Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: RRbIC6jnTLbEvHnvr9yJWdntHiG0/Zw0NXtRVi8Vc58=
Subject key identifier: EC:2B:21:6E:2B:9D:F8:F2:1B:FF:AF:95:29:C5:68:62:32:70:52:17
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 019A50E2DA4B54DD1C4AC765C854231EAA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0D7C
Signing time: Tue 04 Nov 2025 22:00:35 +0000
Manifest this update: Tue 04 Nov 2025 22:00:35 +0000
Manifest next update: Wed 05 Nov 2025 22:00:35 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: hhHOmWcYBCvZDz1DdfEegTi4nNpo8pvUrFhC0oRgVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:da:4b:54:dd:1c:4a:c7:65:c8:54:23:1e:aa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Nov 4 22:00:35 2025 GMT
Not After : Nov 5 22:00:35 2025 GMT
Subject: CN=ec2b216e2b9df8f21bffaf9529c5686232705217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:46:3a:c5:f7:af:db:c4:8a:86:07:64:f9:
07:a9:db:54:21:33:b4:df:46:7f:f6:eb:d6:0e:af:
b4:95:94:67:a0:f8:57:86:5b:5c:98:f2:73:cd:f7:
76:ab:39:e2:db:86:9c:9a:e0:50:89:a0:51:f6:42:
65:1e:ee:4d:fe:0e:9c:58:a0:c0:4d:fb:a3:8b:ae:
dc:ba:da:10:f5:2b:6b:15:fe:be:b8:56:5f:e3:bf:
eb:bd:ec:12:c3:81:7d:16:5c:d1:82:97:7a:89:82:
e9:5f:54:3e:5e:25:b8:54:53:b8:87:52:43:45:4c:
fd:94:8b:8f:b3:69:11:fe:90:3b:81:4f:a8:9d:c7:
78:b8:37:13:38:cd:10:20:d0:85:ab:4f:fc:6a:36:
15:ae:50:72:e3:31:90:41:79:52:b5:7f:ff:59:15:
54:d8:24:2f:8b:fd:94:f1:62:f2:ed:64:db:89:e9:
06:5b:2d:2f:46:97:1a:56:3e:5a:73:27:1f:d5:99:
fb:ab:ac:e7:05:58:96:1d:4e:3b:d3:89:7a:15:37:
80:a1:72:9c:d5:c5:6f:4d:da:d1:15:0e:3a:0a:e8:
33:c7:d7:9a:2d:d7:33:47:3f:ec:ff:24:1e:5f:6b:
bb:23:12:2a:57:b8:55:be:f9:5e:c5:c7:19:d8:c6:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2B:21:6E:2B:9D:F8:F2:1B:FF:AF:95:29:C5:68:62:32:70:52:17
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ae:fd:dc:a5:49:28:53:cd:f4:e8:9c:a7:e7:14:16:0e:17:
57:6f:7c:83:05:69:49:ca:d8:2a:34:ed:3d:27:f0:7a:8a:b5:
29:d6:6c:29:1c:67:79:3e:91:1f:9e:d9:c3:ba:54:ce:30:b0:
54:d1:4e:19:63:4a:52:0f:95:39:ec:b1:91:9c:ac:da:2a:bb:
34:de:16:1f:eb:38:30:16:0a:1e:05:f6:9d:c4:86:04:9b:1f:
33:ec:9a:0d:20:65:b9:9b:80:88:38:73:ca:f0:f0:5a:7b:60:
06:25:e6:84:1d:3d:b4:8d:1d:7c:d4:6b:55:0f:19:f8:ff:55:
f1:f5:78:8b:b6:90:9c:87:41:6d:d0:79:42:74:c0:8a:5d:f7:
f9:1d:82:bc:54:31:36:a6:c3:ba:d9:ff:ff:2d:62:ab:d1:0e:
24:82:4d:7c:7f:67:80:db:37:1e:5b:60:9e:13:db:cf:0b:f2:
7f:8e:d9:5e:da:05:39:da:fa:ab:2a:fa:89:ce:01:8f:32:08:
d0:75:01:a8:9e:28:fd:bb:aa:58:64:c2:25:1d:48:b3:7b:e5:
cc:1d:98:da:48:59:db:4f:17:c3:83:94:90:3d:69:5b:8c:31:
9b:4b:70:3f:65:84:86:d3:c7:4f:69:eb:f7:d2:f2:6d:0a:1c:
48:47:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:55:58 2025 by rpki-client