Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier: 9N2y8Wb8EzUgYu32xP7uRxE7uepAqEceunfiLuV38zo=
Subject key identifier: B6:86:51:92:BE:29:1A:58:A2:72:14:EF:4A:1E:00:F4:E8:A5:C2:27
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 0199FEB4ED62435032339B9ACF2D7FC2A1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number: 11E5
Signing time: Sun 19 Oct 2025 23:01:34 +0000
Manifest this update: Sun 19 Oct 2025 23:01:34 +0000
Manifest next update: Mon 20 Oct 2025 23:01:34 +0000
Files and hashes: 1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: wt4gUOGK3UNgm+6fkVUAxd2CWO/Hl9TLuwrv7n1PuXI=)
3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ed:62:43:50:32:33:9b:9a:cf:2d:7f:c2:a1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Oct 19 23:01:34 2025 GMT
Not After : Oct 20 23:01:34 2025 GMT
Subject: CN=b6865192be291a58a27214ef4a1e00f4e8a5c227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:3d:58:94:37:83:f7:04:ff:57:4f:b7:4b:
30:e9:36:ca:ba:95:d0:b9:d7:31:e3:08:a8:4f:3a:
53:bb:10:b7:5b:67:fc:8b:01:90:76:02:d2:29:57:
17:fc:0d:db:50:83:e9:11:6b:48:4e:55:b8:7b:50:
77:fc:3b:a7:0e:86:14:aa:73:6d:d5:43:9a:ca:62:
e2:4a:40:d2:ab:c4:78:19:1b:69:06:3d:e7:3c:34:
f6:8b:fd:c7:50:b1:1a:d2:3f:5e:5b:f1:23:9c:68:
2c:1a:55:a1:e4:0e:93:fd:8b:d2:af:fb:1a:fd:5d:
80:ea:70:a8:9f:9b:6e:f7:8c:f2:23:ca:cb:18:c4:
49:e9:64:6a:01:67:f9:d4:f7:0a:24:91:3a:02:da:
dd:43:46:48:a6:a0:17:05:b2:fd:ba:bb:c9:42:ac:
e9:6f:fe:2b:5c:34:79:b6:15:be:48:51:ec:fc:85:
d7:e5:ba:86:b8:8c:ac:c8:45:64:a0:f0:bb:f6:4f:
65:1e:d2:a3:dc:35:49:2b:01:f6:85:79:84:7e:83:
f4:93:74:d3:ce:aa:f9:9d:f2:32:7b:fc:e9:de:ef:
4c:62:85:67:c5:29:5d:5d:c3:ce:8c:18:97:71:2c:
73:bc:b8:30:a1:66:43:de:61:bf:5c:92:d2:c6:0e:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:51:92:BE:29:1A:58:A2:72:14:EF:4A:1E:00:F4:E8:A5:C2:27
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9f:94:dd:ae:f9:95:84:67:2b:79:b3:b0:d4:69:c1:f4:9f:
6e:d4:97:ec:eb:31:0f:24:0d:71:ff:3f:f0:6e:7e:f9:11:2c:
34:61:dc:64:a0:60:e0:54:34:3a:fe:55:c2:a9:11:ba:2a:e4:
37:70:27:54:74:14:ee:56:1e:9b:1e:7c:73:24:5b:61:db:61:
34:54:52:6e:33:32:63:aa:2f:e6:7c:71:a9:67:19:90:ee:9e:
c2:16:3d:de:b0:63:ca:d0:8b:91:c3:30:a6:1d:86:20:16:01:
e3:91:84:7a:d7:ce:9e:dd:8d:c7:41:b1:e3:08:cd:09:f9:63:
9a:00:78:89:8d:5f:93:06:41:1d:31:f9:a7:2f:73:4a:88:2a:
1f:b6:09:64:93:5a:ed:d2:f6:ae:0a:61:95:36:43:88:2a:04:
0c:fb:56:1b:09:fc:98:28:ba:55:97:b5:96:d4:d0:15:23:17:
ec:4b:65:94:f8:97:84:06:43:74:3d:ac:05:b7:7f:67:13:a0:
90:a4:34:3e:6a:f5:bd:12:02:da:73:69:ef:38:25:9d:14:7a:
74:2a:5e:39:2a:64:3a:36:32:fa:2d:92:56:7e:75:04:c7:18:
c7:44:25:35:22:b9:83:32:ad:8f:d0:88:e5:81:35:7c:a2:55:
5b:27:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:53 2025 by rpki-client