Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: gYX0Sf8Bi2XaKT4ISRsI2UoiwUJ9ndMFLpfusIImkLA=
Subject key identifier: E9:6D:55:E9:F9:41:30:1B:9C:D7:53:DF:6A:37:1F:66:16:52:D2:2F
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 0199FB45D03D97C8D26387A8D98AFC5122E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0D90
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: DzZEzykcVaKkvbXZFVb831Md2QQVYLoQdlr2uGCl2lw=)
3: ey-_9xxGKnsOGGPU15--RgSssm4.roa (hash: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d0:3d:97:c8:d2:63:87:a8:d9:8a:fc:51:22:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=e96d55e9f941301b9cd753df6a371f661652d22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:b6:02:8f:e9:9c:d6:0d:42:bc:5d:98:c2:
ab:13:48:01:e2:dd:8b:52:0b:57:a3:6b:29:65:0d:
17:d3:39:d8:9e:ad:63:6d:67:66:75:4b:d8:b0:b2:
6a:cc:08:bb:18:50:ee:e8:96:d2:2f:a6:db:35:e3:
91:3b:36:62:f5:ec:a2:8c:15:ae:79:eb:74:2d:32:
56:38:72:6d:09:18:49:30:c2:f4:d9:eb:f8:bf:c3:
93:63:2b:c0:55:a3:49:26:1b:71:66:b6:53:df:ac:
8a:ee:f4:c4:50:87:e8:3d:45:e5:0b:d1:c7:c5:3a:
d3:71:b7:3f:1d:52:37:12:50:eb:7c:df:52:54:86:
d6:f5:c3:84:75:08:2a:85:97:2e:74:7c:9a:7d:b8:
e4:b5:3d:7a:54:ae:55:4e:f3:ae:5c:39:79:2d:e8:
8b:8e:e8:d9:2f:fe:b4:cb:6a:9d:7a:ac:2b:10:a1:
d3:43:c9:69:0e:da:51:20:09:46:6e:4d:4f:31:4d:
c6:b9:de:8a:08:16:d3:21:e7:1a:c8:c9:37:fb:28:
57:70:72:af:41:0a:51:46:75:68:d9:e8:f4:4a:ac:
86:2e:8c:ec:3a:9e:15:80:89:84:40:04:1c:5b:af:
01:cb:e0:64:a3:d0:5c:39:62:37:f2:9f:33:f3:db:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:55:E9:F9:41:30:1B:9C:D7:53:DF:6A:37:1F:66:16:52:D2:2F
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:29:ff:5e:b3:91:bd:d1:e4:0e:dc:e1:42:47:61:c9:75:a3:
ab:cb:f4:7b:42:4d:ea:52:61:ec:e4:56:67:ca:01:c8:b3:e6:
60:3b:a8:08:b3:db:68:0b:c8:96:c1:eb:34:81:d4:fb:cb:c2:
fe:bc:52:7b:8f:55:2d:b4:f5:13:a9:c4:10:ed:0e:5c:75:0a:
ac:1d:88:36:4b:0c:b5:36:7a:12:86:4c:d9:c7:21:3c:11:a6:
55:fa:7d:05:19:d3:39:2e:c5:2b:4a:a6:15:e7:16:6b:d1:c2:
9a:a4:de:a3:3a:69:1b:84:8d:a7:e9:71:ca:7f:d3:26:31:99:
cb:e8:91:e6:b3:d0:05:af:54:f8:ac:f6:44:f4:5b:e2:f1:69:
b2:7c:bf:c0:7f:ae:a4:36:4c:b5:a8:1f:8f:13:03:d5:61:ed:
6f:24:0f:7d:0a:e6:1e:18:a8:0b:ef:2f:7d:2c:fd:40:05:f6:
14:3c:58:17:d2:d5:8a:1a:db:98:4b:2e:b6:0b:30:7a:88:bd:
27:d7:a5:11:79:98:d4:fe:82:29:aa:b2:f6:a5:d0:53:cd:61:
21:a3:b7:ed:aa:51:fb:2b:81:89:76:3f:ef:f1:e7:7a:23:fd:
c4:cf:d0:e2:09:6f:04:1e:81:0e:27:f3:d8:2e:08:ff:2e:25:
49:f5:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:11 2025 by rpki-client