Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: ZT5+hOHW8Ov/M5XP7WEAy0n5ujM7xsGpNuDafb7toXo=
Subject key identifier: 76:E4:33:15:43:71:8C:D8:72:E4:44:D0:56:99:D1:60:A3:78:56:D4
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0199FB7C8F744DDECCC18FAD35616B1B87AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 101B
Signing time: Sun 19 Oct 2025 08:01:08 +0000
Manifest this update: Sun 19 Oct 2025 08:01:08 +0000
Manifest next update: Mon 20 Oct 2025 08:01:08 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: CD7uzoyNjIG0MHrGfq3BceHw55myT5aOW+1jsz74CLA=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8f:74:4d:de:cc:c1:8f:ad:35:61:6b:1b:87:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Oct 19 08:01:08 2025 GMT
Not After : Oct 20 08:01:08 2025 GMT
Subject: CN=76e4331543718cd872e444d05699d160a37856d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:18:a4:d0:34:6c:d1:db:23:2e:a1:eb:65:
87:74:18:16:2c:f8:b8:9a:04:9e:35:b8:05:94:62:
c8:88:95:03:0a:80:df:57:f1:99:de:fa:f4:c7:a0:
a7:fe:ef:d5:91:8b:e6:40:be:25:29:d6:30:66:dd:
76:f5:c3:77:ab:3d:c3:26:98:42:e5:d0:f1:66:dd:
16:39:9f:3b:db:fa:5d:f9:b9:95:12:c7:8c:28:76:
73:32:d0:e1:7c:3e:0a:3c:4c:2d:d4:b5:f4:2f:a6:
28:fb:01:d5:08:fd:2a:a7:5a:88:51:ae:7c:c8:85:
35:f8:a8:85:48:e3:58:b1:f5:5c:90:9c:6e:be:ba:
7c:69:85:83:a2:35:2b:f1:2d:c9:ae:7d:28:9f:bb:
08:3d:17:fe:2b:3f:03:e0:8a:4d:8a:98:49:2b:c5:
8a:76:83:4a:bf:42:73:2d:c7:c0:05:95:5d:90:23:
5a:4f:63:b6:76:e7:9d:25:8f:72:7b:d5:1e:7f:9c:
5a:d8:94:ec:85:82:08:46:ca:d5:d8:b1:51:8f:42:
f7:fd:97:94:7e:8a:d3:11:43:1a:cf:3f:15:e5:16:
3f:46:30:a4:23:04:64:fe:c8:8c:56:2c:83:b2:bf:
28:ee:cd:a9:67:21:4d:97:24:6f:f0:48:82:cb:17:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:33:15:43:71:8C:D8:72:E4:44:D0:56:99:D1:60:A3:78:56:D4
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:2f:53:3d:39:b0:d4:15:78:19:a2:d8:32:65:3d:c5:fd:
74:52:56:39:3c:4c:b9:b5:87:54:8e:8e:a3:a7:6c:71:0e:86:
0c:60:bc:e8:bb:66:4d:4c:c5:15:61:83:d3:e7:17:c8:5d:34:
02:f0:cb:0f:09:b6:0d:ce:22:2c:15:32:c9:4f:17:e6:1d:45:
10:65:f0:f9:aa:85:dd:0d:e4:94:58:b1:20:81:23:ef:e6:6b:
ec:9c:da:7a:ca:b8:71:1b:f7:7f:df:9d:44:3f:9f:e8:a2:6d:
3c:c4:b4:7e:4b:3d:7a:2e:86:7f:60:2c:67:b0:90:19:50:7e:
fc:1e:45:46:79:69:21:96:92:40:0b:aa:52:7a:b9:fc:73:e9:
60:2d:e6:aa:84:b1:85:d0:e0:80:f4:e7:d7:05:7a:93:59:6f:
b4:09:74:08:51:7e:73:5c:95:d0:bf:c4:0d:e8:c5:96:b3:b3:
70:7c:68:f7:2e:f2:87:7e:84:85:ed:23:ac:a6:45:0f:4a:8a:
5d:cd:c1:2a:26:8e:42:c6:ce:b8:38:00:48:8a:7a:46:56:4c:
47:f8:4e:99:2a:40:91:97:de:42:b5:f1:b7:2e:0f:1e:7d:f8:
ce:8b:5f:1f:83:03:6f:33:08:78:66:db:e9:5c:d8:08:fb:1a:
1c:44:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:23 2025 by rpki-client