Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: t2i50rhUlhq+CKRYYkpJJY1LZ3GBsP6AQ6vWy3s3iYg=
Subject key identifier: 1B:19:FE:C8:96:BA:BD:BD:75:96:79:B5:0F:1D:41:A2:72:E8:8F:74
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019A4D3CBEDF9024400B90EBFCA9E0557BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:17 +0000
Manifest this update: Tue 04 Nov 2025 05:00:17 +0000
Manifest next update: Wed 05 Nov 2025 05:00:17 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: VmcgcoxUj65bYpubrNQ8dDOAtZujxazT4x3ZrtApiEU=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:be:df:90:24:40:0b:90:eb:fc:a9:e0:55:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Nov 4 05:00:17 2025 GMT
Not After : Nov 5 05:00:17 2025 GMT
Subject: CN=1b19fec896babdbd759679b50f1d41a272e88f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:cd:9b:d0:c7:ca:d9:66:f8:88:1b:e7:8d:
02:58:f2:1f:fd:9e:18:0b:97:95:76:fc:73:d8:d3:
4d:0f:a4:92:99:53:7a:1e:ae:5c:cd:ff:cd:c1:69:
8f:92:f9:d4:1b:a9:9d:4c:85:76:38:42:76:fc:b7:
0f:f4:78:d8:f2:c1:89:35:4c:a8:16:4b:ec:7c:57:
1b:dd:43:8b:6b:c8:41:5a:b0:c5:82:b0:ff:69:2b:
22:46:ca:9c:b7:45:bc:21:be:21:b7:74:28:00:1c:
96:55:d0:3d:59:5d:de:dd:8f:61:9d:e8:58:85:61:
0c:c0:1f:e4:c6:94:3d:9d:e4:f1:d6:4e:72:43:07:
4c:23:ee:77:4e:6e:28:d6:ea:54:c4:2c:24:fe:d7:
0d:05:1a:82:e7:76:10:f3:74:af:84:46:95:1e:6f:
b8:13:5f:42:19:f2:f2:9c:c1:40:f1:e3:b8:b2:44:
c8:55:17:a0:44:81:2f:d5:2d:17:50:9b:18:e5:05:
29:85:cf:d2:9a:5b:53:19:dd:3e:49:00:c0:b7:ef:
6c:b4:0f:4e:f5:e9:27:3b:0d:82:d4:fd:d5:03:f3:
c9:03:92:f2:b6:d4:92:db:53:fe:5a:e9:e5:ee:9c:
8f:28:88:cc:80:62:56:43:1a:ce:1b:e3:d3:43:4e:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:19:FE:C8:96:BA:BD:BD:75:96:79:B5:0F:1D:41:A2:72:E8:8F:74
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:42:f5:d5:cd:8e:e9:ca:ef:a8:54:55:c0:dc:a9:9d:ad:8f:
92:e1:92:f9:81:1e:16:ac:5a:6a:49:88:79:ef:68:91:6e:9f:
f2:d6:68:3c:08:31:77:3d:5f:e4:81:29:a2:fb:61:fb:ac:e6:
f0:b4:67:b8:e2:d2:d1:23:49:fd:32:b8:26:ca:ed:c9:57:ae:
59:ce:a8:88:49:15:11:2f:1a:ff:19:c2:55:ff:4b:5d:ae:a6:
17:7b:fc:e7:c7:7e:94:13:f6:9a:77:16:4a:0e:a2:25:b3:41:
7a:69:dc:2c:4c:6d:00:2b:8a:09:14:72:dd:4c:e1:59:f2:78:
19:36:e4:92:ef:13:ad:f1:a3:70:1f:46:90:05:fb:19:b5:af:
61:54:fd:89:95:cb:d6:b1:59:69:c0:d3:49:43:4f:26:7c:7a:
75:17:b3:d8:1f:c2:52:e3:81:52:9d:e2:7d:f9:7d:11:2d:ac:
49:c2:4e:ff:12:f7:66:f0:a5:f2:35:0b:9b:ba:14:79:9a:a3:
74:92:79:c6:7e:b7:64:16:5f:02:9c:e7:fd:36:ea:3d:5d:b0:
e2:64:97:90:82:17:2d:7c:8a:5c:00:fc:39:ae:fc:93:2e:f5:
58:2e:36:bb:93:79:d8:26:87:e7:4f:d1:0a:53:4f:f3:27:e9:
b8:46:56:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:09 2025 by rpki-client