Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: OakORlPM1cJuSkdFpZEojBhwwCnxLyvD/l7arFJUJCk=
Subject key identifier: FF:61:A4:0D:A5:2C:19:56:1B:F8:03:F1:66:FE:5D:A0:8F:4D:BB:48
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 0199FBEAC8F55A672FF22AA3FE013DEB3A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 040A
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: m6uxQUuOXNs5NjW2RCBVNffwSD6XO+ri3M9PLNtaA0I=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c8:f5:5a:67:2f:f2:2a:a3:fe:01:3d:eb:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=ff61a40da52c19561bf803f166fe5da08f4dbb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:cc:56:66:69:f3:5a:75:76:a1:fb:fe:6d:
44:24:2c:55:d8:d9:a4:b7:0f:dd:b3:3f:6e:f2:6f:
ca:18:9b:bc:78:8e:23:f5:41:1b:02:d2:70:5d:46:
c7:67:9b:15:15:ef:30:be:db:07:dd:00:8a:48:62:
08:07:f8:1c:2a:49:29:75:af:84:b4:a4:b8:43:77:
f3:53:5d:a6:a5:9a:d4:c1:1a:aa:19:ce:8c:bb:0b:
4f:cb:0d:c7:cd:35:88:88:a6:c1:5a:74:80:0e:4f:
39:66:2e:c2:a8:f8:64:45:ab:9e:4b:39:26:6d:e3:
43:05:ce:41:c0:43:81:8a:1a:73:79:93:f8:65:03:
90:9e:43:00:a0:3e:4d:7b:85:a6:ef:35:6d:93:2b:
dc:bc:73:22:ad:07:3c:75:5c:f4:ef:3e:22:ac:76:
9a:d1:4e:78:dc:d1:01:1a:0e:6b:5b:98:19:e9:e4:
2d:d1:d3:49:19:26:c0:69:2c:9c:3d:c6:a8:5a:e8:
34:11:a7:ad:d8:a6:0a:1d:4c:b7:1e:52:d5:13:eb:
d0:37:3c:4f:09:4e:2b:5d:89:75:e1:3d:50:98:f1:
7d:1c:c9:74:1e:c2:ab:62:5c:8c:8b:5d:48:3a:2a:
8c:ee:02:7e:7a:e2:51:73:4d:a7:b4:e9:d2:59:84:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:A4:0D:A5:2C:19:56:1B:F8:03:F1:66:FE:5D:A0:8F:4D:BB:48
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6c:2e:2c:c7:db:a7:ab:bd:3b:db:2f:43:6b:4d:46:ec:41:
8a:81:fe:a2:ed:eb:ed:b2:ee:ef:b0:48:cf:48:55:1b:ba:e9:
7e:5d:5b:36:d8:7f:d7:e8:a9:48:e7:1d:1f:8c:e9:ec:fb:85:
72:a7:8c:59:5d:f2:e0:f7:71:54:2e:49:35:76:15:fd:6c:5e:
db:cc:d5:d9:97:fa:68:4e:3c:28:e7:bf:3b:1d:ed:9b:c3:e7:
f0:df:59:a9:49:24:91:62:c4:77:f1:83:6b:b8:f7:46:87:f3:
08:6f:31:e3:d3:cb:33:3e:82:34:0e:65:a8:32:4f:58:73:05:
91:58:66:0c:e7:f7:6d:6d:a7:a0:86:ba:0e:ff:39:ae:64:8e:
d6:61:d8:a5:bd:ee:d2:79:e9:55:63:40:d1:2e:fe:b1:9b:e8:
be:9f:0a:28:34:08:b1:b2:09:fe:d0:26:b5:fe:c2:8e:6a:6c:
16:a2:c5:be:51:81:d2:9e:68:fd:4c:c8:0d:00:54:c5:5a:69:
a0:ce:31:63:3f:e9:e5:24:38:1e:8a:73:56:f1:b8:e8:c8:11:
ed:84:80:1f:ce:05:2d:a1:2b:9e:fb:5d:75:4a:29:58:26:5e:
76:57:4a:66:e0:17:72:02:ef:72:08:0a:03:29:e6:c8:24:c2:
6a:13:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:28 2025 by rpki-client