Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: eGXslYc8FfR7glI2QCIlNBFG3+s6UY4l58/pdQb8eUs=
Subject key identifier: 3F:5D:09:FD:D4:FF:F6:33:2F:B0:A8:30:89:D6:28:AF:29:02:7D:72
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019A00355908D09BD3A8BE0AE3D765544B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 13C5
Signing time: Mon 20 Oct 2025 06:01:27 +0000
Manifest this update: Mon 20 Oct 2025 06:01:27 +0000
Manifest next update: Tue 21 Oct 2025 06:01:27 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: LNAtN/dNIrkJQm9lSo6WOi6Hs7VFjmNNKgzhrwf+C8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:59:08:d0:9b:d3:a8:be:0a:e3:d7:65:54:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Oct 20 06:01:27 2025 GMT
Not After : Oct 21 06:01:27 2025 GMT
Subject: CN=3f5d09fdd4fff6332fb0a83089d628af29027d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:1d:e3:d9:da:f6:ff:59:0c:4a:5e:ed:b2:
5f:bc:fd:dc:33:65:a9:6a:42:74:bb:c3:b3:88:c3:
d9:a8:25:ca:c6:db:e1:94:7e:f7:ee:79:88:fa:20:
81:3b:21:cc:b5:7b:a7:26:41:7f:ba:2c:6b:c7:76:
4a:df:37:35:9a:29:ec:17:b6:3e:7c:1d:43:18:3a:
fb:45:b7:81:d6:48:5a:d9:70:eb:6d:18:09:39:4d:
bf:29:f6:03:eb:4f:06:9f:cc:34:dd:c4:c7:f1:51:
0c:08:4a:bf:43:f6:18:6d:ef:0c:6f:cb:eb:f1:8c:
d6:71:79:04:b3:28:5e:de:1e:94:49:d0:b6:6e:3c:
99:c1:32:8e:7c:1d:97:91:4c:c2:98:43:32:85:1e:
62:50:5c:17:d6:a1:0e:7d:1c:26:f3:a3:15:32:d3:
33:14:07:df:31:3b:2f:ad:a6:de:ba:8e:7d:3f:db:
71:7a:c5:bd:d8:77:04:33:aa:ab:14:62:e1:46:75:
d9:1f:3b:23:01:71:c0:dd:ae:4a:6d:7b:48:d3:35:
7c:d7:b0:b9:a3:45:d6:95:80:26:16:9f:94:01:3b:
6e:41:15:de:03:24:68:0a:b2:2a:38:2d:f7:97:d7:
c6:ca:06:4b:44:35:62:5c:70:16:f1:3e:6d:5b:5b:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5D:09:FD:D4:FF:F6:33:2F:B0:A8:30:89:D6:28:AF:29:02:7D:72
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ce:b4:55:57:38:a8:a5:80:4c:13:45:f2:6a:db:e6:00:5e:
f3:e7:34:c8:33:06:50:80:43:9c:7b:44:4e:0e:67:d2:75:5b:
e9:61:08:87:59:b0:6e:da:12:54:0f:cc:51:aa:af:11:45:89:
b9:db:00:51:2b:a3:c8:8e:a8:be:36:d8:86:b3:7f:cb:00:93:
90:f7:5e:0d:ca:b0:41:ab:13:ac:97:2a:1d:cb:2d:7f:f6:48:
5a:94:0b:0a:1d:74:90:e5:93:f6:11:c5:ec:99:bd:8e:56:0c:
a4:36:47:2e:58:cb:ec:58:32:7a:32:9e:dd:2f:93:4e:c4:ff:
2e:a7:11:5e:e7:5e:0d:9f:5e:9a:1d:c3:b4:9c:cf:db:21:e2:
92:69:29:a9:06:f7:02:3a:43:b5:8c:71:4f:e5:70:b2:d8:96:
78:14:84:e9:18:f6:92:de:1a:24:aa:8a:be:4b:fd:bf:80:25:
da:9c:cf:8e:84:69:97:c9:4e:7b:01:2d:a1:a1:2e:a0:b8:56:
ec:b7:65:ad:43:b5:cb:ca:e8:34:8d:d9:49:0c:c7:4d:46:95:
e7:76:e6:74:ea:89:73:21:29:7a:8f:01:c1:78:95:3d:ba:78:
3c:a6:34:5c:df:49:d3:53:89:84:cd:42:ed:5f:a1:0b:22:fc:
f1:84:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:04 2025 by rpki-client