Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: 4eLYJ4R4NoZ0Ez7L3l1XImQkr8PtgOavGGetfo7KDZc=
Subject key identifier: FD:A8:6A:1C:BB:92:9E:1D:6B:FD:D5:A7:BC:30:60:28:73:EE:2F:58
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 0198A04F083982DA2CBBCF03210B9C351EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0C9C
Signing time: Tue 12 Aug 2025 22:03:10 +0000
Manifest this update: Tue 12 Aug 2025 22:03:10 +0000
Manifest next update: Wed 13 Aug 2025 22:03:10 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: jr4emEaDhV6c5isDUazfCidMhEcYC/iN5gMlCOwGd6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4f:08:39:82:da:2c:bb:cf:03:21:0b:9c:35:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Aug 12 22:03:10 2025 GMT
Not After : Aug 13 22:03:10 2025 GMT
Subject: CN=fda86a1cbb929e1d6bfdd5a7bc30602873ee2f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:96:68:82:e2:04:f2:70:1b:54:25:ca:8d:
e7:6e:fc:52:6f:ac:0b:19:b1:8c:a7:57:6a:23:82:
51:9d:ac:59:17:c1:54:17:6e:0e:80:f3:69:b6:b9:
49:4e:a8:54:44:75:53:93:85:c1:48:4c:5d:28:8e:
af:89:0a:3b:9c:9b:f8:a9:1c:c6:62:fe:37:f1:42:
81:c1:2b:4b:d1:16:28:80:ca:8b:d6:5e:14:bf:fa:
f5:7f:d2:38:fa:6f:a7:4a:d7:02:48:b1:98:0a:af:
98:05:6c:c4:47:f6:2c:e5:f1:b4:27:76:b7:17:4e:
fe:14:c2:08:af:61:87:59:c6:d5:cb:bb:49:23:b9:
20:b1:a2:a9:2e:df:06:68:4e:c0:11:fe:a9:6d:fe:
b5:05:da:9a:70:a3:1d:ba:64:11:54:aa:a5:fc:eb:
b5:cd:82:5e:a3:24:50:96:b0:3f:20:a0:db:7d:5b:
e4:f7:82:86:ce:a7:9c:6c:bc:43:6a:98:d7:61:bc:
46:aa:75:a4:f5:c7:cb:2c:e6:fe:0b:ed:8c:69:4f:
fa:ef:6f:bb:bd:02:5a:c3:52:aa:98:12:35:9a:55:
9e:09:31:40:e1:0c:e1:a8:16:63:fe:ab:fd:93:dc:
f3:84:3c:d6:02:a1:4f:cc:12:62:e6:4b:fa:ce:c8:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A8:6A:1C:BB:92:9E:1D:6B:FD:D5:A7:BC:30:60:28:73:EE:2F:58
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c0:75:c5:e1:22:8b:86:cc:da:3d:f2:40:cc:0b:ac:9b:8f:
d6:97:7b:1c:30:03:87:3f:5a:50:cd:cf:b0:88:7c:49:d4:5b:
a5:0d:07:16:94:b1:1e:c3:c7:6f:84:61:09:c3:a4:d2:8d:02:
14:37:7b:07:5f:34:b5:88:0c:2b:54:5b:29:f1:3e:04:5c:30:
be:01:33:08:4a:0f:df:9b:eb:b5:b1:1f:6e:e6:4b:52:bb:bd:
3c:e0:a1:d0:09:6e:6a:78:ae:99:11:28:d6:5b:63:0d:c4:d9:
2e:82:14:64:4f:a1:02:c0:9c:f3:60:5d:58:ff:27:98:35:d2:
f3:6e:f4:1e:26:c5:5e:68:0c:c2:a7:c2:5b:99:b1:ec:5d:35:
60:48:2f:3c:5f:c4:ed:9d:04:3a:d8:08:f0:43:c9:b5:c2:c2:
e2:45:dc:d1:13:88:8c:1e:19:07:74:1e:72:d6:1d:95:d0:70:
ae:91:c8:30:84:f2:f2:f9:07:ac:10:13:d1:5d:5e:99:f7:d8:
00:ff:11:b1:46:53:74:5f:b0:31:e4:92:e0:45:b5:64:6c:1d:
a8:08:40:b1:fd:5a:8a:86:06:9a:c0:30:4f:15:85:ab:d1:3d:
c3:aa:8d:b6:e6:63:ad:2a:2c:49:83:ef:5f:4f:59:fd:a1:7f:
17:ce:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:35 2025 by rpki-client