Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: 6ERUHEHCgDTQCS/rOXGjO01vXOE/dWiufAJHyt8EpNU=
Subject key identifier: 49:12:FF:9A:70:38:29:13:1F:A2:0A:C9:B4:1E:8A:FC:F8:96:41:5C
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019A4DE1A2969B23E1F1B85FF98BEB359F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 08F1
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: FZL8KuT/ExgWGkZbsQFR9X2bGCHGBa/KcQpBj9H4LD8=)
3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a2:96:9b:23:e1:f1:b8:5f:f9:8b:eb:35:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=4912ff9a703829131fa20ac9b41e8afcf896415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:b3:4d:61:d1:4d:6a:21:11:72:89:73:2a:
51:eb:3b:6f:3f:5d:f8:2c:c7:0f:05:d1:c4:17:30:
b3:f9:86:5e:c4:41:0b:00:bb:d9:cc:c2:a3:89:08:
e1:ab:84:58:1c:97:77:2f:6d:e4:10:2e:af:e3:38:
d1:5d:23:f6:5a:59:2f:e2:a0:02:42:7d:cc:1b:8e:
6a:fe:63:40:e8:7e:0b:32:03:b0:67:95:dd:b1:bf:
3f:28:f5:7a:c0:84:b6:3a:d7:ec:be:df:f1:56:cd:
06:ec:d5:c3:1b:76:5a:9f:d2:46:1e:c0:cc:79:68:
19:27:ae:1d:9e:71:5b:3d:05:1b:4f:64:a1:ba:ed:
30:68:1b:5f:df:3d:42:b0:c4:4a:fe:8b:ce:b4:ea:
56:7f:fe:05:92:4e:1d:08:92:66:45:1e:02:95:1a:
e5:a4:2a:b2:e5:c0:ba:85:42:e8:ae:be:d6:0c:08:
40:5e:4d:c3:59:de:b4:ef:0a:96:f7:ce:c9:a0:64:
b2:3e:66:f5:3a:b4:2d:a6:9d:18:1b:57:2f:c6:16:
2d:6d:f6:28:d8:02:fd:7a:ef:c3:34:4c:2e:88:9e:
29:64:d0:be:d4:a2:ad:21:bd:94:6b:79:e4:53:f6:
57:02:cb:1a:f3:92:ce:00:42:44:b4:71:ee:e6:67:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:12:FF:9A:70:38:29:13:1F:A2:0A:C9:B4:1E:8A:FC:F8:96:41:5C
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3e:fb:4a:e4:98:c6:3f:ee:20:e8:af:97:6a:8b:4a:e8:b3:
2d:b4:75:19:17:42:ef:e9:f9:66:57:42:12:90:1c:c7:8c:a8:
15:df:f1:7c:12:82:af:be:5a:54:fd:87:8b:fc:fb:50:ab:6e:
32:bb:65:ac:4d:9b:b7:13:db:2e:60:36:ed:c5:79:8f:81:85:
25:76:35:22:3c:57:dd:e7:8f:cb:87:37:af:41:2d:6f:40:83:
b3:33:23:0e:7a:24:c7:63:4e:c4:a1:bc:e9:ff:2a:74:f0:bf:
d5:2a:e1:1b:e3:ec:56:03:92:57:fe:bb:18:59:15:bd:31:01:
14:ea:81:c3:b7:f8:91:28:4c:0f:2f:b5:39:56:ea:be:ba:80:
3b:fc:8f:de:f2:2d:35:78:3f:0e:90:41:22:5b:e3:67:34:88:
cd:9c:41:e7:2c:34:bf:f7:bf:0e:c9:2b:39:1e:86:5e:f9:b6:
54:cc:0c:b3:d4:f0:f2:40:f5:f7:c7:59:24:32:02:e5:2b:94:
72:77:2b:8f:5d:39:5f:bd:b2:8b:f5:8d:cd:f5:78:9f:ff:23:
0d:71:9a:8c:5c:dc:5c:8c:b2:46:01:33:06:eb:36:e1:d7:b0:
44:36:57:57:15:2c:8b:dc:b0:2f:f7:d7:ef:d9:37:1c:e4:02:
0a:31:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:50 2025 by rpki-client