Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: Jr1xnY3XL14k0nLAaj8oIqHO1AnZn4kwFXB1Zyh8XrI=
Subject key identifier: 20:B5:71:E1:17:CF:2C:19:58:5A:D6:25:02:1E:19:2C:76:AD:3D:87
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 0199FB7CE244DA28564F5C5CEF3C195C8463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 0725
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: FpuhTfwOdSf21755rrSFTL20Tbk.roa (hash: X6w/yqAHbg5XsmgEDpJrMUNkNSsz78dV/DwakO4C27U=)
2: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: FyEyS3QZ5XW2KoDsOCg6JSNXsr5iD/IODW4kGMj1oXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e2:44:da:28:56:4f:5c:5c:ef:3c:19:5c:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=20b571e117cf2c19585ad625021e192c76ad3d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:38:5a:26:f8:06:d4:79:6f:80:a1:27:ac:
d8:0d:5d:bf:14:ce:bd:2d:e6:81:31:3c:49:2a:b4:
6f:32:7f:b7:21:36:56:2b:f2:4c:bc:5a:3b:cc:44:
fc:41:2c:28:d3:57:fc:5c:a1:0c:68:0d:ff:99:76:
e4:ff:25:62:72:24:4f:e7:00:b6:15:a6:3c:4f:9a:
36:f1:20:3f:48:42:38:dc:c1:37:36:cd:1b:f2:79:
66:bc:87:5c:0a:37:e5:36:f4:d2:2d:8c:f6:99:be:
ee:44:a6:50:4d:4a:e0:9f:f7:1f:97:85:01:2e:1a:
40:22:11:e7:c2:58:2c:ed:de:44:31:78:02:6e:25:
a4:4c:cf:3e:54:b9:c9:9b:9b:d9:0c:a1:b3:79:10:
88:18:70:36:89:99:ee:ef:91:e3:40:12:d7:a1:de:
05:48:cf:9b:d9:16:e7:bb:f0:8e:e9:30:59:45:a7:
41:1a:05:58:9b:fb:96:2e:ce:d2:b6:5d:49:87:4c:
fd:4a:03:3a:bf:a2:db:b3:b0:fa:0b:47:30:6f:e2:
10:df:d5:e2:21:b5:e1:dc:36:c2:75:6c:b0:21:b4:
6e:fb:db:db:e2:10:5d:6d:8a:22:48:5d:7b:63:98:
47:07:9a:cc:18:bd:f8:71:29:f1:57:77:06:7d:60:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:71:E1:17:CF:2C:19:58:5A:D6:25:02:1E:19:2C:76:AD:3D:87
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:05:30:36:81:f3:80:aa:e6:aa:bb:50:c4:7e:23:9f:0d:22:
ae:c0:7d:c8:1b:64:9f:f2:89:e2:20:52:8b:43:63:85:35:c2:
1a:a4:5a:6c:b2:0b:6b:fb:71:ae:c5:10:74:fb:75:ac:c9:31:
8d:3b:6e:37:4a:b5:ea:62:d2:52:f5:c2:40:ad:05:8c:e4:1d:
66:39:c1:e3:d4:06:e0:30:c6:46:89:b2:b8:a4:17:e8:45:d1:
53:1e:52:f1:b8:95:a4:b9:cb:98:ec:34:14:78:9a:a9:ad:cc:
b5:a1:39:d9:ca:04:8d:fb:9a:2e:9b:62:fe:e6:3d:d8:35:db:
7b:b2:3d:18:94:77:d9:6e:44:2a:41:37:e2:1b:a9:43:18:3a:
de:4a:1b:7c:df:ee:7d:48:23:64:e8:d3:12:60:36:21:6b:ee:
a8:eb:c9:8b:bf:c0:d0:1d:f3:f3:e1:22:b9:e6:88:e9:a3:d9:
42:37:6e:db:0c:16:65:a6:f6:83:50:5a:69:58:11:96:28:9e:
e9:68:d0:91:c9:c4:5d:c6:4e:6a:bb:8f:3b:61:d3:10:84:1a:
8d:8a:b2:f1:48:9a:f8:67:46:3a:21:73:8d:c1:d3:3a:fd:58:
58:e7:1f:55:2b:c1:95:cf:d3:29:87:2d:95:84:b3:dc:85:8f:
4c:67:51:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:01 2025 by rpki-client