Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json)
Hash identifier: zLhERoI2vfLtmevraE1bE7cIptgFSBAa/tBsPvVo9CY=
Subject key identifier: B1:1B:03:5F:C5:AB:6C:71:5A:12:8D:57:29:6D:DD:2C:0C:79:13:58
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial: 019A0290847F39A5A9AA6583128E286268D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
Manifest number: 04AB
Signing time: Mon 20 Oct 2025 17:00:16 +0000
Manifest this update: Mon 20 Oct 2025 17:00:16 +0000
Manifest next update: Tue 21 Oct 2025 17:00:16 +0000
Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: SJRsXRtuzYEReKEaSFc/4ZUlri36tsafiHL3vW2S4lw=)
2: z6gRZQL9dktzDQCQibZshxDiKi4.roa (hash: 4kSTaNBCK4SMDmYd2plLBmE2hYKvGg7VL6yg3cqclD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:84:7f:39:a5:a9:aa:65:83:12:8e:28:62:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Validity
Not Before: Oct 20 17:00:16 2025 GMT
Not After : Oct 21 17:00:16 2025 GMT
Subject: CN=b11b035fc5ab6c715a128d57296ddd2c0c791358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:48:90:06:15:90:ef:26:1e:de:1b:ed:97:
08:d5:f9:92:f3:a2:3f:b4:db:23:d4:a4:a3:12:ad:
a2:a6:61:d7:ac:54:f7:b8:4c:1b:8c:a6:ec:c5:45:
9c:3a:5b:dc:10:88:32:8b:18:ba:e4:ad:62:2f:8b:
89:d9:c0:a6:28:4f:2a:97:a7:8e:13:d6:71:6b:f1:
4e:f2:e5:19:7d:1d:3a:42:43:cf:f9:bb:66:c2:f0:
1e:7c:e6:fe:f5:98:a6:14:5c:d7:5f:5a:f2:a6:aa:
8c:c6:32:0c:be:24:e7:ec:3f:09:ac:37:4a:9f:83:
98:c7:dd:91:14:e9:4d:ee:46:f1:a2:08:86:99:ee:
3b:27:5f:3a:e8:ef:54:6e:f9:8c:d3:f6:7f:a6:44:
c6:d7:2b:bb:42:c4:87:bc:ec:90:2f:40:8d:7e:bb:
e9:de:88:cc:39:2b:51:b2:bc:df:78:66:e6:31:8a:
fc:40:b6:5c:72:b6:0e:fc:3a:cf:79:ae:b6:69:8d:
ac:b4:7e:d6:61:f6:c1:df:5e:0f:53:c8:19:b2:61:
09:0b:bb:12:ec:c6:4c:91:32:e0:ef:06:3d:5d:f1:
b4:17:e6:29:35:e9:f0:95:0b:5c:e9:df:61:bc:af:
2e:49:14:19:b8:79:5d:4c:dc:d8:7d:a5:be:dd:04:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:03:5F:C5:AB:6C:71:5A:12:8D:57:29:6D:DD:2C:0C:79:13:58
X509v3 Authority Key Identifier:
keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7b:6f:7b:48:c5:7c:21:0a:33:17:17:a6:bc:e8:f6:40:87:
6a:f7:96:1e:32:e8:ae:d3:ff:fb:43:d1:9b:e2:8e:1e:d3:47:
f5:22:52:17:57:0c:0b:02:af:7b:e4:4a:84:90:11:20:b5:86:
22:bf:93:94:17:ec:d4:46:ba:6c:04:43:a2:b2:61:cf:bc:8c:
86:0e:27:65:13:07:d1:4f:b1:8a:d7:34:d7:92:86:3c:f9:60:
39:41:5c:4f:c9:32:e9:77:19:21:67:af:c2:3b:91:bb:0c:80:
3e:b4:89:83:5d:1b:7a:f4:61:28:50:14:1d:9b:3c:65:42:25:
19:5f:c8:8e:01:18:10:32:4e:2b:40:b3:7a:43:ae:18:23:16:
d8:4f:b7:fc:89:a6:5b:bf:86:01:17:cc:4f:cc:6d:22:af:94:
87:52:4c:44:72:d6:79:ed:15:eb:fa:de:f6:9f:22:c8:13:41:
9e:dc:d0:ca:1e:3c:01:f2:48:d3:81:9b:33:a7:57:60:b8:4c:
61:1e:21:96:7d:dd:5f:46:2d:d3:cc:34:a1:14:a9:7f:d5:1e:
aa:81:1f:a4:a3:11:14:8e:7c:af:4c:55:16:79:8f:8a:55:28:
c1:96:8d:fe:ef:8e:a6:ed:af:41:d9:b1:e6:7c:74:87:f4:8f:
f1:76:e4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:35:52 2025 by rpki-client