Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: wGobMZk+y1AZWEBtz1HVDrTJwBXDih7GSP4sQHM8YE4=
Subject key identifier: 87:47:2D:10:3F:AD:4F:90:28:D4:97:CA:E4:14:41:D0:1C:80:2D:A3
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 0199FB0F22C0844A7E152E3351A727A91BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 06:01:37 +0000
Manifest this update: Sun 19 Oct 2025 06:01:37 +0000
Manifest next update: Mon 20 Oct 2025 06:01:37 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: S8xQVuZyQjbn0chB5CYvOSbMlmwS9R5KhcsZsevNT0E=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:22:c0:84:4a:7e:15:2e:33:51:a7:27:a9:1b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Oct 19 06:01:37 2025 GMT
Not After : Oct 20 06:01:37 2025 GMT
Subject: CN=87472d103fad4f9028d497cae41441d01c802da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:c0:eb:6e:0d:d2:db:67:84:91:4c:5c:cb:
73:c3:64:56:59:a5:22:d7:5c:21:2b:7d:99:1c:41:
46:18:20:db:89:ab:b9:98:5c:4d:c2:29:36:31:47:
43:19:fa:17:3c:5d:36:7e:69:81:bf:70:4c:92:cb:
22:a8:97:24:ed:58:1e:a0:2a:3a:47:01:0c:c0:68:
04:8a:ab:f2:3e:43:1f:65:55:14:b2:6c:ad:f5:a3:
89:68:ca:c0:03:e7:af:24:4a:d7:d4:a3:a0:b5:f1:
8c:c3:75:58:e1:0d:89:94:15:1d:d0:d7:25:64:a3:
83:51:74:3f:2a:2c:bc:77:41:e1:05:f6:b6:73:07:
89:53:c7:c4:cb:0f:a0:84:67:3a:1b:08:51:55:b1:
05:c0:6c:08:77:ff:b0:15:92:ba:c5:2d:5d:79:58:
c5:07:9b:c9:d9:ac:49:68:de:a1:f0:28:e6:f2:04:
30:16:10:e3:8d:7c:2d:22:7b:39:7d:64:77:a6:4c:
f4:a2:02:57:85:d8:b8:c8:36:52:5f:fb:22:9d:7b:
a7:12:89:1e:c3:12:79:a0:2f:0e:27:8c:27:1c:a4:
cb:d4:27:72:09:3f:60:14:d2:b7:40:98:61:4a:87:
d5:8b:ec:e3:48:26:a4:1a:d8:94:02:18:69:c1:ff:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:2D:10:3F:AD:4F:90:28:D4:97:CA:E4:14:41:D0:1C:80:2D:A3
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:85:ed:91:68:ab:8d:ef:8f:cb:04:67:7f:a7:e9:42:da:5c:
16:fb:20:e1:a7:b1:fb:0d:01:b8:9a:b9:f6:3d:cf:2f:c6:5f:
11:92:72:70:86:a2:f6:fe:c0:f0:e6:ba:94:4d:f0:1b:3e:96:
52:c7:38:c5:11:c7:5d:25:b7:29:cc:31:57:c3:67:e2:17:9f:
75:b1:32:8c:b6:5d:66:e8:a2:eb:ab:d1:5d:1e:6f:1e:db:a8:
33:af:a9:dd:99:8b:e3:5f:ee:3c:df:92:be:10:0d:73:67:30:
00:35:df:61:8c:f7:c1:03:3f:e0:b2:88:c5:13:07:a8:3d:6f:
e6:14:93:8e:0f:28:2f:7e:93:ed:a8:40:02:2c:d9:cb:bb:57:
23:63:95:39:16:af:e5:0b:e1:5b:7b:50:68:a8:c2:95:ef:58:
59:19:d7:16:20:19:6d:71:9d:8f:63:a3:f5:0c:7b:66:5f:fa:
0b:85:4d:74:2f:21:79:b2:f6:37:b4:71:17:09:ce:c3:80:e9:
96:62:0c:c6:b9:1b:71:92:27:f1:12:20:9e:5e:41:85:03:fb:
06:87:00:0c:1f:6d:4b:85:7a:93:a2:6f:04:08:60:49:84:9e:
bb:d4:52:23:63:e2:85:d5:5d:34:5f:e7:c9:61:75:40:4b:84:
3f:e6:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:17 2025 by rpki-client