36:29:cd:6f:48:
69:8e:36:bc:4c:c4:47:db:9e:db:29:8d:b0:86:90:51:49:c1:
66:11:55:17:71:79:d2:7f:03:29:16:08:3a:74:5d:e7:6e:f8:
0f:24:d9:48:f6:f8:38:f1:ee:cc:94:71:85:48:f0:18:ed:81:
69:56:e0:4b:db:33:39:f6:c2:90:8a:59:f5:fb:97:d3:9b:5d:
23:fd:72:ed:24:8b:4b:df:1d:3e:a6:91:19:54:1a:58:f2:04:
eb:d8:0d:47:57:4b:c7:da:2b:f2:6d:eb:87:30:5e:36:23:0c:
d3:a4:de:5a:60:12:92:37:0d:45:c4:9f:f4:a0:67:f1:84:c8:
ea:4a:4f:25:1d:05:5a:e4:ba:b6:71:8c:f4:da:df:65:66:cc:
ec:fb:ab:6b:c2:c4:65:bc:f3:cb:61:62:f7:a1:cc:e5:c4:48:
fa:c0:93:5c:d2:1e:02:b7:86:b0:f8:2a:04:a1:20:e5:bd:35:
b1:4f:3b:81:1a:72:41:60:5f:0f:88:c0:48:50:d8:79:45:44:
da:a0:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:59 2025 by rpki-client